Re: Help me replace some Windows installations

From: ZnU (znu_at_acedsl.com)
Date: 09/13/04


Date: Sun, 12 Sep 2004 23:05:28 -0400

In article <3v3f12-j7p.ln1@triangulo.it.uc3m.es>,
 ptb@oboe.it.uc3m.es (P.T. Breuer) wrote:

> ZnU <znu@acedsl.com> wrote:
> > I thought SMB permissions were based on who mounted the share? How could
>
> Correct - i.e. access is per user, not per machine (as in NFS).
>
> > I then mount the share with a system-wide process but still arrange for
>
> You tell the "system-wide process" which user and password to use. Or
> you tell the other end to accept anyone. Etc.

But that process only runs once at startup, and I'd need to use
different login information for each user.

> > the logged in user to have appropriate access to his/her home directory?
> > OS X and Windows solve this problem by mounting the share using each
> > specific user's account information when that user logs in.
>
> Then go ahead and do the same. Hic. You can use a specific user
> application to gain access instead of mounting it.

I'm not sure what you mean here. You mean I could have a user process
execute at login to mount the user's home directory with the proper
permissions? Something like that would be ideal.

> > Do I have to use NFS to make this all work? I'd rather not have to deal
>
> NFS is NFS, not SMB. You are talking about SMB.

Right, but I'm asking if I have to use NFS rather than SMB to solve the
permissions issues.

> > with all of the security implications there.
>
> Like what? (Yes, I know how to use NFS to advantage).

I'm not terribly familiar with NFS. But if I just mount the whole /Users
hierarchy from the OS X server on the Linux machines via NFS, don't I
have to trust the client machines to enforce permissions on it?

> > Also, what about the authentication situation? Will Fedora authenticate
> > against OS X's OpenDirectory if I just fill in the appropriate fields in
> > the 'Authentication' GUI utility?
>
> Pass, since I have no idea what an OpenDirectory is, apart from that
> gleaned from your sentence (i.e. that it ias authentication mechanism
> present in apple mac's recent systems).

OpenDirectory is basically OpenLDAP with an Apple schema that provides
everything OS X needs. I *think* this schema is a superset of RFC 2307
(which is what I'd want for Linux clients, right?), but it's hard to
find documentation for this sort of thing. I was hoping someone here had
done this and could tell me.

I've managed to Google up lots of information about using a Linux server
with OS X clients, but I've found practically nothing about doing things
the other way around.

-- 
"I want to thank my friend, Sen. Bill Frist, for joining us today.... He married
a Texas girl, I want you to know. (Laughter.) Karyn is with us. A West Texas
girl, just like me."
                       -- George W. Bush in Nashville, Tenn., May 27, 2004


Relevant Pages

  • Re: Recommendations for rstricting ftp
    ... YOu can mount a subdirectory via nfs from the sattelite box ... > those files within that will have permissions. ... It's several sub-folders off the root of the receiver. ... so I'd mounted the smb share with the ro option. ...
    (comp.os.linux.misc)
  • RE: Setting up NFS shares
    ... A client can be either a host or a client group. ... the appropriate permissions. ... Share Windows Folders by Using Server for NFS ... Click the NFS Sharing tab, and then click Share this folder. ...
    (microsoft.public.windows.file_system)
  • RE: Setting up NFS shares
    ... installed in my server. ... the appropriate permissions. ... Share Windows Folders by Using Server for NFS ... Click the NFS Sharing tab, and then click Share this folder. ...
    (microsoft.public.windows.file_system)
  • negative permission scanner for periodic/security
    ... for a process to be in more groups that can be transmitted over NFS ... not bothered looking for negative user permissions as that isn't broken ... Redistributions in binary form must reproduce the above copyright ... this list of conditions and the following disclaimer in the ...
    (freebsd-hackers)
  • Re: [opensuse] How do I mount USB drive world writable using device notifier?
    ... and only r permissions for groups and others. ... I'm a bit confused as to what you are asking, mentioning samba cross ... But most of it is done using NFS mounts. ... even if they seem as odd to Windows people as ...
    (SuSE)