Novell OPEN ENTERPRISE SERVER - CONVERSION GUIDE 12-2010, Руководство по внедрению

Страница: 291 / 296

Coordinating Password Policies Among Multiple File Services 291
K.4 Deployment Guidelines for Different Servers
and Deployment Scenarios

Section K.4.1, “Deployment Scenario 1: Complex Mixed Scenario with a Mix of File Access
Services,” on page 291

Section K.4.2, “Deployment Scenario 2: Mutually /Exclusive Users,” on page 293

Section K.4.3, “Deployment Scenario 3: Simple deployments,” on page 293

Section K.4.4, “Modifying User Password Policies after AFP/CIFS/Samba/DSfW Is Installed,”
on page 293

Section K.4.5, “Adding New User eDirectory Contexts to AFP/CIFS after AFP/CIFS/Samba/
DSfW Is Installed.,” on page 293

Section K.4.6, “Enabling File Access for DSfW Servers Across Domains,” on page 293
K.4.1 Deployment Scenario 1: Complex Mixed Scenario with a
Mix of File Access Services

“First Server in a New Tree (Example1)” on page 291

“Subsequent Servers in a Tree (Example 1)” on page 292
First Server in a New Tree (Example1)

“Not recommended—non-name-mapped (new tree) S1 (DSfW) server” on page 291

“Non-DSFW Server” on page 291
Not recommended—non-name-mapped (new tree) S1 (DSfW) server
Installation is the same as for the Forest Root Domain (FRD). The tree is named as per domain
naming standards. Samba is installed as part of DSFW installation. Neither AFP nor Novell CIFS
can be installed/configured on this server because they are not compatible with the DSFW server.
In order for users to access NSS volumes on this server through Samba, the users need to fit the
following constraints:

They must be LUM-enabled

Cross domain access is necessary for users from outside of the DSFW domain corresponding to
this server to access the volumes on this server. This can be achieved by adding those contexts
to the LUM context for the LUM workstation object that represents the domain controller.

Winbind translates user principles to UIDs for non-NSS volumes. LUM enabling is not
required for non-NSS volume access.
Non-DSFW Server
If the first server in the tree is a non-DSFW server, then any combination of AFP, Novell CIFS, or
Samba can be installed on this server. Because the tree is being newly created, the users, the proxy
users (system users), and the Password policies will not be present. Use the following procedure for
installation:
1
Install and configure the server with eDirectory, NSS, and other core services, but without
selecting file access services.