Reset NAS Authentication

Note: For a list of all the Appliance Controller commands, see the Command Index.

Reset the NAS authentication configuration as follows:

To reset the NAS authentication settings to local authentication:

  1. Log in to the Appliance Controller CLI.
  2. Enter:

    auth reset config factory-defaults

  3. Enter y to reset configuration and registry settings for NAS authentication. The default setting is No.

    Example:

    > auth reset config factory-defaults

    Authentication configuration and registry settings will be reset back to factory defaults, are you sure (yes/No)? y

    Auth-configuration starting ...

    Applying local configuration settings ...

    Successfully reset configuration back to factory defaults (local)

    Note: If you are resetting StorNext NAS to local authentication from Apple Open Directory, you will need to Remove the NAS Service Principal from the Kerberos Database.

    If you are resetting StorNext NAS to local authentication from Apple Open Directory, you will need to Remove the NAS Service Principal from the Kerberos Database.

To refresh cached information specific to the authentication method and restart NAS services on all nodes in the NAS cluster:

  1. Log in to the Appliance Controller CLI.
  2. Enter:

    auth reset config

    Example:

    > auth reset config

    Reset auth-configuration starting ...

    Applying ads configuration settings ...

    Checking SMB interface list: lo 10.105.19.17

    Checking SMB interface 'eth0:10.105.19.17' status ...

    Join to ENG.ACME.COM as ST976884-VIP1 starting ...

    Using AD Computers OU "Computers" ...

    Verify now joined to ENG.ACME.COM as ST976884-VIP1 ...

    Clearing ID map cache ...

    Restart SMB services to join with ENG.ACME.COM ...

    Sending ads auth-config sync to 10.105.19.80 ...

    Successfully reset configuration services

To remove the NAS service principal from the Kerberos database (if you reset StorNext NAS to local authentication from Apple Open Directory):

  1. Log in to the Apple Open Directory Server as the root user.
  2. At the prompt, enter the following to open the kadmin shell:

    kadmin -1

  3. At the prompt, enter the following command to confirm that the NAS service principal is in the Kerberos database:

    get cifs/NASfqdn@REALM

  4. At the prompt, enter the following to remove the NAS service principal from the Kerberos database:

    del cifs/NASfqdn@REALM

  5. At the prompt, enter the following to confirm that the removal was successful:

    get cifs/NASfqdn@REALM