Configure AD/DNS in the Cloud Storage Gateway console - Cloud Storage Gateway

This topic describes how to configure Active Directory (AD) and DNS in the Cloud Storage Gateway console.

Prerequisites

The IP address of the AD domain server is configured as the primary DNS server, and the IP address of the original DNS server is retained.
You have configured the AD server. For more information, see Build an AD domain on a Windows instance.

Important

Only one type of user, an AD domain user or a local user, can be active at a time. When you join or leave an AD domain, the user permissions for Common Internet File System (CIFS) shares are automatically deleted.

Background information

Active Directory (AD) is a directory service that uses standard application protocols to access and modify data in directory services over an Internet Protocol (IP) network. You can select the AD service that you want to join and configure it.

Starting from V1.0.36, you can configure AD and DNS in the Cloud Storage Gateway console.
The AD feature is supported on 64-bit Windows Server 2016 Datacenter Edition and Windows Server 2012 R2 Datacenter Edition.

Configure AD

In the Cloud Storage Gateway console, go to the Gateways page. Find and click the name of the target gateway, and then click AD/DNS > Join AD.
On the Join Windows Active Directory (AD) page, configure the following parameters and click Confirm.
- Server IP: Enter the IP address of the AD server.
- Username: Enter the administrator username.
- Password: Enter the administrator password.
After the gateway successfully connects, the status of Connected in the Windows Active Directory (AD) section changes to Yes.
Note
- After you join the Windows Active Directory (AD), the local user permissions for the Server Message Block (SMB) share are removed.
- Cloud Storage Gateway does not support multiple AD domain controllers. For example, you can configure a gateway for a parent domain or a subdomain, but not for both at the same time.
- After a Cloud Storage Gateway joins an AD domain, you can query user information only through the AD domain controller.

Related operations

On the AD/DNS page, you can perform the following operations.

Operation	Description
End AD connection	In the Windows Active Directory (AD) section, click End Connection to end the AD connection.
Switch DNS server	Click Switch DNS Server to set the DNS server IP addresses. Note To join an AD domain, add the IP address of the domain controller to the top of the DNS server list and keep the original DNS server configuration.