Chatee ahora con Soporte
Chat con el soporte

QoreStor 7.4.1 - User Guide

Introducing QoreStor Accessing QoreStor Configuring QoreStor settings
Licensing QoreStor Configuring SAML Configuring an SSL Certificate for your QoreStor System Configuring Active Directory settings Securing QoreStor server root logins Understanding system operation scheduling Configuring Secure Connect Enabling MultiConnect Configuring and using Rapid NFS and Rapid CIFS Configuring and using VTL Configuring and Using Encryption at Rest Configuring and using the Recycle Bin Configuring Cloud Reader Configuring RDA immutability
Managing containers Managing local storage Managing cloud storage Managing replications Managing users Monitoring the QoreStor system Managing QoreStor remotely Support, maintenance, and troubleshooting Security recommendations guide About us

Adding a login group to an ADS domain

NOTE: This is an optional configuration, and only necessary if Domain users in a login group are expected to authenticate to the QoreStor UI.

After you configure your QoreStor within the same ADS domain, you must ensure that a login group exists and add it to the domain. Adding a login group is only possible when the QoreStor system is joined to a domain. Also, you must be logged in as a domain user that is part of an enabled login group.

To add a login group in an ADS domain, complete the following steps:

  1. On the left navigation menu, clickSystem > Active Directory.
  2. On the Active Directory page, find the domain pane and clickAdd Login Group.
  3. In the Add Login Group pane, type the name of the login group including the domain name; for example, Domain\Domain Admins. If your login group name contains spaces, you must not enclose it in quotation marks. (This differs from the equivalent CLI command.)
  4. Click Add Login Group to add the login group.

    NOTE: Changes made to the login group take effect on the next log in attempt (unlike Windows ADS, no active checking is done on the group).

Removing a login group

To remove a configured ADS login group from the QoreStor system, complete the following steps.

  1. On the left navigation menu, click System > Active Directory.
  2. On the Active Directory page, find the domain pane and click Remove Login Group.
  3. When prompted to confirm, click OK.

NOTE: Changes made to the login group take effect on the next log in attempt (unlike Windows ADS, no active checking is done on the group).

Securing QoreStor server root logins

QoreStor UI provides a way to disable "root" user login over SSH to the QoreStor server. This is provided in QoreStor UI for convenience to secure the system.

After you log in to the QoreStor UI, navigate to the System -> Configuration page. Check the status of the SSH service. If it is enabled, you can disable root login over SSH.

Warning: Ensure that there is an alternate way to re-enable root login (over SSH) in case the QoreStor UI is not accessible. This is required to ensure that the root is not permanently locked out of the server. Another way to access the QoreStor server in such condition could be to log in via the system console, or via SSH as a different user that has superuser privileges either by default, or with sudo.


NOTE:When the status of 'root login over SSH' is shown as 'Unknown' it means the SSH access is either restricted (i.e. password authentication is prohibited) or QoreStor is not able to determine the status of the SSH server.

Understanding system operation scheduling

By scheduling system operations, you can optimize your system resources and achieve the best possible QoreStor performance. The most important thing to remember when scheduling critical QoreStor operations is that you want to ensure that you perform each of these operations at a time when it will not overlap or interfere with the running of any of the other key system operations.

You should carefully plan and schedule time periods in which to perform the following critical system operations:

  • Data ingests (which are dependent upon your usage of your DMA(s))
  • Replication
  • System cleaner (space reclamation)

    NOTE: Performing scheduled disk space reclamation operations are recommended as a method for recovering disk space from system containers in which files were deleted as a result of deduplication.

In QoreStor, the main goal in planning and scheduling operations should be to run the Cleaner and Replication operations at times when they do not overlap or interfere with other important system operations. You want to make sure that by properly scheduling and planning, your system can perform each of these key operations independent of the other.

The best practice is to run these two operations during non-standard business hours, so that they do not conflict with any of your other backup or ingest operations.

NOTE: By default, QoreStor is configured to run Cleaner operations daily between 1:00 P.M and 6:00 P.M.

The Cleaner schedule can be viewed and edited on the Cleaner page of the QoreStor GUI (Local Storage > Cleaner), or via the QoreStor command line interface, using the schedule command: 

	schedule --show --cleaner

The Replication schedule can be viewed and edited via the Replications page of the QoreStor GUI, or via the QoreStor command line interface using the schedule command: 

	schedule --show --replication [--name] <name>

NOTE: For more information on the schedule command, refer to the QoreStor Command Line Reference Guide.

Documentos relacionados

The document was helpful.

Seleccionar calificación

I easily found the information I needed.

Seleccionar calificación