HP J3278B - SureStore CD-ROM Server/Tower 7 NAS... Installation and operating instructions

Addendum: HP SureStore HD Server 4000 1
Addendum: HP SureStore HD Server 4000
Note ❏This second edition of the Addendum supercedes the first
edition and supplements the other documentation distributed
with your HP SureStore HD Server 4000.
New Firmware Enhances Support of
NT Groups
NT User Level
Security You can create groups on the HD server that mirror your groups on
the NT domain. You need not create duplicate users. You need to
configure only the groups and shares, not the users and passwords,
on the HD server.
User-level security as described here is recommended for networks
based on Windows NT Server. (Share-level security is the
alternative recommended for Windows workgroup-based networks
without a domain controller.)
What you will configure. If you are using an NT domain
controller and NT user-level security, you configure the HD server
to automatically register and authenticate the users that are
already defined on the domain controller. You configure the groups,
any additional shares, and the groups’ access permissions for each
share, on the HD server.

2 Addendum: HP SureStore HD Server 4000
What happens. When a client user maps a drive to a share on the
HD server (or selects it from Network Neighborhood), the
HD server checks the NT domain controller (also known as the
DC or PDC or authentication server) for the user’s account. If it is
found, the user is authenticated. Then the global groups in which
that user appears on the domain controller are passed back to the
HD server. If any of the group names match groups already
configured on the HD server, the user is allowed access to a share
for which the group has permissions.
The user name is added to the list of users on the HD server and to
the groups that match. Pass-through authentication (that is,
checking the password configured on the domain controller) is
enabled for that user. The user’s group memberships are added, or
if the user was previously added, any group membership changes
are updated.
What Happens The following illustration portrays the basic process.
Note Limitations for Multiple Domains
•Trusted domains do not work for group relationships. Thus,
users cannot be automatically added or updated in groups from
trusted domains.
•Only global NT groups, not local groups, are supported.
•Global groups defined on a domain contain users only from
within the authentication domain.
•Local groups defined on a domain contain users from within
the domain and may contain other global groups from
within the domain and from trusted domains.

Addendum: HP SureStore HD Server 4000 3
Setup Tasks for Automatically Adding Users
This information about using the Windows security in the updated
firmware amends the documentation found in “Set Up Shares” and
“Set Up Users and Groups”, in chapter 4 of the User’s Guide.
What is Configured The following illustration shows what is configured on each device.
On the authentication server (commonly called the domain
controller or PDC) for the domain containing the user accounts:
•In the User Manager for Domains application, set up the users
and global groups that you will permit to access the HD server,
if they are not already there. You will need to enter the group
names identically on the HD server. Passwords are maintained
here in User Manager.
•In the Server Manager for Domains application, add the
HD server to the domain. It will appear as an NT 4.2 server.
On the HD server in HD Server Admin:
•Set the Security Model to User Level (as it is by default) on the
Security 

 Microsoft Networking page.
•Enter the name and IP address of the Windows NT domain
controller (authentication server) for Passthrough
Authentication on the Configuration 

 Network 


Microsoft Networking page. When you first add the name and
address, the parameters Automatically add users to user list
and Update user membership in groups automatically are
switched on automatically (the boxes are checked).
However, if you have upgraded to this new firmware and had
previously set Passthrough Authentication (the name and
address are filled in), then you must check the boxes yourself.

4 Addendum: HP SureStore HD Server 4000
When Update user membership in groups automatically is on,
the authentication can operate as described above. Switching
off this setting enables the user to be added to the user list but
does not add the user to groups, which disables automatically
granting access based on groups.
•Set up the groups that will have access to shares on the
HD server using [Create] or [Edit] on the
Configuration 

 Users & Groups page. These groups must be
defined with identical names on the domain controller. Only
global and not local groups can be used on the HD server (see
page 2).
You need not configure the Users in the groups or
Passthrough Authentication on the User page. These are
automatically configured for you when you set up the
Configuration 

 Network 

 Microsoft Networking page as
described on page 3.
Groups will also be updated each time the user again maps a
drive to the share or selects it from Network Neighborhood
(unless Update user membership in groups automatically is
disabled).
•Set up any file shares in addition to, or in place of, the default
“pub” share, using the [Add] button on the
Configuration 

 File Shares page.
•For each of the file shares, including “pub”, specify the groups
allowed access to the share and their access rights, using the
[Permissions] button on the Configuration


 File Shares page.
Remove the default group “Everyone” from the share to
maintain your NT user security.
Note Other Limitations
❏A limit of 100 user names and 50 groups can be defined on the
HP SureStore HD Server 4000.
❏The password that authenticates passthrough users (which is
maintained on the domain controller) cannot be changed using
the Security


 Change User Password page in HD Server
Admin. That page can be used only to change passwords that
are specifically configured on the HD server (on page 5 see
“You can set up and maintain the Users and Passwords...”).

