HP AiO400r HP StorageWorks All-in-One Storage System User Guide (440583-006, J - Page 179

Best practices for running Server for NFS, In Security Settings, double-click

Page 179 highlights

is not mapped to a Windows account is treated by Server for NFS as an anonymous user. By default, the user identifier (UID) and group identifier (GID) is -2. For example, if files are created on an NFS Share by UNIX users who are not mapped to Windows users, the owner of those files are listed as anonymous user and anonymous group, (-2,-2). By default, Server for NFS does not allow anonymous users to access a shared directory. When an NFS share is created, the anonymous access option can be added to the NFS share. The values can be changed from the default anonymous UID and GID values to the UID and GID of any valid UNIX user and group accounts. NOTE: In Windows Server 2003, the Everyone group does not include anonymous users by default. When allowing anonymous access to an NFS Share, the following must be performed by a user with administrative privileges due to Windows Storage Server 2003 security with anonymous users and the Everyone group. 1. Click Remote Desktop. Log on to the storage system. 2. Click Start >Control Panel > Administrative Tools, and then click Local Security Policy. 3. In Security Settings, double-click Local Policies, and then click Security Options. 4. Right-click Network access: Let Everyone permissions apply to anonymous users, and then click Properties. 5. To allow permissions applied to the Everyone group to apply to anonymous users, click Enabled. The default is Disabled. 6. Restart the NFS server service. From a command prompt, enter net stop nfssvc. Then enter net start nfssvc. Notify users before restarting the NFS service. 7. Assign the Everyone group the appropriate permissions on the NFS Share. 8. Enable anonymous access to the share. To enable anonymous access to an NFS share: 1. Open Windows Explorer by clicking Start > Run, and entering Explorer. 2. Navigate to the NFS share. 3. Right-click the NFS Share, and then click Properties. 4. Click NFS Sharing. 5. Select the Allow Anonymous Access checkbox. 6. Change from the default of -2,-2, if desired. 7. Click Apply. 8. Click OK. Best practices for running Server for NFS • Provide user-level security • Secure files • Secure new drives • Allow users to disconnect before stopping the Server for NFS service HP StorageWorks All-in-One Storage System 179

  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • 34
  • 35
  • 36
  • 37
  • 38
  • 39
  • 40
  • 41
  • 42
  • 43
  • 44
  • 45
  • 46
  • 47
  • 48
  • 49
  • 50
  • 51
  • 52
  • 53
  • 54
  • 55
  • 56
  • 57
  • 58
  • 59
  • 60
  • 61
  • 62
  • 63
  • 64
  • 65
  • 66
  • 67
  • 68
  • 69
  • 70
  • 71
  • 72
  • 73
  • 74
  • 75
  • 76
  • 77
  • 78
  • 79
  • 80
  • 81
  • 82
  • 83
  • 84
  • 85
  • 86
  • 87
  • 88
  • 89
  • 90
  • 91
  • 92
  • 93
  • 94
  • 95
  • 96
  • 97
  • 98
  • 99
  • 100
  • 101
  • 102
  • 103
  • 104
  • 105
  • 106
  • 107
  • 108
  • 109
  • 110
  • 111
  • 112
  • 113
  • 114
  • 115
  • 116
  • 117
  • 118
  • 119
  • 120
  • 121
  • 122
  • 123
  • 124
  • 125
  • 126
  • 127
  • 128
  • 129
  • 130
  • 131
  • 132
  • 133
  • 134
  • 135
  • 136
  • 137
  • 138
  • 139
  • 140
  • 141
  • 142
  • 143
  • 144
  • 145
  • 146
  • 147
  • 148
  • 149
  • 150
  • 151
  • 152
  • 153
  • 154
  • 155
  • 156
  • 157
  • 158
  • 159
  • 160
  • 161
  • 162
  • 163
  • 164
  • 165
  • 166
  • 167
  • 168
  • 169
  • 170
  • 171
  • 172
  • 173
  • 174
  • 175
  • 176
  • 177
  • 178
  • 179
  • 180
  • 181
  • 182
  • 183
  • 184
  • 185
  • 186
  • 187
  • 188
  • 189
  • 190
  • 191
  • 192
  • 193
  • 194
  • 195
  • 196
  • 197
  • 198
  • 199
  • 200
  • 201
  • 202
  • 203
  • 204
  • 205
  • 206
  • 207
  • 208
  • 209
  • 210
  • 211
  • 212
  • 213
  • 214
  • 215
  • 216

is not mapped to a Windows account is treated by Server for NFS as an anonymous user. By default,
the user identifier (UID) and group identifier (GID) is -2.
For example, if files are created on an NFS Share by UNIX users who are not mapped to Windows
users, the owner of those files are listed as anonymous user and anonymous group, (-2,-2).
By default, Server for NFS does not allow anonymous users to access a shared directory. When an
NFS share is created, the anonymous access option can be added to the NFS share. The values can
be changed from the default anonymous UID and GID values to the UID and GID of any valid UNIX
user and group accounts.
NOTE:
In Windows Server 2003, the Everyone group does not include anonymous users by default.
When allowing anonymous access to an NFS Share, the following must be performed by a user with
administrative privileges due to Windows Storage Server 2003 security with anonymous users and
the Everyone group.
1.
Click
Remote Desktop
. Log on to the storage system.
2.
Click
Start
>
Control Panel
>
Administrative Tools
, and then click
Local Security Policy
.
3.
In Security Settings, double-click
Local Policies
, and then click
Security Options
.
4.
Right-click
Network access: Let Everyone permissions apply to anonymous users
, and then click
Properties
.
5.
To allow permissions applied to the Everyone group to apply to anonymous users, click
Enabled
.
The default is
Disabled
.
6.
Restart the NFS server service. From a command prompt, enter
net stop nfssvc
. Then enter
net start nfssvc
. Notify users before restarting the NFS service.
7.
Assign the Everyone group the appropriate permissions on the NFS Share.
8.
Enable anonymous access to the share.
To enable anonymous access to an NFS share:
1.
Open Windows Explorer by clicking
Start
>
Run
, and entering Explorer.
2.
Navigate to the NFS share.
3.
Right-click the NFS Share, and then click
Properties
.
4.
Click
NFS Sharing
.
5.
Select the
Allow Anonymous Access
checkbox.
6.
Change from the default of -2,-2, if desired.
7.
Click
Apply
.
8.
Click
OK
.
Best practices for running Server for NFS
Provide user-level security
Secure files
Secure new drives
Allow users to disconnect before stopping the Server for NFS service
HP StorageWorks All-in-One Storage System
179