Novell OPEN ENTERPRISE SERVER 2 SP2 - ADMINISTRATION, Руководство по внедрению, Страница: 191 / 288

File Services 191
n
ov
do
cx (e
n)
22
Ju
n
e 20
09
Table 17-9
Comparing OES 2 CIFS Solutions
Item Novell CIFS Novell Samba Samba in DSfW
Authentication A Password policy that
allows the CIFS proxy
user to retrieve
passwords is required. A Samba-compatible
Password policy is
required for compatibility
with Windows workgroup
authentication. The Domain Services
Password policy is required
for DSfW users. The domain
is set up as a trusted
environment.
DSfW uses Active Directory
authentication methods, such
as Kerberos*, to ensure that
only authorized users can log
in to the domain.
File system
support NSS is the only file
system supported for this
release. It is recommended (but not required) that you create
Samba shares on NSS data volumes.
NSS is fully integrated with eDirectory for easier
management, and using an NSS volume allows you to
take advantage of the rich data security model in NSS.
You can use either iManager or the nssmu utility to create
an NSS volume on an OES 2 server. For instructions on
how to set up an NSS volume, see “
Managing NSS
Volumes ” in the OES 2 SP2: File Systems Management
Guide .
LUM and Samba
enablement LUM and Samba
enablement are not
required. Users must be enabled
for LUM and Samba and
assigned to a Samba
group. eDirectory users in the
domain (eDirectory partition)
are automatically Samba
users and are enabled to
access Samba shares. See
“
Creating Users ” in the OES 2
SP2: Domain Services for
Windows Administration
Guide
.
Domain users are set up with
the necessary UID and default
group (DomainUsers)
membership.
Every additional eDirectory
group created within the
domain is automatically Linux-
enabled.
Username and
password The same username and
password must exist on
both the Windows
workstation and in
eDirectory. The same username and
password must exist on
both the Windows
workstation and in
eDirectory. eDirectory users in the
domain (eDirectory partition)
can log into any workstation
that has joined the domain.
There is no need for a
corresponding user object on
the workstation.