From: Peter Van Lone (petervl_at_gmail.com)
Date: Wed Jul 05 2006 - 00:31:16 CEST
Message-ID: <68b791330607041531n3ba31236t7f3febcacf0a10e2@mail.gmail.com> Date: Tue, 4 Jul 2006 17:31:16 -0500 From: "Peter Van Lone" <petervl@gmail.com> Subject: Re: [suse-sles-e] macs and CIFS/SAMBA
On 6/27/06, Mike Petersen <mgpeter@pcc-services.com> wrote:
> Being a member server would simply allow SLES to provide shares that can
> be accessed by the anyone in the User Database from the Windows Server -
> if the data resides on a Windows Server in the first place, SLES still
> access that data through a Username "token" when it mounts that data.
> This would be a big security risk, especially if the company cares that
> much about it's data.
I've been out of town, had to let this ball drop for awhile .. (sorry
for the double post, Mike ..)
can you give me just a bit more detail about what you mean by this?
How is this a security threat? Is it that the username "token" is in
clear text? Does it somehow change the security rights that each mac
user would recieve when they open a document?
Generally I don't think there is much need for security ... this is
massive document data storage for a print/production house and the mac
users need to get the data for graphic work primarily. From what I
understand ... there is one big share and many many directories/
sub-directories and many many files. The issue is the very slow time
for macs to get a directory list. This does not happen with windows
clients.
A peer has passed me a knowledge article link, that I do not this
moment have access to, that details the "known problem" that they
believe is occuring. If it is interesting to you, I would be happy to
attach the url later.
The thing I'm trying to figure out is whether it makes any sense to do
this ... Novell has a cool solutions article about using SLES as a NAS
front-end for remote NFS storage. If it makes sense to do this with
the CIFS/SAMBA remote storage, it might be a solution to this problem.
If it does not makes sense to do it, it would be helpful have some
specifics about why, so that I can share it with the team and
discourage even attempting to pilot the solution.
> Maybe you should be looking to Microsoft or the SAN vendor to provide a
> NFS Server for the Unix/MacOS clients.
>
again, if I can understand why the proposal won't work, then I would
of course suggest this.
Thanx
Peter
---------------------------------------------------------------------
To unsubscribe, e-mail: suse-sles-e-unsubscribe@suse.com
For additional commands, e-mail: suse-sles-e-help@suse.com
This archive was generated by hypermail 2.1.7 : Wed Jul 05 2006 - 00:31:33 CEST