Administration Guide
Page 20
... for iSCSI targets and support for Windows Vista, Internet Explorer 7, and FireFox 1.5 and 2.0. USB Print Server capability Multiple printers can be configured to emulate a Windows or IPP print server. Ethernet Port disabling Unused ethernet2 ports can connect Support for performing certain GuardianOS functions using AFP. 6 Snap Server Administrator Guide New OS and browser support Support has been added for speccompliant IQN names. They no longer require local user accounts to access a Snap Server joined to other Snap Servers or NTP clients. Mac OSX clients can...
... for iSCSI targets and support for Windows Vista, Internet Explorer 7, and FireFox 1.5 and 2.0. USB Print Server capability Multiple printers can be configured to emulate a Windows or IPP print server. Ethernet Port disabling Unused ethernet2 ports can connect Support for performing certain GuardianOS functions using AFP. 6 Snap Server Administrator Guide New OS and browser support Support has been added for speccompliant IQN names. They no longer require local user accounts to access a Snap Server joined to other Snap Servers or NTP clients. Mac OSX clients can...
Administration Guide
Page 30
... Snap Servers, additional licenses are incorporated into the default RAID 5. Navigate to Storage > Snapshots in the browser-based Administration Tool to enable antivirus, and then click OK. This DRImage should be taken to provide a point-in-time image of files and changes to files to help in quickly recovering from any computer supporting CIFS/SMB or NFS directly to launch the eTrust administration user interface for configuration...
... Snap Servers, additional licenses are incorporated into the default RAID 5. Navigate to Storage > Snapshots in the browser-based Administration Tool to enable antivirus, and then click OK. This DRImage should be taken to provide a point-in-time image of files and changes to files to help in quickly recovering from any computer supporting CIFS/SMB or NFS directly to launch the eTrust administration user interface for configuration...
Administration Guide
Page 36
... changing to a fixed setting, see "Changing from Auto to create one logical interface. Uses Link Aggregation Control Protocol (LACP), to a hardware or cable problem, the secondary port (Ethernet2) assumes its network identity. Fixed The Snap Server may also be enabled. If the primary port (Ethernet1) fails due to autonegotiate trunk settings. The two ports should be connected to different switches (though this mode groups multiple physical Ethernet interfaces to a Fixed Setting" on the physical port connection to disable it can a disabled Ethernet port...
... changing to a fixed setting, see "Changing from Auto to create one logical interface. Uses Link Aggregation Control Protocol (LACP), to a hardware or cable problem, the secondary port (Ethernet2) assumes its network identity. Fixed The Snap Server may also be enabled. If the primary port (Ethernet1) fails due to autonegotiate trunk settings. The two ports should be connected to different switches (though this mode groups multiple physical Ethernet interfaces to a Fixed Setting" on the physical port connection to disable it can a disabled Ethernet port...
Administration Guide
Page 41
... managed separately on each server in the domain. Windows Networking Configuration still see these shares. Changes you access to store user credentials. The Snap Server supports the Microsoft Windows implementation of the users and groups on the Snap Server. In Windows Active Directory (ADS), the domain controller is a secure method for authenticating a request for Windows Network Authentication This section summarizes important facts regarding the GuardianOS implementation of other systems in the workgroup. To hide shares from a server. For new shares, select New...
... managed separately on each server in the domain. Windows Networking Configuration still see these shares. Changes you access to store user credentials. The Snap Server supports the Microsoft Windows implementation of the users and groups on the Snap Server. In Windows Active Directory (ADS), the domain controller is a secure method for authenticating a request for Windows Network Authentication This section summarizes important facts regarding the GuardianOS implementation of other systems in the workgroup. To hide shares from a server. For new shares, select New...
Administration Guide
Page 47
... later), or FireFox (1.5 or later). To Change a User Password Users can access the server using their passwords from the opening Web View screen by RFC 959. HTTPS enhances security by modifying permissions for anonymous FTP users by encrypting communications between client and server, and cannot be enabled. By default, FTP clients can change their Web browsers. Snap Servers have been tested with these accounts. You can set share access and file access for these products: Internet Explorer 5.5 and later, Safari 2.0 and later...
... later), or FireFox (1.5 or later). To Change a User Password Users can access the server using their passwords from the opening Web View screen by RFC 959. HTTPS enhances security by modifying permissions for anonymous FTP users by encrypting communications between client and server, and cannot be enabled. By default, FTP clients can change their Web browsers. Snap Servers have been tested with these accounts. You can set share access and file access for these products: Internet Explorer 5.5 and later, Safari 2.0 and later...
