Configuring an AD domain

Prerequisites

• An AD domain has been set up.
• An external DNS server has been configured. For details, see Configuring a DNS Server.
• All storage nodes have been connected to the DNS server.
• The AD domain server and DNS server have time synchronized with the storage system and the time difference must be no larger than 5 minutes.
• Ports 88 (TCP protocol), 389 (TCP protocol), 445 (TCP protocol), 464 (UDP protocol), and 636 (TCP protocol) are enabled between the storage system and the AD domain.

Precautions

• When Overwrite System Name is enabled, if a system name entered exists in the AD domain controller, the information about the current storage system will overwrite the information about the storage system corresponding to the system name on the AD domain controller.
• A simple password may result in security issues. A complex password that contains uppercase letters, lowercase letters, digits, and special characters is recommended.
• You are advised to use physical isolation and end-to-end encryption to ensure security of data transfer between the AD domain server and clients.

Procedure

1. Choose Resources > Access > Account.
2. Click the name of the desired account. On the page that is displayed, click the Domain Configuration tab.
3. Select AD and click Configure.

   The Configure AD Domain page is displayed on the right.

4. Configure the AD domain.
   1. Configure basic information. Table 1 describes related parameters.

      Table 1 Basic AD domain information

      Parameter	Description
      Domain Administrator Username	User name of the AD domain server administrator.
      Password	Password of the AD domain server administrator.
      Full Domain Name	Full domain name of the AD domain server. NOTE: You can click Test to test the validity of the full domain name.
      Organization Unit	Organization unit of a type of directory objects in the domain. These objects include users, computers, and printers. After an object joins the domain, it will be a member in the organization unit. If this parameter is left empty, objects join the Computers organization unit by default.
      System Name	Name of the storage system in the AD domain. After the storage system is added to the domain, the client can use the name to access the storage system. NOTE: If the system name used for joining the domain exists in the domain controller and the Overwrite System Name function is disabled in the storage system, joining the AD domain will fail.
      Overwrite System Name	If a storage system with the same name exists in the domain controller, enabling this function will overwrite the original storage system name. NOTICE: After this function is enabled, information about the storage system with the same system name in the domain controller will be overwritten. As a result, the authentication between the storage system and domain controller corresponding to the system name will be affected.
      Domain Status	Whether the storage system is added to the domain.

   2. Click Join Domain.

Follow-up Procedure

• If there are multiple domain controllers in an AD domain, time synchronization is required between the domain controllers. After the storage system is added to the domain, you are advised to wait for about 2 minutes before accessing shares as a domain user.
• If you want to add a storage system that has been removed from an AD domain to the AD domain again, you are advised to wait for about 2 minutes after the removal and then add the storage system to the domain.

• If you want to remove a storage system from an AD domain, perform the following operations:

1. Specify Domain Administrator Username and Password.
2. Click Exit Domain.

   Confirm your operation as prompted.

3. Click Close.