Table of ContentsLibraryView in Frames

Configuring SnapDrive pass-through authentication for RPC

If you are using RPC authentication, you might need to configure pass-through authentication for SnapDrive for Windows between a Windows host and a storage system.

Before You Begin

  • You must have root privileges on the storage system.
  • You must have administrator privileges on the Windows host.
  • If you have a clustered SnapDrive configuration, you must use a domain account to run the cluster service, and all nodes of the cluster must be in the same domain. However, the storage system can be in a different domain or workgroup.

Considerations

You might need to use pass-through authentication for one of the following reasons:
  • You do not have a domain controller available.
  • You want to install your Windows host as a stand-alone server in a workgroup environment without any dependency on another system for authentication, even if there is a domain controller available.
  • Your Windows host and the storage system are in two different domains.
  • Your Windows host is in a domain and you want to keep the storage system in a workgroup with no direct access by domain users or the domain controller.

Steps

  1. Create a user account on the storage system by entering the following command: useradmin user add user_name -g group

    user_name is the name of the SnapDrive user.

    -g is the option you use to specify a user group.

    group is the name of the group to which you want to add the new user.

    Example

    The following example adds a user called "snapdrive" to the BUILTIN\Administrators group on the storage system: useradmin user add snapdrive -g Administrators

    Note: You will need to provide this user name in a later step in this procedure. Therefore, make a note of the user name, including the letter case (lowercase or uppercase) of each character in the user name.

  2. Enter a password, when prompted to do so, for the user account you are creating. You are prompted to enter the password twice.

    Note: You need to provide this exact password in a later step in this procedure, so make a note of the password, including the letter case.

  3. Check to ensure that the user account you just created belongs to the local administrator's group on the storage system by entering the following command: useradmin user list

    For additional information, see the section about creating local groups on the storage system in the Data ONTAP File Access and Protocols Management Guide.

  4. On each Windows host that needs access to the storage system, create a local user account with administrative rights on the host, using the same user name and password that you specified in Step 1 and Step 2.

    Tip: Set up the local user account so that the password for the account never expires.

    For detailed instructions on how to create local user accounts, see your Windows documentation.