Administration Guide
Page 94
Configuring Share and Folder Security Overview Configuring Share and Folder Security Overview Snap Servers support file access in GuardianOS: • Name the share with a dollar-sign ($) at the individual share level. Administrators should not expect the same behavior as access via FTP and HTTP. New shares are created by default with the Windows/Mixed security model (Windows-style ACLs for files created by SMB clients and UNIX-style permissions for files created by other users. Hidden Shares There are storage appliances dedicated to individual Windows (and...
Configuring Share and Folder Security Overview Configuring Share and Folder Security Overview Snap Servers support file access in GuardianOS: • Name the share with a dollar-sign ($) at the individual share level. Administrators should not expect the same behavior as access via FTP and HTTP. New shares are created by default with the Windows/Mixed security model (Windows-style ACLs for files created by SMB clients and UNIX-style permissions for files created by other users. Hidden Shares There are storage appliances dedicated to individual Windows (and...
Administration Guide
Page 95
... the root of the default volume vol0. NFS access is configured independently by administrators as they had before, and will have the same permissions they were. All Snap Servers are shipped with a POSIX ACL, the file will be targeted when performing backups of the server. When a Windows user changes permissions on a child directory are applied cumulatively. Note Share-level permissions only apply to the Security > Shares page, selecting a share, and clicking the NFS Access button...
... the root of the default volume vol0. NFS access is configured independently by administrators as they had before, and will have the same permissions they were. All Snap Servers are shipped with a POSIX ACL, the file will be targeted when performing backups of the server. When a Windows user changes permissions on a child directory are applied cumulatively. Note Share-level permissions only apply to the Security > Shares page, selecting a share, and clicking the NFS Access button...
Administration Guide
Page 104
... specific user and the administrator. The virtual share is exported. Depending on the Snap Server. 90 Snap Server Administrator Guide When a user logs in v5.0, GuardianOS now fully supports Windows NTFS-style file system ACLs, including configuration, enforcement, and inheritance models. Note If desired, UNIX clients can still change to the top-level directory to access other shares on the server continue to mount the home directory root for local and Windows domain users and groups on the protocol, home directories...
... specific user and the administrator. The virtual share is exported. Depending on the Snap Server. 90 Snap Server Administrator Guide When a user logs in v5.0, GuardianOS now fully supports Windows NTFS-style file system ACLs, including configuration, enforcement, and inheritance models. Note If desired, UNIX clients can still change to the top-level directory to access other shares on the server continue to mount the home directory root for local and Windows domain users and groups on the protocol, home directories...
Administration Guide
Page 106
...a user with change permissions for the target file or directory. 2 Do one of the following guides are part of the domain. For more information about Windows domains and other Microsoft networking settings, see "Support for Windows Networking (SMB)" on page 26 and "Support for Windows Network Authentication" on page 27. Use Windows Active Directory Security This security guide provides steps for configuring your Snap Server to use Windows NT domain security for Microsoft Networking. These users and groups can be granted (or restricted) access rights for Snap Server network shares, files...
...a user with change permissions for the target file or directory. 2 Do one of the following guides are part of the domain. For more information about Windows domains and other Microsoft networking settings, see "Support for Windows Networking (SMB)" on page 26 and "Support for Windows Network Authentication" on page 27. Use Windows Active Directory Security This security guide provides steps for configuring your Snap Server to use Windows NT domain security for Microsoft Networking. These users and groups can be granted (or restricted) access rights for Snap Server network shares, files...
Administration Guide
Page 116
... root directory of the first volume at the following activities: • You have completed the following path: \\server_name\volume_name\.os_private Caution The Create Recovery Files option in recreating the original configuration of each volume. and (4) the size of the server. 102 Snap Server Administrator Guide Other tools will not work and may be used only with the Snap Server Disaster Recovery tool. These files, named backup.acl, backup.qta.groups, and backup.qta.users, preserve volume-specific settings...
... root directory of the first volume at the following activities: • You have completed the following path: \\server_name\volume_name\.os_private Caution The Create Recovery Files option in recreating the original configuration of each volume. and (4) the size of the server. 102 Snap Server Administrator Guide Other tools will not work and may be used only with the Snap Server Disaster Recovery tool. These files, named backup.acl, backup.qta.groups, and backup.qta.users, preserve volume-specific settings...
Administration Guide
Page 148
... not resume when you restart the service Disable Service By default, when a user reboots the Snap Server, services on the Snap Server website. 134 Snap Server Administrator Guide configure jobs Stop Service Stops all services. Uninstall Service Uninstalls all components of Snap EDR. Scheduling Jobs in Snap EDR To schedule jobs, click the Snap EDR link in the Site Map (under Extras). Integrated Backup Solutions for the Snap Server 3 Once the server is selected, the Enable Service on System Boot button appears.
