An idea I came up with and am currently testing is:
Connect to FilerA via a Win2K management console and add local groups. Then
add users from NTDom1 to the FilerA groups. These groups would, of course,
have to be documented so that they can be created on FilerB in NTDom2 should
the need ever arise. The groups on FilerB would then be populated with
users from NTDom2. This seems like it would preserve the overall security
structure of the volumes being mirrored and not require any significant
reconfiguration on NTDom2.
-----Original Message-----
From: Manish Anand Kinnerkar [mailto:Mak@wipro.co.in]
Sent: Friday, June 27, 2003 2:48 AM
To: toasters(a)mathworks.com
Subject: RE: Question about mirroring
This would be like a practical Disaster recovery scenario,
I believe FilerB will have all shares of FilerA intact within itslef.
After we make the mirror copy read write , the only problem we face now is
that the acl's on the shares are useless , as the uids/domain do not
exist.The authentication for this domain ceases to exist and thereby access
is not possible at share level.
FilerB cannot be a member of multiple domains at the same time, and will
continue to reside in NTDom2 domain.
Now it will be upto the administrator to manage these shares .
Most logical thing to do would be to reassign them to new userids (
corresponding to old users of NTDom1) in current domain NTDom2 as NTDom1 has
ceased to exist.
Or create the NTDom1 domain all over again , but reassign share to the
recreated userids.
Experts on Windows Domain architecuture please comment on the same, coz
frankly i'm not an expert in Windows :)
regards,
Mak.
-----Original Message-----
From: Holland, William L [mailto:hollandwl@state.gov]
Sent: Thu 6/26/2003 6:24 PM
To: 'toasters(a)mathworks.com'
Cc:
Subject: Question about mirroring
Scenario:
FilerA is installed at SiteA mirroring to FilerB at SiteB. Both are in
Windows networks and both are using CIFS. SiteA is in NTDom1 and SiteB is
in NTDom2. NTDom1 and NTDom2 are Windows NT domains, Active Directory is
not implemented, and their is no trust relationship between the two NT
Domains. FilerA has been using global groups and users from NTDom1 on its
ACL's.
SiteA along with FilerA ceases to exist for whatever reason. SiteB breaks
the mirror and brings the volumes mirrored from FilerA online. Is it
possible to access the files on those shares since NTDom1 no longer exists?