Windows and Linux interoperability using NFS and security

I'll state right up front that I'm new to Linux (sorry for mentioning the "L"
word ) I need to get a windows server communicating with Linux
specifically for file sharing only. In my research I've found that using NFS
(Network File System) can accomplish this. I have already installed SFU 3.5
(Services for Unix) but I'm having trouble using it.

I can mount (from Linux) an NFS directory but I am running into access
permissions. What I want to do is just simply grant Linux full "admin" type
access to any and all files with read and write priviledges. This is for an
embedded application so I don't have to worry about security and such. In
fact my windows PC has the firewall turned off. I am using a local network
between the Linux and Windows boxes.

I have come across name mapping where I may need to map user IDs and Groups
between both linux and windows environments.

Do I really need to do this? Is there some confuguration I'm missing that
can allow full access to the linux box without mapping? Again, I'm new to
all this and learning as I go.

If this is the wrong forum please direct me to the right one.

Thanks.

Steve J.

You may find SAMBA easier to use:
http://en.wikipedia.org/wiki/Samba_%28software%29

"Steve Jones" <(E-Mail Removed)> wrote in message
news:EC672D9D-51A4-416D-B4AF-(E-Mail Removed)...
> I'll state right up front that I'm new to Linux (sorry for mentioning the "L"
> word ) I need to get a windows server communicating with Linux
> specifically for file sharing only. In my research I've found that using NFS
> (Network File System) can accomplish this. I have already installed SFU 3.5
> (Services for Unix) but I'm having trouble using it.
>
> I can mount (from Linux) an NFS directory but I am running into access
> permissions. What I want to do is just simply grant Linux full "admin" type
> access to any and all files with read and write priviledges. This is for an
> embedded application so I don't have to worry about security and such. In
> fact my windows PC has the firewall turned off. I am using a local network
> between the Linux and Windows boxes.
>
> I have come across name mapping where I may need to map user IDs and Groups
> between both linux and windows environments.
>
> Do I really need to do this? Is there some confuguration I'm missing that
> can allow full access to the linux box without mapping? Again, I'm new to
> all this and learning as I go.
>
> If this is the wrong forum please direct me to the right one.
>
> Thanks.
>
> Steve J.

I wish I could use Samba but one of the project requirements is to use NFS.
A dependent piece of firmware, actually a very important piece, requires NFS.

-Steve

"Mike Lowery" wrote:

> You may find SAMBA easier to use:
> http://en.wikipedia.org/wiki/Samba_%28software%29
>
> "Steve Jones" <(E-Mail Removed)> wrote in message
> news:EC672D9D-51A4-416D-B4AF-(E-Mail Removed)...
> > I'll state right up front that I'm new to Linux (sorry for mentioning the "L"
> > word ) I need to get a windows server communicating with Linux
> > specifically for file sharing only. In my research I've found that using NFS
> > (Network File System) can accomplish this. I have already installed SFU 3.5
> > (Services for Unix) but I'm having trouble using it.
> >
> > I can mount (from Linux) an NFS directory but I am running into access
> > permissions. What I want to do is just simply grant Linux full "admin" type
> > access to any and all files with read and write priviledges. This is for an
> > embedded application so I don't have to worry about security and such. In
> > fact my windows PC has the firewall turned off. I am using a local network
> > between the Linux and Windows boxes.
> >
> > I have come across name mapping where I may need to map user IDs and Groups
> > between both linux and windows environments.
> >
> > Do I really need to do this? Is there some confuguration I'm missing that
> > can allow full access to the linux box without mapping? Again, I'm new to
> > all this and learning as I go.
> >
> > If this is the wrong forum please direct me to the right one.
> >
> > Thanks.
> >
> > Steve J.
>
>
>

Steve,
If the machine sharing is Win2003 and you don't care about security, try
making a change to Local Security Settings. In Admin Tools->Local Security
Settings->Local Policies->Security Options enable the "Network Access:Let
Everyone Permissions Apply to Anonymous Users" setting. Then reboot the Win
server and make sure "Everyone" has permissions on the NFS share.