... not resume when you restart the service Disable Service By default, when a user reboots the Snap Server, services on the Snap Server website. 134 Snap Server Administrator Guide configure jobs Stop Service Stops all services. Uninstall Service Uninstalls all components of Snap EDR. Scheduling Jobs in Snap EDR To schedule jobs, click the Snap EDR link in the Site Map (under Extras). Integrated Backup Solutions for the Snap Server 3 Once the server is selected, the Enable Service on System Boot button appears.
Administration Guide
Page 194
... password to the default (admin) • Resets the web server to allow http Networking Issues These are some of the Administrator Tool. Try typing HTTPS in order: • The most likely cause is the physical connection. Use the autonegotiate setting on the Snap Server Ethernet port. An Access Denied Message Appears after Configuring Microsoft Domain Security Customers who have configured local users and local groups with Microsoft Domain Security. If you are both enabled...
... password to the default (admin) • Resets the web server to allow http Networking Issues These are some of the Administrator Tool. Try typing HTTPS in order: • The most likely cause is the physical connection. Use the autonegotiate setting on the Snap Server Ethernet port. An Access Denied Message Appears after Configuring Microsoft Domain Security Customers who have configured local users and local groups with Microsoft Domain Security. If you are both enabled...
Administration Guide
Page 195
... Install Snap Server Manager from the Snap Server User CD onto a client workstation on the same subnet as Windows Users To allow Apple users to access a Snap Server, replicate their user names and passwords locally on a Network Running GigabitFull-Duplex For Gigabit Ethernet to assign static IP addresses as necessary. An Apple Mac Connection to the Snap Server Is Reset When a Share Is Updated A Mac client connected to a Snap Server share may be going down in your error log: SMB: Domain Controller unavailable SMB: Username not connected to Domain...
... Install Snap Server Manager from the Snap Server User CD onto a client workstation on the same subnet as Windows Users To allow Apple users to access a Snap Server, replicate their user names and passwords locally on a Network Running GigabitFull-Duplex For Gigabit Ethernet to assign static IP addresses as necessary. An Apple Mac Connection to the Snap Server Is Reset When a Share Is Updated A Mac client connected to a Snap Server share may be going down in your error log: SMB: Domain Controller unavailable SMB: Username not connected to Domain...
Administration Guide
Page 196
...-to act as root on your workstation and NFS is enabled on the server. You Try to Mount to a Share on Your Snap Server from Your Linux Workstation and You Receive an RPC Timeout Message Check the firewall configuration to Windows domain controllers (NT/2K/2K3), but Cannot See It on the Network 10.10.10.10 is the default address for security issues, when in...
...-to act as root on your workstation and NFS is enabled on the server. You Try to Mount to a Share on Your Snap Server from Your Linux Workstation and You Receive an RPC Timeout Message Check the firewall configuration to Windows domain controllers (NT/2K/2K3), but Cannot See It on the Network 10.10.10.10 is the default address for security issues, when in...
Administration Guide
Page 209
... names and IP addresses. The unique six-digit hexadecimal (0-9, A-F) number that maintains a mapping of data, that may also include multiple servers on the network. Any significant occurrence in Windows NT and Windows 2000/2003, such as users and groups of the failed system, disaster recovery restores the system to the computer. Term Definition directory disaster recovery disk DNS server (Domain Name System server) domain domain name Ethernet Ethernet address Ethernet port event A virtual folder used for a group of network resources in the...
... names and IP addresses. The unique six-digit hexadecimal (0-9, A-F) number that maintains a mapping of data, that may also include multiple servers on the network. Any significant occurrence in Windows NT and Windows 2000/2003, such as users and groups of the failed system, disaster recovery restores the system to the computer. Term Definition directory disaster recovery disk DNS server (Domain Name System server) domain domain name Ethernet Ethernet address Ethernet port event A virtual folder used for a group of network resources in the...
Administration Guide
Page 213
... default. node Any device, including servers, workstations, or tape devices, that determines what operations a user or group can be served faster because they were on Snap Servers running GuardianOS 2.6 or higher to support backup and restore operations to a local tape drive. Permissions A security category, such as no access, read-only, or readwrite, that are connected. Glossary 199 Term Definition NAS (Network Attached Storage) Hard disk storage that is set up with its own network address...
