Greetings,
I would like some input into how others here are doing multiplatform account
management with their NetApp devices. I have an idea of how I would like to
proceed, so if anyone would like to sanity check my thoughts and provide some
insight I'd greatly appreciate it.
I am looking for a way to unify our authentication services at my employer.
Presently we have clients authenticating via Windows PDCs, NetWare eDirectory
(Novell Client), and UNIX PASSWD file.
In evaluating Novell's new Open Enterprise Server line, I realized a big
potential of the Linux version of this is to consolidate directories. For
example, I can use Samba to emulate a PDC, NCP Server to provide Novell
Client services, and eDirectory via LDAP for UNIX authentication.
Which brings me to my nifty network layout. I would like to use OES on Linux
to centralize all of this. I would have a Samba domain with the NetApp
devices able to join (supposedly). I would configure the CIFS and NFS
exports on the NetApp devices. Lastly, I would mount the applicable NFS
exports on the OES server itself and reexport them with NCP Server as Novell
Shares.
To Windows clients it looks like they're in a domain and logging in with their
eDirectory IDs, to UNIX clients their login works just like passwd except
it's over LDAP(TLS) with their eDirectory IDs and mounted NFS paths, and
lastly to the existing Novell users who are not in a domain the NetApp filers
would look like traditional NetWare volumes.
OES does the magic rights translations to convert everything to Posix (I'd
have to check about ACL on Posix).
So the key barrier I see involves how to train the NetApp devices to correlate
Windows SIDs to UNIX UID/GID. This way a user could access their same data
regardless of platform with the same eDirectory login. I know this is
possible with Mixed mode security and the usermap.cfg.
The questions:
--------------------
Is this the optimal way to manage this? Would a simple usermap.cfg entry like
THEDOMAIN\* == * do the trick, or are things more complicated then that? Has
anyone used a Samba PDC to manage NetApp devices?
Thank you for any information anyone has
Regards,
Ryan
--
The more we disagree, the more chance there is that at least one of us
is right.