[opensuse] Re: smbfs vs. cifs mounts to samba shares {solved}
John Andersen wrote:
SMBmount/CIFSmount work every bit as fast, and since I always needed them anyway, why bother coordinating all the UID/GIDs for what was basically a very insecure system anyway...
I'm curious -- what do you have to coordinate? Don't you have LDAP/NIS/whatever-based netwide authentication with central account creation (i.e., centrally managed accounts with common uids?) For most SMB or SOHO installations that should suffice and delivers netwide UIDs/GIDs as a side-effect. Your problem comes up mostly in large installations, when account creation is delegated to different departments or two companies merge. Or in very small installations that don't use LDAP -- but then, I'd use it for any network with > 2 systems. Well, maybe even for a network with 2 systems... Joachim -- =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- Joachim Schrod Email: jschrod@acm.org Roedermark, Germany -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org For additional commands, e-mail: opensuse+help@opensuse.org
On Wed, May 7, 2008 at 6:58 AM, Joachim Schrod
John Andersen wrote:
SMBmount/CIFSmount work every bit as fast, and since I always needed them anyway, why bother coordinating all the UID/GIDs for what was basically a very insecure system anyway...
I'm curious -- what do you have to coordinate?
UID and GID for each user on all machines across the network.
Don't you have LDAP/NIS/whatever-based netwide authentication with central account creation (i.e., centrally managed accounts with common uids?)
No. Because my customer base is mostly windows shops where linux is being added, or in some cases slowly converted to.
For most SMB or SOHO installations that should suffice and delivers netwide UIDs/GIDs as a side-effect.
Your problem comes up mostly in large installations, when account creation is delegated to different departments or two companies merge. Or in very small installations that don't use LDAP -- but then, I'd use it for any network with > 2 systems. Well, maybe even for a network with 2 systems...
LDAP is not widely used anywhere in the Windows world. I've seen this problem in both large and small shops, where small is anywhere under 50 seats. Large extends to areas covering 4 timezones. -- ----------JSA--------- -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org For additional commands, e-mail: opensuse+help@opensuse.org
John Andersen wrote:
On Wed, May 7, 2008 at 6:58 AM, Joachim Schrod
wrote: John Andersen wrote:
Don't you have LDAP/NIS/whatever-based netwide authentication with central account creation (i.e., centrally managed accounts with common uids?)
No. Because my customer base is mostly windows shops where linux is being added, or in some cases slowly converted to.
For most SMB or SOHO installations that should suffice and delivers netwide UIDs/GIDs as a side-effect.
Your problem comes up mostly in large installations, when account creation is delegated to different departments or two companies merge. Or in very small installations that don't use LDAP -- but then, I'd use it for any network with > 2 systems. Well, maybe even for a network with 2 systems...
LDAP is not widely used anywhere in the Windows world.
Ah, this may be because my Windows experience is only limited to medium to larger installations. There, LDAP is very widely used in the Windows world, in form of Active Directory. And in a Windows-dominated shop, I set up most Linux/Unix systems or services to authenticate against AD, of course. To establish a separated authentication realm would be unprofessional, as it would break established account management processes. I have no customer who doesn't use AD. I didn't know that this is so atypical. Joachim -- =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- Joachim Schrod Email: jschrod@acm.org Roedermark, Germany -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org For additional commands, e-mail: opensuse+help@opensuse.org
participants (2)
-
Joachim Schrod
-
John Andersen