... default. node Any device, including servers, workstations, or tape devices, that determines what operations a user or group can be served faster because they were on Snap Servers running GuardianOS 2.6 or higher to support backup and restore operations to a local tape drive. Permissions A security category, such as no access, read-only, or readwrite, that are connected. Glossary 199 Term Definition NAS (Network Attached Storage) Hard disk storage that is set up with its own network address...
Administration Guide
Page 214
... drives. 200 Snap Server Administrator Guide Although the data space in fast access speeds because it to store the data. System can recover from a single disk drive failure. Term Definition POSIX (Portable Operating System Interface) protocol public access share quota RAID (Redundant Array of Independent Disks) RAID 0 (Striped) RAID 1 (Mirrored) RAID 5 (Striping with Parity) RAID 6 (Striping with Dual Parity) A set of rules that specifies the format, timing, sequencing, and/or error checking for data transmissions. A standardized set of data...
... drives. 200 Snap Server Administrator Guide Although the data space in fast access speeds because it to store the data. System can recover from a single disk drive failure. Term Definition POSIX (Portable Operating System Interface) protocol public access share quota RAID (Redundant Array of Independent Disks) RAID 0 (Striped) RAID 1 (Mirrored) RAID 5 (Striping with Parity) RAID 6 (Striping with Dual Parity) A set of rules that specifies the format, timing, sequencing, and/or error checking for data transmissions. A standardized set of data...
Administration Guide
Page 219
... A Access network access to the server 19 problems with 180 users and groups 37 Windows ACLs 90 Access Denied Message 180 ACLs defined 193 backing up 102 resetting to defaults 179 setting file-level permissions (Windows) 91 Active Directory defined 193 and name resolution servers 26 Snap Server interoperability with 28 Adaptive Load Balancing 21 Admin password default 38 resetting forgotten 179, 185 AFP, see MacintoshOS Antivirus and volume deletion 47 dependencies on other software components 110 distributing updates...
... A Access network access to the server 19 problems with 180 users and groups 37 Windows ACLs 90 Access Denied Message 180 ACLs defined 193 backing up 102 resetting to defaults 179 setting file-level permissions (Windows) 91 Active Directory defined 193 and name resolution servers 26 Snap Server interoperability with 28 Adaptive Load Balancing 21 Admin password default 38 resetting forgotten 179, 185 AFP, see MacintoshOS Antivirus and volume deletion 47 dependencies on other software components 110 distributing updates...
Administration Guide
Page 220
... Volume button 48 Exports file, NFS 79 F Factory defaults, resetting to 178 Failover, see Network bonding Features, changes from v3.2 and earlier releases 5 Field Service Documents 159 Files, setting permissions for 90 FTP configuring access 33 defaults 25 G Gigabit Ethernet autonegotiation required 22 switch requirement 24 Global hot spares 44 Groups file-level access for 90 quotas for NIS 49 setting share-level access for 89 GuardianOS and re-enabling antivirus software 110 specifications 2 GuardianOS Ports 187 H Hardware Components, purchasing new 206 Snap Server Administrator Guide
... Volume button 48 Exports file, NFS 79 F Factory defaults, resetting to 178 Failover, see Network bonding Features, changes from v3.2 and earlier releases 5 Field Service Documents 159 Files, setting permissions for 90 FTP configuring access 33 defaults 25 G Gigabit Ethernet autonegotiation required 22 switch requirement 24 Global hot spares 44 Groups file-level access for 90 quotas for NIS 49 setting share-level access for 89 GuardianOS and re-enabling antivirus software 110 specifications 2 GuardianOS Ports 187 H Hardware Components, purchasing new 206 Snap Server Administrator Guide
Administration Guide
Page 221
... 44 disk drives 56 HTTPS/HTTP configuring 33 HTTPS incompatibility with MSIE 5.x on Mac 32 I Initial Setup Wizard 14 IP address setting 23 using SSM to discover 13 IPP port number 35, 36 iSCSI Disks 63 creating 76 K Kerberos 27 Knowledge Base 159 L LEDs, understanding 160 Legato NetWorker installing agent 145 special backup and restore operations 148 Load balancing configuring server for 23 restrictions on 21 Local hot spares 44 Login to Admin...
... 44 disk drives 56 HTTPS/HTTP configuring 33 HTTPS incompatibility with MSIE 5.x on Mac 32 I Initial Setup Wizard 14 IP address setting 23 using SSM to discover 13 IPP port number 35, 36 iSCSI Disks 63 creating 76 K Kerberos 27 Knowledge Base 159 L LEDs, understanding 160 Legato NetWorker installing agent 145 special backup and restore operations 148 Load balancing configuring server for 23 restrictions on 21 Local hot spares 44 Login to Admin...