This topic describes how to configure Active Directory (AD) and DNS on the Cloud Storage Gateway (CSG) console. It covers updating DNS servers, joining a gateway to an AD domain, and leaving an AD domain.
You can use either AD domain users or local users for authentication, but not both at the same time. Joining or leaving an AD domain automatically removes all existing user permissions for the SMB share.
Prerequisites
An Active Directory domain server is available. For instructions, see Set up an AD domain on a Windows instance.
Background
Active Directory (AD) is a directory service that uses standard protocols to access and manage data on an IP network. You can configure your gateway to join an AD service for centralized user authentication.
Starting from version 1.0.36, the CSG console supports AD and DNS configuration.
The AD integration feature is supported on 64-bit Windows Server 2016 Datacenter Edition and Windows Server 2012 R2 Datacenter Edition.
Update DNS servers
If you need to join the gateway to an AD domain, configure the gateway DNS service as follows:
If your domain controller and DNS server are deployed on the same host, configure the gateway's DNS service in the following format:
<domain_controller_IP>,100.100.2.136,100.100.2.138Deploying the domain controller and DNS server on different hosts is not currently supported. This capability is planned for a future release.
The IP addresses 100.100.2.136,100.100.2.138 are the gateway's internal DNS servers.
On the Gateways page of the CSG console, click the target gateway, and then click .
On the Update DNS Server page, enter the IP address of the AD domain controller or DNS server, and then click OK.
Join an AD domain
On the Gateways page of the CSG console, click the target gateway, and then click .
On the Join Windows Active Directory (AD) page, specify the following parameters and click OK.
Server IP: Enter the IP address of your AD server.
Username: Enter the administrator username.
Password: Enter the password for the administrator account.
After a successful connection, the Connected status in the Windows Active Directory (AD) section changes to Yes.
NoteJoining the AD domain removes all local user permissions for the current SMB share.
CSG does not currently support joining a gateway to multiple domain controllers, such as a parent domain and a child domain.
After the gateway joins an AD domain, you can query user information only through the domain controller.
Leave an AD domain
On the Gateways page of the CSG console, click the target gateway, and then click the tab.
In the Windows Active Directory (AD) section, click Disconnect to leave the AD domain.
Related topics
How do I configure read/write permissions for domain users who access shared resources?