In my understanding Filr uses NTLMv2 password authentication when connecting to file servers with CIFS. As OES configured for NSSAD works with Kerberos only this makes integration of OES with CIFS in Filr a rather complicated task involving a proxy user in eDirectory. Password authentication also effectively breaks the integration of volumes on Windows servers together with OES via DFS in Filr.
So my suggestion is to support Kerberos authentication instead of NTLMv2 password authentication in Filr. The will in general allow for identical configuration of any file server of NAS supporting Kerberos and more specifically making the distinction between Windows Server and OES NSSAD in the Filr configuration obsolete. It will also allow for accessing OES volumes which are referenced via DFS on Windows Server.
Günther
by: Günther S. | over a year ago | Administration
Comments
Using kerberos constrained delegation would also remove the need for a proxy user account altogether.