Basically, there are two mechanisms supported:

1. anonymous access using the guestok=true parameter in zfs
2. mapping user ids using idmap.

The former is simple, the latter not so much. You need to decide which path you want to follow. It could be that narrowing down the use case also helps the discussion. Most of the how-tos I am aware of are based on using the Solaris CIFS server instead of SAMBA. I am using that, too. Some say it's basically the same, but I can't witness on that because I only use CIFS .

For a how-to using anonymous access using CIFS, see i.e. https://blogs.oracle.com/timthomas/entry/solaris_cifs_in_workgroup_mode

A thing that should be fundamentally clear is that if you mind about access rights, you will either have to make your file server familiar with identities from other domains (i.e. computers). This is usually done using idmap.

Another basic prerequisite is that name resolution is working properly and consistently on server and client. That is specifically true for a configuration with mapped ids.

Best regards,

Sebastian

Am 26.09.2013 02:13, schrieb [email protected]:
Message: 9
Date: Wed, 25 Sep 2013 20:13:29 -0400
From: Harry Putnam<[email protected]>
To:[email protected]
Subject: Re: [OpenIndiana-discuss] Accessing smb shares from windows
Message-ID:<[email protected]>
Content-Type: text/plain

Rich<[email protected]>  writes:

>At a guess, if you don't have the OI box joined to the AD domain, it's
>going to map any users you haven't explicitly specified in idmap to
>guest.
>
>So that would be your issue there, at least.
What is an AD domain?  And when did it become a requirement for smb
connections?

Do you know how to the mapping you mention is done?

Isn't cifs supposed to work without much in the way of  special
settings?

I seem to recall having had smb shares working a good while back... I
do remember joining a workgroup and I have done that...

>From what you've said ... it sound like the way to go would be to
setup the idmapping.

Looking into that now... but really sure what I'm looking for.




------------------------------


_______________________________________________
OpenIndiana-discuss mailing list
[email protected]
http://openindiana.org/mailman/listinfo/openindiana-discuss

Reply via email to