Thanks for your contribution, i managed to add users at the
system-
admin toolbox, i need to configure the clients' workstations
both
(windows and linux) to access the samba server, how do i go
about that?
RE: thanks
Australia
2007-06-05 08:24:37
Install samba server on linux and configure all windows
workstations with
this.
-----Original Message-----
From: fedora-linuxgooglegroups.com [mailto:fedora-linuxgooglegroups.com]
On Behalf Of Nancy Iku
Sent: Tuesday, June 05, 2007 5:43 PM
To: Fedora Linux
Subject: thanks
Thanks for your contribution, i managed to add users at the
system-
admin toolbox, i need to configure the clients' workstations
both
(windows and linux) to access the samba server, how do i go
about that?
Re: thanks
2007-06-05 09:15:57
Depends on what you need to do with them. If it's just simple file access then SAMBA is by far the easiest way to do that. There is a GUI to configure Samba shares but I've never used it myself. The shares are easily created editing the files in /etc/samba
By creating groups you can control who has access to what shares.
Some things not normally covered in the FAQs to consider is whether to make your Linux box the master browser. If you already have a windows server set up as Master browser you will not want to do this. If you have a peer to peer network then the Linux box is your most stable choice as master browser and using the Linux box can prevent the drop outs that are so common with windows peer to peer networking.
The GUI tools to configure SAMBA under KDE are under Administration -> Server settings --> Samba enter root password Click on add share. Browse to the dir you want to share. Give it a name and description. Then click on visible in most cases. Writable if you want users to be able to write to the share. Then click on Access to create specific users. Much easier to use groups which will have you editing the /etc/samba/smb.conf file instead of trying to add more than a couple specific users.
Security wise it is always best to limit who can access a share to just the people who need access.
Another method you can use to synch up users is LDAP. By using LDAP instead of local passwords you no longer have the problem of people';s passwords expiring on the server and the issues with Windows and Linux having different criteria for what is a good password. Always keep a local user in case LDAP crashes. Never make root an LDAP account.
An application you may wish to set up is WinSCP. This will allow users to SCP into the Linux box. FAR FAR more secure than FTP. Realistically nowdays FTP servers are hacking magnets. You should only set up an FTP server as a last recourse. SCP is encrypts all the traffic and if you want to be really secure you can use keys which will prevent anybody not on a machine with trusted keys from logging into the server through SSH or SCP.
If a given user will never log into the server then do not give them a shell account or a home dir. It is risk without gain. The big exception is if you are giving users a home dir mapped to their windows machine.
There are a couple gotchas in Samba tuning that will greatly increase performance and stability so you'll want to read the FAQs.
On 6/5/07, Nancy Iku < chep2sangyahoo.com">chep2sangyahoo.com> wrote:
Thanks for your contribution, i managed to add users ; at the system- admin toolbox, i need to configure the clients9; workstations both (windows and linux) to access the samba server, how do i go about that?
googlegroups.com [mailto:fedora-linux