samba - Jul 2009 - writable shares between solaris and windows

One of our daily jobs needs to process a lot of files on a solaris
server and dump the files onto a windows server.  We currently use
sharity to accomplish this.  However, the performance becomes worse when
the files get larger.  We want to find another approach to do this.  The
reason we didnt use samba was that very few users have unix accounts and
they need to have write permission to the share.  We dont want to create
unix accounts just for this.  To use ADS, we need to install and
kerberos for this, we dont use kerberos right now.  Is it worth the
effort to configure kerberos for this?  Is there any better way?
 
Thanks
 
Ying Xu 
-------------------------------------------------------------------------------------------

DISCLAIMER: This email and any files transmitted with it are confidential and
intended solely for the use of the individual or entity to whom they are
addressed. If you have received this email in error please notify the sender
by replying to this message and then delete it from your system. Use,
dissemination or copying of this message by unintended recipients is not
authorized and may be unlawful. Please note that any views or opinions
presented in this email are solely those of the author and do not necessarily
represent those of the company. Finally, the recipient should check this email
and any attachments for the presence of viruses. The company accepts no
liability for any damage caused by any virus transmitted by this email.

On Mon, Jul 13, 2009 at 09:54:42AM -0500, Xu, Ying (Houston)
wrote:
> One of our daily jobs needs to process a lot of files on a solaris
> server and dump the files onto a windows server.  We currently use
> sharity to accomplish this.  However, the performance becomes worse when
> the files get larger.  We want to find another approach to do this.  The
> reason we didnt use samba was that very few users have unix accounts and
> they need to have write permission to the share.  We dont want to create
> unix accounts just for this.  To use ADS, we need to install and
> kerberos for this, we dont use kerberos right now.  Is it worth the
> effort to configure kerberos for this?  Is there any better way?
Samba definitely needs unix accounts to be able to use the
kernel access controls, sorry. You could join your box to
AD, but winbind would then create "virtual" users for you.

To gain nfs-like (non-)security, you might map all users to
a single unix user via the "map to guest = bad password" and
"guest ok = yes" features and control access to the shares
via "hosts allow/deny".

Volker
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 197 bytes
Desc: Digital signature
Url :
http://lists.samba.org/archive/samba/attachments/20090713/65035596/attachment.bin