3.4.0 Matrix Server Administration Guide

Chapter 2: Matrix Administration 15

connection for the server must not be established while MatrixServer

is running on the server.

• If servers from multiple matrices can access the SAN via a shared FC

fabric, avoid importing the same disk into more than one matrix.

Filesystem corruption can occur when different matrices attempt to

share the same filesystem.

• Changing the hardware configuration, such as adding or replacing

switch modules, is not supported while Matrix Server is running. This

restriction applies only to FibreChannel switches that are under the

control of Matrix Server.

• When configuring security on PSFS filesystems, use domain users and

groups instead of local users and groups. Security cannot be enforced

unless all nodes participate in the same domain AND domain users

and groups are used exclusively in the filesystem ACLs.

Windows Authentication

• Matrix Server uses NT credentials to authenticate users attempting to

access data on PSFS filesystems.

• If you are using MxDB for SQL Server, a DNS entry must exist for each

Virtual SQL Server/IP address. The entry must include an A record

and a [PTR] record for forward and reverse lookup. Windows

authentication may fail if these records do not exist.

Active Directory

Matrix Server requires that Active Directory be configured. You should

be aware of the following:

• With Windows 2003, all Matrix Server nodes must be members of an

Active Directory domain. This is necessary for filesystem security.

• Active Directory user and groups should be used in filesystem ACLs

and SQL Server service accounts and roles. Do not use local users and

groups for these purposes because they are meaningless to other

nodes in the matrix.