Azure-docs: Is this section still relevant?

Created on 11 Sep 2019  Â·  7Comments  Â·  Source: MicrosoftDocs/azure-docs

@MagTer commented on Wed Sep 11 2019

Azure file shares do not currently support Kerberos authentication with your Active Directory (AD) or Azure Active Directory (AAD) identity, although this is a feature we are working on. Instead, you must access your Azure file share with the storage account key for the storage account containing your Azure file share.


Dokumentinformation

⚠ Redigera inte det här avsnittet. Det krävs för docs.microsoft.com ➟ länkning till GitHub-problem.


@srvbpigh commented on Wed Sep 11 2019

Hello, @MagTer

Thank you for your feedback.

We are actively reviewing your comments and will get back to you soon.

Kind regards,
Microsoft DOCS International Team

Pri1 assigned-to-author doc-enhancement filesubsvc storagsvc triaged

Most helpful comment

Yes, that is my understanding as well. Just wanted to highlight that the documentation might need some love :)

All 7 comments

Hi team,
I moving this here because it refers to the original documentation
best regards

@MagTer Thank you for the valuable feedback,we are investigating the issue.

@MagTer AAD authentication is actually supported with Azure File Share, You can refer to the following documentation: https://docs.microsoft.com/en-us/azure/storage/files/storage-files-active-directory-overview
Let me know if this helps.

Yes, that is my understanding as well. Just wanted to highlight that the documentation might need some love :)

@MagTer @CeciAc As @Adam-Smith-MSFT pointed out, this section is incorrect. We have AAD authentication through domain services, currently. We're still working on updating/improving the authentication relevant documentation but, we appreciate you pointing out places where it needs attention. :)

Also worth pointing out that you need to set the share (RBAC) permissions under IAM in the Azure web portal for the file share. Once you have done that follow the above instructions to map it using the storage account name and access key. Then you can set the NTFS permissions. Once the NTFS permissions have been set you can get rid of the credentials (from credential manager) and map it normally using the logged on users Azure AD credentials (as long as you have Azure AD Domain Service set up and it has synced any recent on-prem AD changes).

We've significantly reworked the identity-based authentication story and as such this should be resolved. Also this segment has been removed from this article.

Accordingly:

please-close

Was this page helpful?
0 / 5 - 0 ratings

Related issues

JeffLoo-ong picture JeffLoo-ong  Â·  3Comments

AronT-TLV picture AronT-TLV  Â·  3Comments

Agazoth picture Agazoth  Â·  3Comments

jamesgallagher-ie picture jamesgallagher-ie  Â·  3Comments

behnam89 picture behnam89  Â·  3Comments