Novell OPEN ENTERPRISE SERVER 2 SP2 - ADMINISTRATION, Руководство по внедрению, Страница: 284 / 288

284 OES 2 SP2: Planning and Implementation Guide
n
ov
do
cx (e
n)
22
Ju
n
e 20
09
K.4.1 Deployment Scenario 1: Complex Mixed Scenario with a
Mix of File Access Services
Š
“First Server in a New Tree (Example1)” on page 284
Š “Subsequent Servers in a Tree (Example 1)” on page 284
First Server in a New Tree (Example1)
Š “Not recommended—non-name-mapped (new tree) S1 (DSfW) server” on page 284
Š
“Non-DSFW Server” on page 284
Not recommended—non-name-mapped (new tree) S1 (DSfW) server
Installation is the same as for the Forest Root Domain (FRD). The tree is named as per domain
naming standards. Samba is installed as part of DSFW installation. Neither AFP nor Novell CIFS
can be installed/configured on this server because they are not compatible with the DSFW server.
In order for users to access NSS volumes on this server through Samba, the users need to fit the
following constraints:
Š
They must be LUM-enabled
Š
Cross domain access is necessary for users from outside of the DSFW domain corresponding to
this server to access the volumes on this server. This can be achieved by adding those contexts
to the LUM context for the LUM workstation object that represents the domain controller.
Š
Winbind translates user principles to UIDs for non-NSS volumes. LUM enabling is not
required for non-NSS volume access.
Non-DSFW Server
If the first server in the tree is a non-DSFW server, then any combination of AFP, Novell CIFS, or
Samba can be installed on this server. Because the tree is being newly created, the users, the proxy
users (system users), and the Password policies will not be present. Use the following procedure for
installation:
1 Install and configure the server with eDirectory, NSS, and other core services, but without
selecting file access services.
2
Use iManager to create the Password policies to be assigned to the users.
3 Use iManager to create a system user (proxy user) to be used for the OES services.
4 Use the Yast install to configure the Novell AFP and Novell CIFS services as follows:
4a Specify the proxy user and password that were created.
4b
Select the appropriate Password policies for the AFP or CIFS users.
4c Specify the contexts under which to search for the AFP or CIFS users.
5
If the AFP/CIFS/Samba user objects are present on NetWare servers, upgrade Novell Security
Services version 2.0.6 in order to upgrade to NMAS 3.2 on NetWare.
Subsequent Servers in a Tree (Example 1)
Š “S2, S3, S4” on page 285
Š
“S5” on page 285