Using Network Attached Storage - NAS
Network Attached Storage (NAS) systems provide file-based access to their own local storage to remote clients via special network protocols. In Microsoft Windows environments, the SMB or CIFS protocol is typically used to access files on a remote system. Throughout this article, the term NAS represents any computer system that is capable of sharing its own local storage via SMB or CIFS protocol, may it be a traditional Windows file server, a Linux server with a running Samba service, or a dedicated physical or virtual appliance with its own operating system and management interface.
Please note: A storage system attached via FibreChannel, iSCSI, or other block-level storage protocols, is called Storage Area Network (SAN) storage. SAN storage is used like any other local disk (also referred to as Direct Attached Storage or DAS); no further configuration is needed to let MailStore Server store its data on it.
MailStore Server can utilize NAS systems to store its production data or as target for its backup data.
To ensure successful operation, the NAS should meet the following prerequisites:
- The NAS must not be turned off, disconnected, or put into standby mode at any time, as long as there is a MailStore Server service accessing the data on the NAS. Otherwise data corruption may occur, which can lead to irreparable loss of data.
- When moving an existing MailStore database, the available disk space should be twice the size of the current archive.
The follow three steps are needed to setup a network share that can be used by MailStore Server:
- Create a dedicated folder for the MailStore data to reside in on the NAS.
- Share that folder if it is not already inside a shared folder on the network, via SMB or CIFS protocol. Please consult the vendor's documentation on how to share a folder on the network.
- Authorize as described below, either a computer or user object to access the network share and the data therein.
Authorizing a Computer Object
As the MailStore Server service runs under the account of the SYSTEM user on the Windows operating system, the SYSTEM user is identified by the computer object (e.g. SERVER01$) where MailStore Server is installed on when accessing network resources. Thus permissions to access the network share must be granted to the corresponding computer object.
Please note: Granting access to computer objects, requires all involved systems to be part of an Active Directory domain. If this requirement cannot be satisfied, or the NAS system does not support granting access to computer objects at all, use the instructions in the Authorizing a User Object section instead.
- Grant the computer object full control over the network share. This enables the local system account of the computer on which MailStore Server is installed to access the network share.
- If file system permissions are required on the shared directory, grant the computer object full control here as well.
Authorizing a User Object
- Create a user object either locally on the NAS system or in a directory service (e.g. Active Directory) that is used by the NAS to authenticate users.
- Grant the user object full control over the directory share.
- If file system permissions are required, grant the user object full control here as well.
Installing MailStore Server while using a NAS system
- Install MailStore Server on the desired machine. Detailed instructions can be found in the Installation section if the MailStore manual.
- Open the MailStore Server Service Configuration.
- Stop the MailStore Server service.
- Navigate to General and enter the path for the network share on the NAS system in UNC notation (\\computer\sharename\). In the example below, the name of the NAS system is NAS01 and the name of the share is MailArchive.
If a computer object was granted access to the network share, the MailStore service can be started by clicking on Start in the MailStore Server Service Configuration interface.
If a user object was granted access to the network share, proceed with the next section.
If a user object has been granted access on the network share, MailStore Server must establish a connection to the share during startup using this user object. Proceed as follows, to configure access to network share for the MailStore Server service:
- On the MailStore Server computer, open the MailStore Server Service Configuration.
- Click on Network Shares.
- Click on Add...
- Enter the path for the network share on the NAS system into the Share Path field in UNC notation (\\computer\sharename\).
- Enter the username and password of the corresponding user object that has access to the network share into the User Name and Password fields.
Important notice: Are the MailStore Server computer and the NAS in different Windows domains or a workgroup, the computer or domain name must be put in front of the username, e.g. computer\username where computer has to be the host name of the NAS, or domain\username, where domain has to be the name of the domain the NAS has joined. - Click on OK.
- The MailStore Server service can now be started by clicking on Start in the MailStore Server Service Configuration interface.
Please note: Due to the different security contexts of the MailStore Server service and the MailStore Server Service Configuration application, the user interface does not provide any test functionality and thus checking the Event Viewer for potential error messages is recommended after starting the service.
Moving the archive to a network share is described in the article Moving the Archive.
- Create a network share as described in Creating a Network Share.
- If a user object has been granted permissions on the share, you have to configure a startup script.
- Follow the instructions from the backup article.
Troubleshooting
In case of errors or problems the event viewer or debug log can be used to troubleshoot.
