Adding shared folders. Buffalo Technology LinkStation LS-XHL, LinkStation LS-WXL, LSV40TL, LinkStation Pro Duo Diskless, LinkStation, LinkStation LS-WSXL, LinkStation LS-CHL, LinkStation LS-VL, LinkStation LS-WVL

Using your LinkStation

Adding shared folders

By default, the LinkStation includes one shared folder “share”. You may add additional folders as follows.

1 1 In the Web Admin interface, click [Shared

Folders] - [Folder Setup].

2 Click [Create Folder].

2 1 Enter desired characteristics for the new share.

Note: If you would like to copy the settings of an existing folder, select a source folder from the [Copy Settings From] dropdown.

2 Click [Save].

You have created a new share.

To protect your data from accidental deletion, you may enable a [Recycle Bin] for the share (not available for Apple and FTP connections). Deleted data in a shared folder will be temporarily moved to the [Recycle Bin] folder. To recover deleted data, open the [Recycle Bin] folder and move files.

Read-Only shares cannot be modified or deleted. To make a Read-Only share, select [Read Only] in the [Shared Folder] screen and click [Save].

Notes:

• By default, [shared Folder Attributes] is configured as [Read & Write].

• A shared folder set to [Read Only] cannot be written by any users or groups, even if they have read and write permissions. Read-Only folders are read-only for all users.

• Read Only shares are described as [Read Only] in the shared folder description.

LinkStation User Manual 24


Notes:

• When using multi-byte character(such as Japanese), make folder or file names with 80 bytes(UTF-8) or less.

You may not be able to copy a folder or a file whose name length is more than 80 bytes.

• You cannot set hidden or read-only attributes to subfolders or files on the LinkStation.

• If non-Roman alphabetical folder names or workgroup names do not display properly, rename the folder or workgroup with Roman alphabetical characters.

• Please do not use any of the following words as the name of a shared folder. These words are reserved for internal use by the LinkStation: info, spool, usbdisk1, usbdisk2, usbdisk3, usbdisk4, lost+found, global, printers, homes, lp, auth, test, ram, disk1, disk2, disk3, disk4, array1, array2, msdfs_root, mt-daapd

• The following characters are handled differently by Mac OS X and Windows. Avoid using these characters when sharing data between Mac OS X and Windows:

• The following characters are not displayed correctly by Windows, or by a Mac connected to the LinkStation via SMB.

Avoid their use in file names that will be used with the LinkStation.

• Never turn off the LinkStation or unplug its Ethernet cable while data is being written. Doing so may result in an incomplete file that cannot be opened or deleted. If this happens, restart the LinkStation, delete the file, then retry copying the file.

• Your OS may update the date and timestamp stored on the LinkStation’s hard drive, or on a USB drive connected to the LinkStation. This might result in inaccurate information for date-created or date-accessed data on the LinkStation.

• In the Web Admin interface, or from a Mac OS X 10.6 or later, drive size is displayed in gigabytes, where 1 gigabyte = 1,000,000,000 bytes. This is also how drive capacity is expressed on your LinkStation’s packaging.

However, if you check the drive size from an older Mac, or from a Windows computer, it may display the size of the drive in gibibytes, where 1 gibibyte = 1,073,741,824 bytes. Since a gibibyte is larger than a gigabyte, the displayed drive capacity will be a smaller number than the actual drive size.



Access Restrictions

There are several ways to restrict access to users of a LinkStation.

Access restrictions for Users and/or Groups on the LinkStation

The next page describes how to configure access restrictions for local users and/or groups.

Access Restrictions on NT Domain

Follow the procedure on page 29 to configure.

Access Restrictions on Active Directory


Notes:• This chapter describes the procedure to use Active Directory with Windows 2000 Server,

Server 2003, and Server 2008.

• Depending on the security settings, the LinkStation may not be able to join, or may be

able to join but may not be authenticated by a domain. In such a case, it is recommended

to restrict access by delegating authority.

Access restrictions by using the Delegate Authority server feature


Notes:• Permissions are assigned to shared folders. Child folders in a shared folder inherit their

permissions from the parent folder. If a file or folder is moved into a new shared folder

with different permissions from the folder it was originally in, it will now have the access

restrictions from the new shared folder.

