How can I access vservers over | NetApp | Page 1

fallen geyser Jan 17, 2023, 11:17 PM

#

Can I access the cluster and other vservers using an active directory account (ssh/http/ontapi) and still leave CIFS set to workgroup auth? Or when CIFS is configured for domain auth is there anyway to fall back to workgroup auth if DNS is down?

slate sun Jan 18, 2023, 12:11 AM

#

Domain authentication tunnel is what you want. Then you can leave cifs non configured.

fallen geyser Jan 18, 2023, 12:33 AM

#

Thank you. Where would I configure the domain information if I left CIFS set to workgroup? Domain tunnel doesn’t appear to accept any parameters.

fallen geyser Jan 18, 2023, 3:52 PM

#

I tried to use vserver active-directory create but it’s complaining that a CIFS server already exists. Is there a way to enable domain login alongside a workgroup auth CIFS server?

#

Basically I want to continue mapping the filer shares on windows using the local workgroup credentials, but I also want to access the vservers using a domain account and it seems like it’s either one or the other.

knotty thorn Jan 18, 2023, 5:52 PM

#

You'll want to look at security login domain-tunnel create for authenticating users to the cluster

warm lotus Jan 18, 2023, 6:34 PM

#

https://kb.netapp.com/Advice_and_Troubleshooting/Data_Infrastructure_Management/ONTAP_System_Manager/How_to_configure_System_Manager_for_authentication_using_domain_user_or_group

NetApp Knowledge Base

How to configure System Manager for authentication using domain use...

KB covers the procedure to configure System Manager for authentication using domain user or group. Active Directory users and groups can be used to authenticate into ONTAP System Manager.

#

Take a look at that KB.

fallen geyser Jan 18, 2023, 6:38 PM

#

Thank you. Testing this out now!

#How can I access vservers over