Chatta subito con l'assistenza
Chat con il supporto

QoreStor 7.5.0 - User Guide

Introducing QoreStor Accessing QoreStor Configuring QoreStor settings
Licensing QoreStor Configuring SAML Configuring an SSL Certificate for your QoreStor System Configuring Active Directory settings Securing QoreStor server root logins Enabling FIPS 140-2 support Understanding system operation scheduling Configuring Secure Connect Enabling MultiConnect Bandwidth throttling Configuring and using Rapid NFS and Rapid CIFS Configuring and using VTL Configuring and Using Encryption at Rest Configuring and using the Recycle Bin Configuring Cloud Reader Configuring RDA immutability
Managing containers Managing local storage Managing cloud storage Managing replications Managing users Monitoring the QoreStor system Managing QoreStor remotely Support, maintenance, and troubleshooting Security recommendations guide About us

Viewing your license configuration

You can view QoreStor license configuration information through the QoreStor GUI or the command line interface.

To view the current license configuration in the GUI

  1. In the navigation menu, click System to expand the menu, then click License.
  2. Information about the configured license is displayed.

To view the current license configuration via the command line, use the command

system --show [--license] [--verbose]

Installing a license

You can add a license to QoreStor through either the QoreStor GUI or the command line interface.

To install a license:

  1. In the navigation menu, click System to expand the menu, then click License.
  2. Click Upload License.
  3. Click Upload License and select the license file.
  4. Click Apply.

NOTE: You may also install a QoreStor license from the command line interface using the command:

system --license [--show] [--verbose] [--validate] [--file <path>] [--add] [--file <path>]

Refer to the QoreStor Command Line Reference Guide for more information.

NetVault Plus Data Copy Licenses

NetVault Plus Data Copy licenses are term licenses for QoreStor installations with limited protocol support. Data Copy licenses can only be installed on QoreStor systems that have RDA protocol support, but do not support CIFS, NFS, Object (S3), OST, or VTL (NDMP, ISCSI) connections. Data Copy licenses are functionally identical to QoreStor term licenses. These licenses are specific to an individual QoreStor server (based on system ID) and they have defined expiry dates.

Preparing QoreStor for a NetVault Plus Data Copy License

Prerequisite:

Before installing a Data Copy license ensure that the QoreStor is placed in Data-Copy mode.

To place a QoreStor in Data-Copy mode,
To place a QoreStor as a superuser, execute the following command:

/opt/qorestor/bin/data-copy-mode --enable

NOTE:The above command will not enable Data-Copy mode if there are existing CIFS, NFS, OST, NDMP, iSCSI, EDM, or Object (S3) connections. These connections will need to be removed before Data Copy mode can be enabled.
As part of enabling Data-Copy mode, the command will remove support for the above protocols and restart QoreStor services.

To verify that QoreStoris in Data-Copy mode, use the system --show command to display the status of Data-Copy mode:

# system --show
System Name : qorestor-server Current Time : Fri Jan 3 20:11:14 2025 UTC System ID : fb9b26426aa9d8a506c2e953a50f94c4 Product Name : QoreStor Version : 7.5.0 Build : 212 Repository location : /QSdata/ocaroot Metadata location : /QSmetadata/qs_metadata Dictionary type : Cloud-Optimized Data-Copy mode : Enabled Anomaly Detection : Enabled Anomaly Detection Interval(min) : 30 Anomaly Detection Metric : os-auth,ui-auth,proto-auth,load-avg,diskio System State : Operational Mode Reason : Filesystem is fully operational for I/O. Configuration Server : RUNNING Jan 3 20:09:50 Filesystem Server : RUNNING Jan 3 20:09:50 Health Monitor : RUNNING Jan 3 20:09:46 Filesystem Checker : STOPPED SecureConnect Server : RUNNING Jan 3 20:09:49 UI : RUNNING Jan 3 20:09:50 Policy Manager Daemon : RUNNING Jan 3 20:10:41 Disaster Recovery Daemon : STOPPED Anomaly Detection Service : RUNNING Jan 3 20:09:50

Installing a NetVault Plus Data Copy License

Refer the above section for the steps to install a Data Copy license.

NOTE: Data Copy licenses can only be installed on QoreStor systems that are already in Data-Copy mode. Conversely, QoreStor perpetual or term licenses cannot be installed on QoreStorsystems that are in Data-Copy mode.

Configuring SAML

SAML 2.0-based authentication is how QoreStor supports single sign-on (SSO) capabilities through an external identity provider (IdP). QoreStor supports only service provider-initiated login. QoreStor SAML configuration is compatible with the following IdPs:

  • Azure AD
  • OneLogin
  • Okta

Accessing the SAML configuration settings in QoreStor

To access the SAML configuration settings in QoreStor

  1. To display the Users configuration page, in the navigation menu, click Users.
  2. Click Configure SAML.
  3. Provide the URLs displayed on the SAML Configuration page to your chosen IdP:
    • Service Provider EntityId. This URL serves as a unique identifier that represents the particular QoreStor server to the IdP.
    • Service Provider MetaData URL. This URL provides an endpoint on the QoreStor Server that QoreStor uses to furnish keys and additional SAML endpoints to the IdP.
    • Service Provider ACS (Assertion Consumer Services) URL. This URL provides an endpoint on the QoreStor Server that the IdP uses to send its authentication response after the IdP has successfully authenticated a user attempting to login to QoreStor. The IdP uses this URL to redirect the user's browser session back to the QoreStor Server to allow authenticated access to the QoreStor Server.
  4. To complete the SAML configuration, obtain the Identity Provider Metadata URL from the IdP and enter it in the text box.

    This URL is required. It contains the URL of the metadata endpoint provided by the IP to furnish keys and additional SAML endpoints to the QoreStor Server.

  5. Click Save.
  6. Restart the QoreStor UI using the following command:

    /opt/qorestor/bin/storage-server-services/ocaui restart

    NOTE:For SAML redirection to succeed, the QoreStor hostname should be resolvable from the Client browser.

    For more information about configuring SAML for QoreStor, see the QoreStor SAML Configuration Guide.

Registering an SSO user with the QoreStor Server

To register an SSO user with the QoreStor Server

  1. To display the Users configuration page, in the navigation menu, click Users.
  2. To display the Add User sidebar, click Add User.
  3. From the Authentication Type drop-down menu, select SAML as the authentication type for the new user.
  4. For User (Email), enter the email address of the user that was configured in the IdP for access to the QoreStor Server.

    The value provided must be of a valid email address format; for example, john.doe@example.com).

  5. From the Roles drop-down menu, select either the Administrator role or Monitor role.
  6. Optionally, enter the following details:
    • Full Name
    • Phone
    • Description
  7. To add the registered user account with the QoreStor Server, click Save.

    The QoreStor UI Login page now includes a SAML Sign In option.

Logging in to the QoreStor UI using SAML

To log in to the QoreStor UI using SAML

  1. From the QoreStor UI Login page, click SAML Sign In.

    The browser redirects you to the configured IdP's login page.

  2. On the IdP login page, enter the required IdP user credentials.
  3. Optionally, if you configured MFA for your account with the IdP, enter the requested second factor token or provide approval through a mobile application.

    After the IdP authenticates the credentials, the browser session redirects to the QoreStor UI. If the authentication was successful, the QoreStor UI login page briefly displays before the browser session redirects to the QoreStor UI Dashboard.

    You are now logged in to the QoreStor Server.

Related Documents

The document was helpful.

Seleziona valutazione

I easily found the information I needed.

Seleziona valutazione