• When accessing the LinkStation from Windows via SMB, changing permissions from the

folder’s security tab in the properties screen of a folder is not supported. Access restrictions

for shared folders on the LinkStation can only be configured from within the Web Admin

interface.



Restricting access for Users and Groups on the LinkStation

You can set access restrictions for shared folders by username or group names for users that are registered on the LinkStation.

1 Create new user accounts and passwords in Windows, or record existing Windows usernames and passwords. Each account on the LinkStation will have the same username and password as the user’s Windows account.

2

Register users and groups on the LinkStation.

1 Add users as described on page 46.

2 Add groups as described on page 48.

3

Configure access restrictions for groups and/or users.

1 In the Web Admin interface, navigate to [Shared

Folders] - [Folder Setup].

2

Click a shared folder you want to set access restrictions for.


4

5

3


Check [Access Restrictions] to enable.

Click [Add].

Note: The procedure described here shows how to set access restrictions for users. To set access restrictions for a group of users, click [Local

Groups] - [Add].

.

1 Check the users (or groups) that you want to permit to access the share.

2 Click [Add].

6

Select the level of access for the user or group you added.

7 Click [Save].

You have assigned access restrictions.

• If you log on from a Microsoft Network Domain, you can set the [Access Restrictions] with the users and/or groups which are registered on the domain.

• If both [Read only] and [Read & Write] permissions are given to a user, that user will have read-only access.



Access Restrictions on NT Domain

The LinkStation can download users, groups, and passwords from an NT Domain server. This procedure is recommended for system administrators only.

Note: The LS-CHL LinkStation doesn’t support NT Domain in the US and the EU.

1

Create an account on the Domain Controller for the LinkStation.

Note: If there is an option to “Accept accounts for computers with Windows 2000 or earlier”, then select it.

2

Click [Network] - [Workgroup/Domain] - [Modify

Settings] in the Web Admin interface.

3

1 Select [NT Domain].

2 Enter [NT Domain Name].

3 Enter [NT Domain Controller Name].

4 Enter [Administrator Name].

5 Enter [Administrator Password].

6 Enter [WINS Server IP Address].(Optional)

7 Click [Save].

4

Follow the instructions in the previous section to add access restrictions to the domain.

Notes:• You can enter up to 23 bytes(UTF-8) for [NT Domain Name]. Alphanumeric characters, multi-byte characters, -(hyphen), _(underscore), and .(dot) may be used. Do not use a symbol as the first character.

• You can enter up to 63 bytes(UTF-8) for [NT Domain Controller Name]. Do not use multibyte characters. Alphanumeric characters, -(hyphen), and _(underscore) may be used. Do not use a symbol as the first character.



Notes:• If you change the LinkStation’s name, you will no longer be able to use domain users and groups or access restrictions. Rejoin the domain.

• If a domain user name contains more than 20 bytes, the LinkStation truncates it to 20 bytes.

• The LinkStation only downloads the first 1000 users or the first 1000 groups from a domain controller.

• If you operate LinkStation as a member server of NT Domain or Active Directory domain, you cannot connect as a guest user via AFP.

• When you change the user or group settings on the domain controller, these changes may not take effects immediately on LinkStation. If you need to reflect changes on the domain controller immediately, reboot LinkStation.

• If your LinkStation is a member server in NT Domain or Active Directory domain and you change the [Authentication Method] to [Workgroup] in [Network] - [Workgroup/Domain]

- [Modify Settings] on the Web Admin interface, the computer account on the domain controller will not be deleted automatically.

• If it has joined a domain network, you cannot connect to the LinkStation via FTP.



Access Restrictions on Active Directory

The LinkStation can download users, groups, and passwords from an Active Directory domain server.

This procedure is recommended for system administrators only.

Note: The LS-CHL LinkStation doesn’t support Active Directory in the US and the EU.

1

Create an account on the Domain Controller for the LinkStation.

Note: If there is an option to “Accept accounts for computers with Windows 2000 or earlier”, then select it.

2

Click [Network] - [Workgroup/Domain] - [Modify

Settings] in the Web Admin interface.

