User Tools

Site Tools


computing:storage:synology_directory_server

Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revision Previous revision
Next revision
Previous revision
computing:storage:synology_directory_server [2024/09/24 11:52]
jcooper
computing:storage:synology_directory_server [2024/09/25 11:53] (current)
jcooper
Line 1: Line 1:
-====== Synology Directory Server NAS ======+====== Synology NAS Directory Server ======
  
 See also **[[computing:storage:synology_diskstation_apps|Synology DiskStation Applications]]** See also **[[computing:storage:synology_diskstation_apps|Synology DiskStation Applications]]**
Line 23: Line 23:
 ===== Install Directory Server Services ===== ===== Install Directory Server Services =====
  
-:!: Users created Pre-Directory Server install are NOT included in the directory.+:!: Users created for DSM login are NOT included in the directory
 + 
 +:!: Directory Server requires the NAS to be a DNS server that will be installed with Directory Server Services.  If there is already a DNS server on your network it will be setup as a forwarding DNS.
  
 **Directory Server Quick Start Guide**: https://kb.synology.com/en-us/DSM/tutorial/Quick_Start_with_Directory_Server **Directory Server Quick Start Guide**: https://kb.synology.com/en-us/DSM/tutorial/Quick_Start_with_Directory_Server
Line 37: Line 39:
 **Enable user home directories**: https://kb.synology.com/vi-vn/DSM/tutorial/user_enable_home_service **Enable user home directories**: https://kb.synology.com/vi-vn/DSM/tutorial/user_enable_home_service
  
-==== SSH Access ==== +===== Enable Roaming Profiles for users =====
-  +
-  * Control Panel -> Applications -> Terminal & SNMP -> Enable SSH service -> Advanced (you may need to change ecryption level) +
-    * Use ''admin'' user and password +
-    * Use ''sudo'' or ''sudo -i'' for a root shell+
  
-==== DHCP Server ====+:!: Synology terminology combines roaming and redirected folders so this howto does both.
  
-  * Control Panel -> Connectivity -> Network -> DHCP Server -> Enable DHCP Server  +:!: Disabling Ownership checking on profile folders does not appear to be possible
- +  
-==== VPN Server ==== +**Roaming Profiles**https://kb.synology.com/en-global/DSM/tutorial/How_to_Assign_a_Home_Directory_to_Synology_Directory_Server_Users
- +
-https://help.synology.com/dsm/?section=VPNCenter&version=1.2&link=vpn_setup.html +
- +
-=== PPTP VPN Server === +
- +
-  * Install the VPN Server Package from Main Menu -> Package Center +
-  * PPTP -> Enable PPTP VPN server +
-  * Enter IP address range to be handed out to VPN Interface on client -> Apply +
- +
-==== FTP Server ==== +
- +
-  * Control Panel -> File Services -> FTP -> Enable FTP service SSL/TLS ... -> Apply +
- +
-:!: If you have trouble behind NAT use SFTP on server and client, change and forward port 2222 +
-:!: If you scroll to the bottom -> Advanced you can set root folder for users +
- +
-==== Backup ==== +
- +
-https://originhelp.synology.com/dsm/?section=DSM&version=5.2&link=BackupApp%2FBackupApp_desc.html +
- +
-https://www.broadbandbuyer.co.uk/features/2629-how-to-back-up-your-synology-nas-device-data-with-time-backup/ +
- +
-:!: Versioning and deduplication is not supported on local USB/ESATA backups using Backup & Replication.  Install "Time Backup" add on from Package Center. +
- +
-:!: Limitation of "Time Backup" is that it only backs up an entire volume/share.  Not single folders. +
- +
-=== Restore from Time Backup === +
- +
-  * Open Time Backup from Main Menu (this will open another browser Window/Tab) +
-  * On the Timeline Tab versions are displayed in cascading windows with date/time labels (20150818-2200 = 8/8/15 10PM).     +
-  * Only one label is visible at a time.  Clicking on the Windows will bring them to the front/visible. +
-  * Double Click Folder/Volume to drill down to item to restore -> Action -> Restore -> Rename or overwrite if exists are the only options for Restore. +
-  * There is a "Download" option under Action to save restored data to workstation. +
- +
-:!: You should be able to also select versions with the timeline bar (dragging) at the bottom+
-:!: For help with Time Backup click the ? in the upper right hand corner of the Time Backup Window/Tab. +
- +
-==== CloudStation File Sync ==== +
- +
-=== Enable CloudStation === +
- +
-https://www.youtube.com/watch?v=kZX8XK9Wy2Y +
- +
-  - Go to **Package Center -> Cloud Station -> Install** +
-  - **Launch Cloud Station**.  +
-  - **Enable the user home feature** -> OK +
-  - Continue with **User Settings -> Enable user homes -> Apply** +
-  - Go back to **Cloud Station -> enable -> Yes** +
-  - Go to **Privileges -> specify which users will be able to use Cloud Station -> Save** +
- +
-==== Access over the Internet ==== +
- +
-https://www.synology.com/en-us/knowledgebase/faq/299 +
- +
-=== Forward Ports === +
- +
-|CloudStation |6690      |TCP | +
-|DS Photo     |80,443    |TCP | +
-|DS Audio     |5000-5001 |TCP | +
-|DS Cam       |5000-5001 |TCP | +
-|DS File      |5000-5001 |TCP | +
-|DS Finder    |5000-5001 |TCP | +
-|DS Video     |5000-5001 |TCP | +
-|DS Download  |5000-5001 |TCP | +
-|DS Cloud     |5000-5001 |TCP | +
-|DS Note      |5000-5001 |TCP | +
- +
-:!: Setup QuickConnect to bypass port forward +
- +
-=== QuickConnect === +
- +
-  - Go to Control Panel -> QuickConnect. +
-  - Check the Enable QuickConnect box. +
-  - If you do not have a Synology Account, click Log in to or register a Synology Account. Enter the required information and click OK. If you already have a Synology Account, enter your account information.  +
-  - Create your own QuickConnect ID in the QuickConnect ID field. Then click Apply. +
-  - Your QuickConnect link information will appear. Use these links to access your Synology NAS. +
-  - If you do not see the QuickConnect DSM link, click Advanced and make sure DSM is enabled.  +
-  - You can now use the QuickConnect DSM link to access your Synology NAS!+
  
