NFS v SAMBA

madivad · 03-23-2008, 01:54 AM

Well, actually, this isn't an NFS v's SAMBA thread, it's more a "I've tried SAMBA, and got it working... Now I'm bored... Let's play with NFS" Thread... But that's too long :-)

Ok, I have found a QUICK way to play with NFS is simply to use the administration GUI for sharing folders. That seems to work quite nicely (maybe I should have been doing that instead of messing with the bland - but beautiful - command line).

What I want to know is, I know it is more "windows" like with permissions and how windows 'views' the share, but how do you administer users on it?

I mean, I don't actually have to go and create users on my solaris box to mimic my network, do I?

Is there an alternative to doing this? ie, I don't want anyone to be able to log onto this fileserver, except for administrators.

Could someone be so kind as to give me an NFS for dummies approach to users and security under NFS?

jlliagre · 03-23-2008, 05:15 AM

Not sure about what you mean with Windows like, but Windows has no native NFS support so if you want your Windows boxes to access shares, better to stick with SMB.

You certainly can have user accounts on the NFS server that do not allow their owners to log in. A common way would be to set the user shell to /bin/false.

madivad · 03-29-2008, 07:08 AM

Quote:

Originally Posted by jlliagre

Not sure about what you mean with Windows like, but Windows has no native NFS support so if you want your Windows boxes to access shares, better to stick with SMB.

You certainly can have user accounts on the NFS server that do not allow their owners to log in. A common way would be to set the user shell to /bin/false.

Thanks, great info... /bin/false is exactly the sort of thing I was looking for.

How do I make it that anyone who has access to the network can have rw privileges all files in the share? ie, I don't care if "Dave" or "David" or "Administrator" logs into the samba shares, I want them all to be able to create new files/folders and delete or modify existing ones.

This is what I have at the moment, but it doesn't work:

Code:

[solaraid]
path = /solaraid
available = yes
browseable = yes
public = yes
writable = yes

I have tried "valid users" and even mapping windows user names to the owner name in solaris (username maps), but they didn't help either.

Code:

dave@solaris:~# smbstatus 

Samba version 3.0.27a
PID     Username      Group         Machine                        
-------------------------------------------------------------------
10164   dave          staff         flightsim    (10.1.1.32)
10163   dave          staff         amd3000      (10.1.1.30)

Service      pid     machine       Connected at
-------------------------------------------------------
solaraid     10163   amd3000       Sat Mar 29 23:00:20 2008
solaraid     10164   amd3200       Sat Mar 29 23:00:36 2008

Locked files:
Pid          Uid        DenyMode   Access      R/W        Oplock           SharePath   Name   Time
--------------------------------------------------------------------------------------------------
10163        101        DENY_NONE  0x100001    RDONLY     NONE             /solaraid   .   Sat Mar 29 23:02:04 2008
10163        101        DENY_NONE  0x100001    RDONLY     NONE             /solaraid   .   Sat Mar 29 23:02:04 2008
10164        101        DENY_NONE  0x100001    RDONLY     NONE             /solaraid   .   Sat Mar 29 23:00:36 2008

dave@solaris:~#