3

1 Select [Active Directory].

2 Enter [Active Directory Domain Name (NetBIOS

Name)].

3 Enter [Active Directory Domain Name (DNS/Realm

Name)].

4 Enter [Active Directory Domain Controller Name].

5 Enter [Administrator Name].

6 Enter [Administrator Password].

7 Enter [WINS Server IP Address]. (Optional).

8 Click [Save].

4

Follow the instructions on page 27 to 28 to add Access Restrictions to Domain Users/Domain

Groups.

You have completed the settings for this feature. .



Notes:• When you have the LinkStation joined to an Active Directory domain, you must specify the

DNS Server which can resolve names for Active Directory domain.

• After building an Active Directory domain, the administrator’s password which is needed to join the Active Directory domain must be changed at least once, or joining the

Active Directory domain will fail.

• Active Directory domain’s DNS name and NetBIOS name must be identical.

• If there are more than 5 minutes differences between the LinkStation’s clock and the domain controller’s clock, joining the domain or authenticating domain user or group may fail.



Access restrictions by using the Delegate Authority server feature

You may administer all user accounts and passwords centrally from a delegate server as described below. This procedure is intended for network administrators only.

Notes:• You can set access restrictions on shared folders. You cannot set different restrictions on

folders in a shared folder. Child folders in a shared folder inherit their permissions from the

parent folder.

• When accessing the LinkStation from Windows via SMB, changing permissions from the

folder’s security tab in the properties screen of a folder is not supported. Access restrictions

for shared folders on the LinkStation can only be configured from within the Web Admin

interface.

There are restrictions when administrating through a delegate authority server:

•

•

•

To access the LinkStation, you must be logged into Windows with the account registered to the authentication server.

If you use the Delegate Authority option, you cannot connect as a guest user via AFP.

If you use the Delegate Authority option, you cannot connect anonymously via FTP.

Notes:

Windows 7/Vista and Windows Server 2003/Server 2008 users need to change the security settings to use the Delegate Authority to External SMB server feature to restrict access.

[Start] - [BUFFALO] - [File Security Tool] - [File Security Tool], and then select [Change Security level] to change the security settings (Select "Recover default security level" change it back to the previous setting).

You may download the latest version of the File Sharing Security Level Change Tool from www.buffalotech.com.



1

2

3

LinkStation User Manual

1 In the Web Admin interface, navigate to

[Network] - [Workgroup/Domain].

2 Click [Modify Settings].

1 Click [Workgroup] (even if you are in a domain environment).

2 Enter the [Workgroup Name]. To use a

Windows Domain Controller as an external

SMB authentication server, enter its name for the [Workgroup Name].

3 Select [Delegate Authority to External SMB

Server].

1 Enter the [Authentication Server Name or IP

Address] .

Note: When connecting with AFP or FTP, an IP address is recommended.

2 Check [Use Windows Domain Controller as

Authentication Server], [Automatic User

Registration] and [Enable Authentication

Shared Folder].

3 Enter the shared folder name for authentication.

4 Click [Save].

34


4

The shared folder for authentication should be created on the LinkStation

A user that has been registered to the specified authentication server will be automatically registered as a user on the LinkStation when they open the shared folder for authentication (you can also register users directly).

Configuration of the Authentication Server is complete.

Notes:

• A user who is automatically registered will belong to the “hdusers” group. They added to other groups from within Group settings.

• You can restrict access to shared folders by username or group.

• The names of registered users are listed in [Users/Groups] - [External Users]. To delete an automatically registered user, select that user and click [Delete].

• When connecting through AFP or FTP, always use an IP address. Using a server name may cause problems with authentication.

• To specify a server from another subnet, enter its IP address.

• AFP and FTP connections do not support delegating authority to an external SMB server.



Disk Quotas

Notes:

• When using quotas, disable the recycle bin or empty the trash folder. The limited space includes the space used for trash.

• Quotas apply per drive or per array. If a Quota is set to 1 GB, each array or drive can use maximum of 1 GB.

• Quotas can’t be set for external USB hard drives connected to the LinkStation, only internal drives.

• The LS-CHL LinkStation doesn’t support disk quotas in the US and the EU.

Disk space quotas for users

To limit the space of shared folders that each user can use, follow the procedure below.

