HP ProLiant DL380 G5 DPSS, Руководство администратора

Страница: 104 / 168

4. Right-click Network access: Let Everyone permissions apply to anonymous users , and then click
Properties .
5. To allow permissions applied to the Everyone group to apply to anonymous users, click Enabled .
The default is Disabled .
6. Restart the NFS server service. From a command prompt, enter
net stop nfssvc
. Then enter
net start nfssvc
. Notify users before restarting the NFS service.
7. Assign the Everyone group the appropriate permissions on the NFS Share.
8. Enable anonymous access to the share.
To enable anonymous access to an NFS share, do the following:
1. Open Windows Explorer by clicking Start > Run , and entering Explorer.
2. Navigate to the NFS share.
3. Right-click the NFS Share, and then click Properties .
4. Click NFS Sharing .
5. Select the Allow Anonymous Access checkbox.
6. Change from the default of -2,-2, if desired.
7. Click Apply .
8. Click OK .
Best practices for running Server for NFS
• Provide user-level security
• Secure fi les
• Secure new drives
• Allow users to disconnect before stopping the Server for NFS service
• Use naming conventions to identify shares with EUC encoding
• Protect con fi guration fi les
For further details, see the online help for Microsoft Services for Network File System.
User Name Mapping
The User Name Mapping component provides centralized user mapping services for Server for NFS and
Client for NFS. User Name Mapping lets you create maps between Windows and UNIX user and group
accounts even though the user and group names in both environments may not be identical. User
Name Mapping lets you maintain a single mapping database making it easier to con fi gure account
mapping for multiple computers running MSNFS.
In addition to one-to-one mapping between Windows and UNIX user and group accounts, User Name
Mapping permits one-to-many mapping. This lets you associate multiple Windows accounts with a single
UNIX account. This can be useful, for example, when you do not need to maintain separate UNIX
accounts for individuals and would rather use a few accounts to provide different classes of access
permission.
You can use simple maps, which map Windows and UNIX accounts with identical names. You can also
create advanced maps to associate Windows and UNIX accounts with different names, which you can
use in conjunction with simple maps.
User Name Mapping can obtain UNIX user, password, and group information from one or more Network
Information Service (NIS) servers or from password and group fi les located on a local hard drive. The
password and group fi les can be copied from a UNIX host or from a NIS server.
User Name Mapping periodically refreshes its mapping database from the source databases, ensuring
that it is always kept up-to-date as changes occur in the Windows and UNIX name spaces. You can also
refresh the database anytime you know the source databases have changed.
104
Other network fi le and print services