You cannot install NSS AD and DSfW in the same server. However, you can install NSS AD and DSfW in the same tree but separate servers. If you configure NSS AD and DSfW in the same tree and join the NSS AD server to the Active Directory domain, you can enable Active Directory users to access the same NSS volumes that the DSfW users have access to. Follow the instructions given below to enable Active Directory users to access NSS volumes that DSfW users have access to.
Install (or upgrade) and configure NSS AD and CIFS server in the same tree that DSfW server is configured. Join the NSS AD server to the Active Directory domain during the NSS AD configuration. For information on configuring NSS AD and, see OES 2023: NSS AD Administration Guide.
After installing and configuring NSS AD, upgrade the local pools and volumes to support AD users. For information, see NSS Media Upgrade Commands in the OES 2023: NSS File System Administration Guide for Linux.
To enable Active Directory users to access NSS resources, you must AD-enable the volumes. For information on AD-enabling NSS volumes, see Volume AD-enabling in the OES 2023: NSS File System Administration Guide for Linux.
Using iManager, add the DSfW users context to CIFS contexts.
Using iManager, assign rights to the DSfW users on the NSS-AD volumes.
Add the DNS HOST/PTR entries of OES NSS AD server in Active Directory DNS.
Using the NURM tool, map the users having same name in DSfW and Active Directory and the rights of the users. For information on the NURM tool, see NURM (OES User Rights Map)in the OES 2023: NSS AD Administration Guide.
Join a Windows workstation to the Active Directory Domain.
Log in to the Windows workstation using the Active Directory user credentials of a mapped user.
Map the network drive using the FQDN of the NSS AD server. For example:
\\<NSS-ADServer.ADDomain.com>\<ADEnabledVolume>
The Active Directory user will now be able to access the NSS volumes.