Q: On Triofox server, you may see local users like glad1_<user>/g_<user>/g1_<user>. What are the users for?
A: Windows has a limitation. Under one user's session, one cannot access an SMB file share as multiple users.
On Triofox, when attaching a share directly, with "Always access the storage using the logged-in user's identity", each time an AD user accesses the published shares, Triofox needs to access the share as the user.
. If Triofox is on the same domain as the share, it can be impersonated as the AD user and accessed it. Here, no need to create the dummy g_ user/g1_user.
. If Triofox is not on the domain as the share, it cannot impersonate the AD user. In this case, due to the windows limit, Triofox cannot access the AD user directly. It will prevent other AD users to access the share.
As a workaround, Triofox creates a dummy user like g_user/g1_user. A session as the dummy user is created. Triofox will use the dummy user's session, to host the CIFS share connection for the AD user. The real connection to the share is still as the AD user.
Comments
0 comments
Article is closed for comments.