HP DL160 HP ProLiant Storage Server User Guide (440584-004, February 2008) - Page 106

Best practices for running Server for NFS, User Name Mapping, Open Windows Explorer by clicking

Page 106 highlights

7. Assign the Everyone group the appropriate permissions on the NFS Share. 8. Enable anonymous access to the share. To enable anonymous access to an NFS share, do the following: 1. Open Windows Explorer by clicking Start > Run, and entering Explorer. 2. Navigate to the NFS share. 3. Right-click the NFS Share, and then click Properties. 4. Click NFS Sharing. 5. Select the Allow Anonymous Access checkbox. 6. Change from the default of -2,-2, if desired. 7. Click Apply. 8. Click OK. Best practices for running Server for NFS • Provide user-level security. • Secure files. • Secure new drives. • Allow users to disconnect before stopping the Server for NFS service. • Use naming conventions to identify shares with EUC encoding. • Protect configuration files. For further details, see the online help for Microsoft Services for Network File System. User Name Mapping The User Name Mapping component provides centralized user mapping services for Server for NFS and Client for NFS. User Name Mapping lets you create maps between Windows and UNIX user and group accounts even though the user and group names in both environments may not be identical. User Name Mapping lets you maintain a single mapping database making it easier to configure account mapping for multiple computers running MSNFS. In addition to one-to-one mapping between Windows and UNIX user and group accounts, User Name Mapping permits one-to-many mapping. This lets you associate multiple Windows accounts with a single UNIX account. This can be useful, for example, when you do not need to maintain separate UNIX accounts for individuals and would rather use a few accounts to provide different classes of access permission. You can use simple maps, which map Windows and UNIX accounts with identical names. You can also create advanced maps to associate Windows and UNIX accounts with different names, which you can use in conjunction with simple maps. User Name Mapping can obtain UNIX user, password, and group information from one or more Network Information Service (NIS) servers or from password and group files located on a local hard drive. The password and group files can be copied from a UNIX host or from a NIS server. User Name Mapping periodically refreshes its mapping database from the source databases, ensuring that it is always kept up-to-date as changes occur in the Windows and UNIX name spaces. You can also refresh the database anytime you know the source databases have changed. 106 Microsoft Services for Network File System (MSNFS)

  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • 34
  • 35
  • 36
  • 37
  • 38
  • 39
  • 40
  • 41
  • 42
  • 43
  • 44
  • 45
  • 46
  • 47
  • 48
  • 49
  • 50
  • 51
  • 52
  • 53
  • 54
  • 55
  • 56
  • 57
  • 58
  • 59
  • 60
  • 61
  • 62
  • 63
  • 64
  • 65
  • 66
  • 67
  • 68
  • 69
  • 70
  • 71
  • 72
  • 73
  • 74
  • 75
  • 76
  • 77
  • 78
  • 79
  • 80
  • 81
  • 82
  • 83
  • 84
  • 85
  • 86
  • 87
  • 88
  • 89
  • 90
  • 91
  • 92
  • 93
  • 94
  • 95
  • 96
  • 97
  • 98
  • 99
  • 100
  • 101
  • 102
  • 103
  • 104
  • 105
  • 106
  • 107
  • 108
  • 109
  • 110
  • 111
  • 112
  • 113
  • 114
  • 115
  • 116
  • 117
  • 118
  • 119
  • 120
  • 121
  • 122
  • 123
  • 124
  • 125
  • 126
  • 127
  • 128
  • 129
  • 130
  • 131
  • 132
  • 133
  • 134
  • 135
  • 136
  • 137
  • 138
  • 139
  • 140
  • 141
  • 142
  • 143
  • 144
  • 145
  • 146
  • 147
  • 148
  • 149
  • 150
  • 151
  • 152
  • 153
  • 154
  • 155
  • 156
  • 157
  • 158
  • 159
  • 160
  • 161
  • 162
  • 163
  • 164
  • 165
  • 166
  • 167
  • 168
  • 169
  • 170
  • 171
  • 172

7.
Assign the Everyone group the appropriate permissions on the NFS Share.
8.
Enable anonymous access to the share.
To enable anonymous access to an NFS share, do the following:
1.
Open Windows Explorer by clicking
Start
>
Run
, and entering Explorer.
2.
Navigate to the NFS share.
3.
Right-click the NFS Share, and then click
Properties
.
4.
Click
NFS Sharing
.
5.
Select the
Allow Anonymous Access
checkbox.
6.
Change from the default of -2,-2, if desired.
7.
Click
Apply
.
8.
Click
OK
.
Best practices for running Server for NFS
Provide user-level security.
Secure files.
Secure new drives.
Allow users to disconnect before stopping the Server for NFS service.
Use naming conventions to identify shares with EUC encoding.
Protect configuration files.
For further details, see the online help for Microsoft Services for Network File System.
User Name Mapping
The User Name Mapping component provides centralized user mapping services for Server for NFS
and Client for NFS. User Name Mapping lets you create maps between Windows and UNIX user
and group accounts even though the user and group names in both environments may not be identical.
User Name Mapping lets you maintain a single mapping database making it easier to configure
account mapping for multiple computers running MSNFS.
In addition to one-to-one mapping between Windows and UNIX user and group accounts, User Name
Mapping permits one-to-many mapping. This lets you associate multiple Windows accounts with a
single UNIX account. This can be useful, for example, when you do not need to maintain separate
UNIX accounts for individuals and would rather use a few accounts to provide different classes of
access permission.
You can use simple maps, which map Windows and UNIX accounts with identical names. You can
also create advanced maps to associate Windows and UNIX accounts with different names, which
you can use in conjunction with simple maps.
User Name Mapping can obtain UNIX user, password, and group information from one or more
Network Information Service (NIS) servers or from password and group files located on a local hard
drive. The password and group files can be copied from a UNIX host or from a NIS server.
User Name Mapping periodically refreshes its mapping database from the source databases, ensuring
that it is always kept up-to-date as changes occur in the Windows and UNIX name spaces. You can
also refresh the database anytime you know the source databases have changed.
Microsoft Services for Network File System (MSNFS)
106