1

1 In the Web Admin interface, navigate to [Users/

Groups] - [Local Users].

2 Click [Create User].

2

1 Enter [Username], [User Id], [Password], and

[Description].

Note: User IDs may be between 1000 and 1999. Do not duplicate user IDs.

2 Check [Enable] for [User Quota].

3 Enter the maximum space this user is allowed for the [Hard Limit (GB)].

4 Click [Save].

Notes:

• Username and password must be the same one that the user logs into Windows with. If these values are different, shared folders with access restrictions cannot be accessed.

• Deleting or adding users repeatedly may cause quotas to not work properly.



3

Select [Shared Folders] - [Folder Setup] and click [Create Folder].

4

1 Configure the desired settings.

2 Click [Access Restrictions].

5

Click [Add].

6

1 Check the user you created in step 2.

2 Click [Add].

7

8

Click [Save].

You’ve configured a disk quota for users.

Select level of access privileges for the user you added from [Read Only] or [Read & Write].



Disk space quotas for groups

To limit the space of shared folders that each group can use, follow the procedure below.

1

1 In the Web Admin interface, select [Users/Groups] -

[Local Users].

2 Click [Create User].

2

1 Enter [Username], [User Id], [Password] and

[Description].

Note:

User IDs may be between 1000 and 1999. Do not duplicate user IDs.

2 Click [Save].

Repeat steps 1 and 2 for each user in the group.

Notes:

• Usernames and passwords should be the same ones that the users log in to Windows with.

• If two different quotas apply, such a a user quota and a group quota, the smaller quota is applied.

3

1 Select [Users/Groups] - [Local Groups].

2 Click [Create Group].



4 1 Enter [Group Name], [Group Id] and [Description].

Note:

The group ID may be any number from 1000 and

1999. Do not duplicate Group IDs.

2 Click [Enable] for [Group Quota].

3 Enter the total space that the group can use in the

Hard Limit (GB) field.

4 Select users from step 2 in [Local Users], and click

[Add] for each.

5 Click [Save].

Note: • Deleting and adding groups repeatedly may cause quotas to not work properly.

5

1 Click [Users/Groups] - [Local Users].

2 Select a user from step 2, and click [Edit User].

6

Select the group created in step 4 for [Primary Group] and click [Save].

7

Click [Shared Folders] - [Folder Setup].

8

Click [Create Folder].

9

1 Configure the desired settings.

2 Click [Access Restrictions].



10

11

1 Click [Local Groups].

2 Click [Add].

1 Check the group you created step 4.

2 Click [Add].

12

13

Click [Save].

You have configured a group quota.

Select level of access privileges for group you added from [Read Only] or [Read & Write].



FTP Server

By default, the LinkStation’s shares are only accessible by users connected to the same network or router as the LinkStation. The optional FTP server allows users to access the LinkStation from outside of the local network. You may enable it as follows.

1 In the Web Admin interface, navigate to

[Network] - [Settings] - [Network Services] and click [FTP].

2

1 Select [Enable].

2 Click [Save].

3

4

Click [Shared Folders] - [Folder Setup].

Click the folder to enable remote FTP access on.

5

1 Select whether the shared folder is [Read

Only] or [Read & Write].

2 Check [Ftp].

3 Click [Save].

The folder is now configured for FTP access. Do not forget to give read (or write) permissions for the FTP share to any users that will be accessing the share remotely. Folder permissions can only be changed from the Web Admin interface. Changing them remotely with FTP client software is not supported.



To access to the LinkStation with an FTP client

Configure your FTP client software with the following settings:

• Host Name IP address of the LinkStation.

• Username Username registered on the LinkStation

• Password Password registered to the LinkStation

• Port 21

Example ftp://192.168.11.150/

• You cannot write by FTP if the shared folder is set to read-only on the LinkStation.

• Access restrictions are applied based on the settings in the LinkStation. The restrictions are not displayed for users without permissions for the share.

• To access your FTP share from outside of your network, you may need to configure your router and firewall. Consult your router documentation for more information.

• Shared folders appear as follows when connected by FTP:

- disk1 share

- usbdisk1

- info

• The internal hard drive of the LinkStation is displayed as disk1, and a USB hard drive

(optional) will be displayed as usbdisk1.

