Buffalo LS441D1604-EU [31/105] User authentication with an external smb server

11 Enable "Access Restrictions".

12 Select the level of access for "Domain Users" or "Domain Groups" you added.

: Read and write access allowed : Read access allowed : Access prohibited

13 Click OK.

Notes:

• If you change the LinkStation's name, you will no longer be able to use domain users and groups or access

restrictions. To repair this, rejoin the domain.

• If both read-only and read & write permissions are given to a user, the user will have read-only access. The

most restrictive attribute will apply.

• If a domain username is more than 20 bytes long, the LinkStation truncates it to 20 bytes.

• The LinkStation supports a domain environment with a maximum of 1000 users and 1000 groups. 10,000

users and 10,000 groups can be downloaded from the domain controller but are not supported.

• To use the LinkStation as a member server in an NT domain, the LinkStation should be logged in to the

domain and accessed from a computer that is not a member of the domain with a valid domain account.

• If the LinkStation is a member server of an NT domain, you cannot connect as a guest user via AFP.

• When you change the user or group settings on the domain controller, these changes may not take effect

immediately on the LinkStation until it is rebooted.

• If your LinkStation is a member server in an NT domain and you change the authentication method to

"Workgroup", the account on the domain controller will not be deleted automatically.

• If the LinkStation has joined a domain network, you cannot connect to it via FTP.

• Don't disable the SMB protocol while an NT domain server is used for access restrictions. If you do, you will

need to enable SMB again and reconfigure the NT domain settings from scratch.

• At this time, only global groups are imported from the NT domain. Local groups on the NT server are not

imported. This behavior will be corrected in a future firmware update.

User Authentication with an External SMB Server

LinkStations on your network can be linked to an authentication server for centralized management of user

accounts and passwords. The authentication server should be another TeraStation or LinkStation. Other external

SMB authentication servers are not supported.

Notes:

• Disable SMB2 before using external authentication.

• Access restrictions for local users and groups will still apply to shared folders if an external SMB server is used

for authentication.

• The procedure below contains methods to automatically register external users. You can also manually add

external users by converting them from local users. Refer to the “Converting Local Users into External Users”

section above for more details on converting local users.

1 In Advanced Settings, click Network.

2 Click to the right of "Workgroup/Domain".

3 Click Edit.