How to enable Samba secure logon for MSSQL instant access for Netbackup 8.3/8.3.0.1 and Netbackup Appliance 3.3.0.1

Article: 100049212
Last Published: 2020-12-30
Ratings: 0 0
Product(s): Appliances

Description

How can I enable host-based authentication and secure login for Samba share so that the MSSQL instant access works on specific windows clients?

BYO

Perform the steps in the following order:

  1. In the storage server (one time operation) where the Samba share is exported from:

    • Override the following Samba option to disable the guest logon:

      map to guest = Never

    • Create user credentials for Samba.

      • smbpasswd -a spws

        Set Samba password for Samba user spws)

      • smbpasswd -e spws

        Enable Samba user spws

  2. For each Windows client: 

    • Go to Control Panel > User Accounts > Credential Manager > Add a Windows Credential.

    • In Internet or network address, enter the storage server domain name.
    • Enter the samba user name and password. Ensure that the user name is same as the user credentials that you created for Samba.
    • Click OK and ensure that you can access
    • \\<storage server domain name> without a login prompt.
Appliance

For Appliance, the smb.conf file configuration already has "map to guest = Never".

The local users are added to samba database automatically and the samba password is the same as the login password. Windows clients can access the appliance's samba share using credentials of the appliance's local users.

  1. To manage appliance local users, go to the following CLISH path: Main_Menu > Settings > Security > Authentication > LocalUser.

Perform the same steps as BYO to save the samba credentials on  Windows clients.

 

The client's windows version and the background are listed at the following link:

https://docs.microsoft.com/en-us/troubleshoot/windows-server/networking/guest-access-in-smb2-is-disabled-by-default

 

Was this content helpful?