 +===== Map drives via Group Policy =====
  
-**Disk Station Manager**: http://QuickConnect.to/YourQuickConnectID+**Map a drive**: https://kb.synology.com/en-ro/DSM/tutorial/How_to_mount_a_network_drive_for_Synology_Directory_Server_users
  
-**Photo Station**: http://QuickConnect.to/YourQuickConnectID/photo+===== Set password policy =====
  
-**Cloud Station clients and Mobile devices use**YourQuickConnectID+:!: This can be done on the NAS via group policy.
  
-=== CloudStation Clients ===+:!: If using RSAT to modify/create a user password it has been reported that the "Change at next login" option does not work.  Must be set on the NAS.
  
-Video Tutorials +**Set password policy on NAS**Main Menu -> Synology Directory Server -> Domain Policy
-https://www.synology.com/en-us/knowledgebase/?query=cloud%20station&category=All&orderby=rank&page=1#tab_search+
  
-:!: CloudStation can also be accessed via browser.  See text above.+===== How to add Enhanced Security =====
  
-  - Go to Cloud Station > Overview and click the Computers button. +**Added Security**: https://kb.synology.com/en-us/DSM/tutorial/How_to_add_extra_security_to_your_Synology_NAS
-  - Click the button to download Cloud Station for your operating system. (You can also download Cloud Station from the Synology Download Center.) https://www.synology.com/en-us/support/download+
  
-=== Windows Client ===+===== Enable DSM login 2FA =====
  
-  - Launch the installer on your computer and follow the onscreen instructions.+:!: This will apply to only Synology DSM users, not Directory Server users.
  
-==== Printers ====+:!: 2FA cannot be setup on a DIY Synology NAS because online Synology resources are used.
  
-**Share a Printer**: https://www.synology.com/en-us/knowledgebase/DSM/help/DSM/AdminCenter/system_externaldevice_printer+**Some packages do not support 2FA**: https://kb.synology.com/en-af/DSM/tutorial/OTP_packages_supportability
  
-**Share an MFP**: https://www.synology.com/en-us/knowledgebase/DSM/tutorial/Printer/How_to_set_up_and_use_a_multifunctional_printer_shared_by_Synology_NAS+**2FA setup**: https://kb.synology.com/en-af/DSM/help/DSM/SecureSignIn/2factor_authentication?version=7#b_15
  
-===== Config Files =====+**To get to "Personal"** 
 +  * Login to the Synology NAS via a web browser. 
 +  * Click the "User icon" upper right. 
 +  * Select "Personal"
  
-:!: May be dated...+===== Snapshots =====
  
-<file> +**Take snapshots of shared drives**: https://kb.synology.com/en-ro/DSM/tutorial/Quick_Start_Snapshot_Replication
-/etc/ssh/sshd_config,sshd +
-/etc.defaults/ssh/sshd_config,sshd-defaults +
-/etc/php/php.ini,php +
-/etc.defaults/php/php.ini,php-defaults +
-/usr/local/etc/php56/php.ini,php56 +
-/usr/local/etc/httpd/conf/httpd.conf,Apache +
-/etc/httpd/logs/user-error_log,Apache-User Error Log +
-/etc/httpd/logs/sys-error_log,Apache-Sys Error Log +
-/usr/syno/etc/smb.conf,samba Daemon +
-/usr/syno/etc.defaults/smb.conf,samba Daemon-defaults +
-/etc/inetd.conf, inetd.conf +
-/etc.defaults/inetd.conf, inetd.conf-defaults +
-/etc/profile,profile +
-/etc.defaults/profile,profile-defaults +
-/etc/hosts,hosts +
-/etc.defaults/hosts,hosts-defaults +
-/etc/crontab,crontab +
-/etc.defaults/crontab,crontab-defaults +
-/var/packages/MailServer/target/etc/template/main.template,Mail-postfix +
-/var/packages/MailServer/target/etc/template/dovecot.template,Mail-dovecot +
-/usr/syno/avahi/avahi-daemon.conf,avahi +
-/etc/fstab,fstab +
-/etc.defaults/fstab,fstab-defaults +
-/etc/httpd/sites-enabled-user/httpd-vhost.conf-user,V-Host +
-/etc/httpd/sites-enabled-user/httpd-ssl-vhost.conf-user,V-Host SSL +
-</file>+
  
  
computing/storage/synology_directory_server.1727200336.txt.gz · Last modified: 2024/09/24 11:52 by jcooper