[CentOS] Network FS w/o user setup
johnny at centos.org
Fri Jun 13 15:04:22 UTC 2008
Ted Miller wrote:
> Johnny Hughes wrote:
>> Ted Miller wrote:
>>> Is there a file system + configuration that will let me share a
>>> directory, and anyone who has access to something in that directory
>>> on the server will also have access (and lack of access) to the same
>>> files from the client? Clients will be Centos5, Win2K, WinXP. Server
>>> is Centos5.
>>> To put it another way, all users have accounts on the server. I
>>> don't want to have to set up ANY user information on the server,
>>> other than what I set up to control local access. I just want to say
>>> "Share /vmware" and have it available, to the same users who can
>>> access it locally.
>>> With Samba I have to maintain duplicate user lists, password lists,
>>> and share access lists. I have not been able to find a clear
>>> instructions on how NFS4 handles this, but what I found didn't seem
>>> any better than Samba.
>>> I don't mind implementing ACLs on the server if it will do what I
>>> need, but I can't find anything that says it will save me any work
>> Well, since you want to set up shares ... and since you want to share
>> between Windows and Linux machines, and to share for windows you will
>> need to use samba.
>> Since you can also set up linux to use a samba client, that would
>> probably be the best method to "share these files" ... if you expect
>> to just oepn them via a file manager on all platforms.
> Is there a way to set up samba so that it "just uses" ACL information
> for permissions, instead of having to spell everything out for each
> share and each user?
Well ... you would need to Join the "Samba Server" to your "Windows
Domain". If that domain is ADS (Active Directory Services) then it is a
different procedure than if it is a WinNT type Windows Domain.
Once the server is a member if the domain, the shares that are setup
will work for your Windows users.
You would then need to setup "Samba Authentication" for your Linux
The best method to do that depends on your business, who you have to
interface with, what services you are running on the network, etc.
I run a Samba PDC (using LDAP as a backend) with Samba BDC's in several
remote locations. If you do not require ADS network, then this can work
great as LDAP databases can be replicated from the PDC to the BDCs and
Linux machines can easily be setup to use LDAP for authentication.
However, if you need an ADS domain, then the LDAP method does not work
since Samba can not be a Domain Controller for ADS. That would require
you to be a Domain "Member Server" and enable samba authentication for
The methods to do that are too hard to explain on list. Much research
needs to be done on samba.org docs (assuming you already understand the
whole Windows Domain concept and how it works on Windows). The way that
you will proceed is an infrastructure decision and based your individual
needs and infrastructure.
-------------- next part --------------
A non-text attachment was scrubbed...
Size: 251 bytes
Desc: OpenPGP digital signature
Url : http://lists.centos.org/pipermail/centos/attachments/20080613/ef44f196/signature.bin
More information about the CentOS