Active Directory server to join, with the DNS server of the VAST Cluster able to resolve the _ldap and _kerberos SRV records of the Active Directory (AD) domain.
The DNS server IP of the cluster is specified during installation. For assistance with verifying or changing DNS configuration, please contact VAST Data Support.
For a view that you want to expose to SMB clients, begin by joining the cluster to Active Directory and configuring an LDAP connection to the Active Directory server. See Joining Active Directory.
Client users should have user accounts defined on the Active Directory server.
After you have joined the Active Directory domain, add HOST SPN attributes to the cluster's machine account. The HOST SPN is needed so that the Kerberos protocol can access the cluster and perform authentication. It must be set up for any VIP pool from which you want client users to be able to access SMB shares.
Add two entries per DNS name to the SPN attributes with the values
HOST/<short DNS name> where <FQDN> is the FQDN and <short DNS name> is the short DNS name of the same FQDN. This is the FQDN that needs to be mapped to all of the IPs in one VIP pool on the DNS server (as described as part of the initial cluster configuration).
To set SPN in Active Directory:
Locate the machine account object that you just added for the cluster by joining the cluster to the Active Directory domain.
Open the machine account object's properties. This is usually done by right-clicking the object and selecting Properties.
In the properties, edit the servicePrincipalName attribute. This is usually found in the Attribute Editor tab where you can click the attribute to edit it in the Multi-valued String Editor.
Add one entry per DNS name with the value
HOST/<FQDN>where <FQDN > is the FQDN of the cluster and another entry with the value
HOST/<short DNS name>in which <short DNS name> is the short DNS name component of the FQDN.
For example, supposing you have configured your DNS server to map the cluster's VIPs to cluster.domain.com, then you will add two entries:
Click OK in the editor and the properties dialogs as needed to save the entries.
Before creating a view that is exposed as an SMB share, you need to make sure you have a view policy that is configured correctly for this type of view.
In the VAST Web UI, select Element Store in the left navigation menu and then select View Policies.
The View Policies tab displays at least one view policy, the default view policy.
To edit a view policy, click to open the Actions menu for the policy and select Edit. Alternatively, to create a new view policy, click Create Policy at the top right of the grid.
The Add Policy or Update Policy dialog opens with the General area expanded.
In the Name field, enter a unique name for the policy.
From the Security Flavor dropdown, select SMB.
The policy is created and added to the list.
In the VAST Web UI, select Element Store in the left navigation menu and then select Views.
Click Create View to add a new view.
The Add View dialog appears.
In the Filesystem Path field, enter the full path from the top level of the storage system on the cluster to the location that you want to expose. The directory may exist already, such as if it was created by a client inside a mounted parent directory. It could also be a path to a new directory which you'll create now (see step 7).
Open the Protocols dropdown, select SMB to expose the view to SMB. Do not select NFS.
In the SMB Share Name field, enter the name of the SMB share. This is required. The name cannot include the following characters: /\:|<>*?"
For more information about allowed characters and the max length of a share name, see Advanced Multiprotocol Options.
From the Policy dropdown, select the view policy that is configured as described in the previous step.
If the directory does not already exist in the file system, enable the Create Directory setting to create the directory.
The view is now created. You can see its configuration displayed in the Views tab.
The share you created is accessible via SMB clients on the joined AD domain, using the configured share name, which is displayed in the Views tab.