Addendum: HP SureStore HD Server 4000 5
User-Level Alternatives to Automatically Adding Users
Note ❏Share-level security is the alternative recommended for
Windows workgroup-based networks without a domain
controller. Use HD Server Admin’s Security



Microsoft Networking page to change to Share Level, and then
set Permissions appropriately. (See “Set Up Shares” in the
User’s Guide.)
Passthrough Authentication. For user-level security in
networks based on Windows NT Server, you can use the
passthrough authentication feature without automatically adding
the users. Each of your two alternatives for this require additional
configuration, as follows:
•You can set up and maintain the Users on the HD server with
identical names as on the domain controller and set
Passthrough Authentication, so that the passwords are
authenticated only on the domain controller. You also must
perform all the tasks listed described above for automatically
adding users, except that Automatically add users to user list
should be switched off.
•You can set up and maintain the Users and the Passwords on
the HD server without association with any other
authentication on the domain.
Additionally, users can change their own passwords once the
administrator has configured them on the HD server. They
access HD Server Admin without the administrator login (and
are limited to the password, Identity, and Support pages), as
follows.
a. In the web browser, type the server’s IP address in the URL.
b. On the server’s web page, click the Security tab.
c. Use the resulting Security



Change User Password page to
change the password.
d. As long as the Change User button remains selected and you
do not click on the Web UI or Microsoft Networking button,
you will not be prompted for the Administrator password.
Default User Level Security. If you do not change any defaults
in HD Server Admin as described on page 3 to page 4, then user-
level security is the default and shares are initially configured for
access by the default NT group “Everyone”. This gives full access to
all users who connect. No password is required for access, nor is
Connect As required in NT. This includes the default share “pub”
and new shares you create.

6 Addendum: HP SureStore HD Server 4000
Changes and Notes
Restoring from
Backups using
Tape Catalog
You can use the catalog to find the files for a Selective Restore.
However, if Western European language users have saved and
backed up files with path or file names containing extended (8-bit)
characters—such as é (e-acute) and ü (u-umlaut)—those characters
do not appear correctly in ordinary Windows applications used to
display the tape catalog.
Note ❏Filenames using the English alphabet in the normal 7-bit range
are not affected by the problem described in this note.
Two methods are used to specify files on Restore File Select page:
a. Typing the file path and name in the Selected Files box:
Typing the names as most Windows applications display
them—with false characters substituted for the extended
characters—specifies them incorrectly. Instead, you must
specify the actual 8-bit characters. Because you cannot see
the actual characters, use method b and the application
described following it.
b. Using “copy and paste” per the User’s Guide, chapter 9:
When the characters are incorrectly displayed, using a
normal “copy and paste” specifies them incorrectly. Instead,
copy the file specification using the following application.
Application to Correctly Copy Files from Tape Catalog
1. Start the Command Prompt window.
2. Change the default drive to the drive mapped to the HD server.
3. Specify the “edit” command with the name of the tape catalog file.
4. Scroll to the files you wish to specify.
5. Right-click on the title bar of the Command Prompt window.
Select the Edit


 Mark command.
❏Do not use the Edit commands on the tool bar or [CTRL] [INS].
6. Holddowntheleftmousebuttonanddragaboxaroundallthefiles
needed. Release the left mouse button. Press [ENTER]. The
selected text is copied to the Clipboard. File


 Exit.
7. Do the “exit” command to close the Command Prompt window.
8. Edit


 Paste the selection into the Selected Files box.
The extended characters will be specified correctly.

Addendum: HP SureStore HD Server 4000 7
Checking Disks
and File System Check the volume’s disks and parity integrity in the Volume C view
on the Configuration



Disk Setup page. (1) Click the volume and
(2) click the [Check Volume] button. (See the User’s Guide,
chapter 11, “Check Status in HD Server Admin”.) The process
corrects parity errors. Also, in the unlikely event that read errors
are found, disk failure will be reported. Spares are not included in
this check.
❏For preventive maintenance to correct parity errors, HP
recommends that this check be performed once a week.
❏This process may take some time, depending on the number and
size of disk drives, and it may slightly slow service to clients,
depending on the number connected.
If a disk drive is failed (due to a read error found), it is removed
from service and the volume status is Degraded (red). In this case,
again examine the Disk Setup page to determine which disk drive
failed, replace that disk drive module (see the User’s Guide,
chapter 11, “Replace Disk Drive Module”), and add it to the volume.
To check the file system for errors, shut down and restart the
server. The integrity of the file system is checked at every restart.
If this check fails, you are notified of the following alert on the
control panel, and you should restore the file system (see the
User’s Guide, chapter 11, “Disaster: Lost or Damaged File System”).
Unable to Mount File System
Caution on
Operating
HD Server Admin
To navigate between pages in HD Server Admin use only the
buttons provided on the server web pages, such as [Next>] and
[Cancel]. Do not use your web browser’s buttons for back, forward,
or refresh or reload. The information on those pages is expired and
cannot be displayed. (See the User’s Guide, chapter 4, “Operating
Features of HD Server Admin”.)
Exception: It is OK to use your browser’s Refresh/Reload button
when specifically prompted by HD Server Admin, as may be
sometimes needed for restart.

