Sun Storage 5210 NAS Appliance
 
Sun Storage 5220 NAS Appliance
 
Sun Storage 5310 NAS Appliance
 
Sun Storage 5320 NAS Gateway/Cluster System
 
Sun Storage 5320 NAS Appliance
 
Sun Storage 5310 NAS Gateway System
 

GCS>Sun Microsystems>Storage - Disk>Network Attached Storage
 

• Publishing shares to Active Directory.
• Using DNS resolution rather than NetBIOS to join a Windows Domain
• Creation of Dynamic DNS entries

Note that locating the domain controller via DNS removes the requirement for WINS servers and/or local master browser systems.

Active Directory relies on the domain name service (DNS) to provide name resolution services. Active Directory is integrated with Dynamic DNS, enabling clients to dynamically update their entries in the DNS database. The steps to configure the Sun StorageTek[TM] NAS for Active Directory and Dynamic DNS are detailed below.

1. Connect to the Sun StorageTek NAS through Telnet or a serial console.
2. If running OS version 4.20 or older, press Enter at the [menu] prompt and type the administrator password. If running OS version 4.21 or newer, enter the password and type "menu"
3. Press the spacebar until "ADS" setup displays under Extensions at the lower right.
4. Select the letter corresponding to ADS setup.
5. In the Active Directory screen configure the options as follows:

• Enable ADS.
• ADS Domain -  The fully qualified name of the Windows domain. DO NOT use the short NetBIOS name.
• User - A Windows user account name with rights to update ADS. Specifically, the user needs rights to publish shares and create a computer account. If the computer account already exists (pre-staged account), then the user needs only permission to join an existing account to the domain. For details on using a pre-staged computer account with the NAS, see <Document: 1017781.1> .
• Password - Password for this account.
• User Container - The ADS container that is the location of the above user account. Note that this has nothing to do with the location of the NAS computer account. This will always be ou=computers, unless a prestaged account is used, as described in the link two steps above. The container should be entered using the LDAP distinguished name, without domain, for example, ou=users
• ADS Site - Enter the local ADS site if different from ADS domain. Usually left
  blank.
• Kerberos Realm - Name of Kerberos realm for secure AD and DNS. This is usually, but not always the ADS domain name.
• KDC Server - Host name for Key Distribution Center (KDC) server, usually a
  domain controller. This field can usually be left blank because it can normally
  be resolved by DNS.

All of the above ADS configuration must be in place before configuring Dynamic DNS.

To Configure DNS/Dynamic DNS:

NOTE: If your ADS domain name does not match your DNS domain name, you must be running operating system version 4.21M1 or later in order for the Active Directory integration to properly complete.

1. Return to the main menu by pressing the Esc key.
2. Select option H, DNS & Syslogd.
3. Select option 1, Edit Fields.
4. Use the Enter or Tab key to navigate through the fields.
5. Ensure that DNS is set up, with the correct and complete domain name and servers configured. DNS configuration is generally easiest when the Active Directory server is also configured as the DNS server. This effects the creation of all the required DNS records. It is possible to use an external DNS server, but extra care must be taken to ensure that all of the required DNS records are created. For a list of the DNS requirements, including a list of all required records, see <Document: 1004157.1> .
6. Select option Y for ?Yes? to enable Dynamic DNS. (NOTE: It is possible to integrate with AD without Dynamic DNS enabled, but it is strongly recommended to configure this if possible.)
7. Type a user name and password with sufficient rights to perform secure DNS
   updates.
8. After configuring desired options, select option 7, Save Changes.

After you have successfully configured these settings, it is necessary to access the Domain Configuration screen and join the domain to complete the process. See <Document: 1008222.1> for details on this step.

This configuration process can also be completed using the Web Admin GUI. All of the options described above are available.

This solution has no attachment