• "usbdisk1" is not displayed when the USB hard drive is not connected, or if access is restricted.



Accessing the LinkStation with an Anonymous user:

To allow anonymous access to your FTP share, disable access restrictions on the FTP share.

Configure your FTP client as follows:

• Host Name IP address of the LinkStation

• Username anonymous

• Password any set of characters

• Port 21

Example ftp://192.168.11.150/

• To make your FTP share available from outside your network, you will need to configure your router and firewall. Consult your router’s documentation for information on how to allow FTP traffic.

• If the LinkStation joins a domain, anonymous users cannot access it.

• Folders created or copied via an AFP connection may not be deleted from the AFP connection. This is because an automatically generated ".AppleDouble" folder begins with a dot. To delete these files, use an SMB connection.

• Do not exceed 250 characters for a file/folder name including directory path when you are creating it by using an FTP connection. Otherwise, you cannot view or delete it in Explorer or other applications.



Direct Copy

DirectCopy automatically copies movie, music, and images directly to the LinkStation from a USB device.

You can connect many types of USB devices to the LinkStation, including USB hard drives, USB flash drives, single-card card readers, digital cameras, and USB printers. USB hubs, mice, keyboards, and card readers that support 2 or more cards are not supported.

1

Connect to a USB device (USB flash/digital camera/hard disk/card reader) to the LinkStation.

After the USB device is recognized, the function button is lit in blue for 60 seconds. After the function button is lit in blue, you can access the USB device.

USB

Connector

Power LED If an unsupported USB memory device is connected to the

LinkStation, then the function button will not light up in blue, and the device will not be mounted.

Function

Button

2

While the function button is blue, press it to automatically copy data from the USB device to a shared folder on the LinkStation. The function button will flash blue during the copy. Push the function button again to abort the copy.



Files are copied to the folder:

<shared folder>/pictures/yyyymmdd

yyyy: year copied

mm: month copied

dd: date copied

You may change the destination shared folder for DirectCopy in [Shared Folders] - [Direct

Copy] - [Modify Settings] in the Web Admin interface. Subsequent DirectCopy folders are created at:

<DirectCopy folder>/pictures/yyyymmdd/n

yyyy: year copied

mm: month copied

dd: date copied

n: 1st time n=0, 2nd time n=1, 3rd time=2 and so on.

For USB Mass Storage class USB devices, files with following extensions will be copied.

avi, divx, asf, mpg, mpe, m1v, vob, mts, m2ts, m2t, mpeg, mpeg2, vdr, spts, tp, ts, 3gp, mov, m4v, wmv, dvr-ms, xvid, mp4, jpg, jpeg, gif, png, tif, tiff, yuv, bmp, mp3, mpa, wma, aac, apl, ac3, lpcm, pcm, wav, m3u, m4a, m4b, aif, aiff, flac, ogg, mp2, mp1

For digital cameras that do not follow the USB Mass Storage Class standard, all files on the device will be copied.

3

When the access LED of the USB device goes off, the copy is finished. Dismount the USB device before unplugging it.

To dismount the USB device if the LinkStation is on, hold in the function button for 3 seconds.

The blue LED will go out, and the USB device is dismounted. You may now unplug it safely.

If you turn off the LinkStation, the USB device is already dismounted, and you can remove it safely.


Adding shared folders. Buffalo Technology LinkStation LS-XHL, LinkStation LS-WXL, LSV40TL, LinkStation Pro Duo Diskless, LinkStation, LinkStation LS-WSXL, LinkStation LS-CHL, LinkStation LS-VL, LinkStation LS-WVL

Adding shared folders

Access Restrictions

Disk Quotas

FTP Server

To access to the LinkStation with an FTP client

Accessing the LinkStation with an Anonymous user:

Direct Copy

Key Features

Related manuals

Table of contents

Adding shared folders. Buffalo Technology LinkStation LS-XHL, LinkStation LS-WXL, LSV40TL, LinkStation Pro Duo Diskless, LinkStation, LinkStation LS-WSXL, LinkStation LS-CHL, LinkStation LS-VL, LinkStation LS-WVL