8 Addendum: HP SureStore HD Server 4000
Restarting after
Configuration
Changes is
More Convenient
After making a configuration change that requires a restart to take
effect, you no longer must go to a different web page to restart.
After you [Apply] one of those changes, you will be prompted to
choose whether to restart immediately. Your other choices are to
wait until all changes are complete and then either restart on the
page with the last change, or use the separate Configuration



Shutdown/Restart page.
Note that the User’s Guide in chapter 4 mentions only the choice of
using the Configuration


 Shutdown/Restart page.
Default
Security Model:
User Level
The default setting for Security Model on the Security


 Microsoft
Networking page is now User Level, not Share Level as described in
the User’s Guide. This setting provides the same initial
functionality as before for shares. All users are members of a
default group “EVERYONE”, with full access to the default share
“pub”. No password is required for access, nor is Connect As
required in NT.
See “Set Up Shares” in chapter 4 in the User’s Guide. To add or
change users and groups, you need not first use the Security



Microsoft Networking page to change the Security Model from the
default Share Level to User Level and restart the server. Now you
can go directly to the Configuration


 Users and Groups page to
specify them. (See “Set Up Users and Groups” in the User’s Guide.)
So that rights are reserved only for the users you added, use the
page Configuration


 File Shares, select the “pub” share, and
remove the group “EVERYONE” from the members list, disabling
public access. (See “File Shares” in the User’s Guide.) Note that the
Windows 95/98 user must log in with same user name.
To use Share Level security, use HD Server Admin’s Security



Microsoft Networking page to change to Share Level, and then set
Permissions appropriately. (See “Set Up Shares” in User’s Guide.)

Addendum: HP SureStore HD Server 4000 9
Users Can
Change Their
Own Passwords
Once the Administrator has configured the User Password for
Users set up with User Level security, the client user is able to
change his own password, without knowing the Administrator
password for the HD Server. (If Passthrough Authentication is
used, the password cannot be changed here but must be changed on
the authentication server.)
Clients can be directed to do this using the following steps:
1. In the web browser, type the server’s IP address in the URL.
2. On the server’s web page, click the Security tab.
3. Use the resulting Security


 Change User Password page to
change the password.
As long as the Change User button remains selected and you do
not click on the Web UI or Microsoft Networking button, you
will not be prompted for the Administrator password.
Note ❏Client users also have access to the Identity and Support pages
in the same way.
Default
“SetCommunity
Name”
In the “Reset Defaults” table in chapter 6 of the User’s Guide,
the default setting for SetCommunity Name is shown as “Private”.
The default is both “Public” and “Private”. This allows HP TopTools
to set trap destination entries correctly.

10 Addendum: HP SureStore HD Server 4000
Hardware Changes and Notes
9-pin “Serial”
Connector for
Future Use Only
The 9-pin connector labeled “Serial” on the rear of the server has no
function at this time. Do not attach anything to it. It is illustrated
in the “Rear View of HD Server” in chapter 2 in the User’s Guide.
Specifications for
HP 9.1-GB SCSI-2
Disk Drive
Module
Corrections for appendix C in the User’s Guide:
Class A for
HP J3291A and
DAT40i Tape Drive
Corrections for appendix C and D are shown in this section.
HP J3291A SureStore HD Server 4000, containing the
HP C5686A SureStore DAT40i DDS-4 internal tape drive,
has some different regulatory specifications—Class A—as shown in
this section.
The other models HP J3290A, J3292A, and J3293A
SureStore HD Server 4000 continue to have the same Class B
regulatory compliance described in the User’s Guide. (See their
Declaration of Conformity on page 14 below.)
Note ❏When you install the HP C5686S SureStore DAT40i DDS-4
Tape Drive into t he other models, the server will then comply
with Class A regulations as shown below.
Electromagnetic Specifications
CISPR 22 Class A
FCC Part 15, Class A
EN 55022 Class-A
EN 55024
Canadian EMC Class A requirements
Latency Average 4.17 millisecond
Power Consumption Average 12.8 W
Current Average 0.47 A @ 5 V
0.87 A @ 12 V