Pat

"Steve Jones" wrote:

> I wish I could use Samba but one of the project requirements is to use NFS.
> A dependent piece of firmware, actually a very important piece, requires NFS.
>
> -Steve
>
> "Mike Lowery" wrote:
>
> > You may find SAMBA easier to use:
> > http://en.wikipedia.org/wiki/Samba_%28software%29
> >
> > "Steve Jones" <(E-Mail Removed)> wrote in message
> > news:EC672D9D-51A4-416D-B4AF-(E-Mail Removed)...
> > > I'll state right up front that I'm new to Linux (sorry for mentioning the "L"
> > > word ) I need to get a windows server communicating with Linux
> > > specifically for file sharing only. In my research I've found that using NFS
> > > (Network File System) can accomplish this. I have already installed SFU 3.5
> > > (Services for Unix) but I'm having trouble using it.
> > >
> > > I can mount (from Linux) an NFS directory but I am running into access
> > > permissions. What I want to do is just simply grant Linux full "admin" type
> > > access to any and all files with read and write priviledges. This is for an
> > > embedded application so I don't have to worry about security and such. In
> > > fact my windows PC has the firewall turned off. I am using a local network
> > > between the Linux and Windows boxes.
> > >
> > > I have come across name mapping where I may need to map user IDs and Groups
> > > between both linux and windows environments.
> > >
> > > Do I really need to do this? Is there some confuguration I'm missing that
> > > can allow full access to the linux box without mapping? Again, I'm new to
> > > all this and learning as I go.
> > >
> > > If this is the wrong forum please direct me to the right one.
> > >
> > > Thanks.
> > >
> > > Steve J.
> >
> >
> >

I'm using Ubuntu as my Linux box running on a Compaq Evo N800w laptop and
Windows XP Professional w/SP2 (not Server 2003) and Services For Unix 3.5
installed on a desktop PC. They are both connected to the same physical
router and both exist in the same subnet space.

Update- I actually did finally get both machines communicating but it took
creating the User Name Mapping files. I used the UID and GID from linux to
couple them with a user on windows.

I'm just wondering if there is a way to turn all that authentication off.
This is for an embedded system so we will most likely even disable the
firewall. Although I know which ports to punch through, its still simpler to
just disable it.

-SJ

"pheising" wrote:

> Steve,
> If the machine sharing is Win2003 and you don't care about security, try
> making a change to Local Security Settings. In Admin Tools->Local Security
> Settings->Local Policies->Security Options enable the "Network Access:Let
> Everyone Permissions Apply to Anonymous Users" setting. Then reboot the Win
> server and make sure "Everyone" has permissions on the NFS share.
>
> Pat
>

Pat,
I tried your suggestion and it appears to work! I turned off the User Name
Mapping service as a test and I could still connect with full priviledges.
Thanks for the help. I'm not a Network administrator but it seems I should
learn up on those policys.

-Steve

I haven't used SFU (just regular Services for NFS) or tried NFS sharing on XP
so I can't really comment on your scenario. The setting I did below did
eliminate the need for the user name mapping files in my setup - Linux client
accessing NFS shares on 2003 WSS.

"Steve Jones" wrote:

> I'm using Ubuntu as my Linux box running on a Compaq Evo N800w laptop and
> Windows XP Professional w/SP2 (not Server 2003) and Services For Unix 3.5
> installed on a desktop PC. They are both connected to the same physical
> router and both exist in the same subnet space.
>
> Update- I actually did finally get both machines communicating but it took
> creating the User Name Mapping files. I used the UID and GID from linux to
> couple them with a user on windows.
>
> I'm just wondering if there is a way to turn all that authentication off.
> This is for an embedded system so we will most likely even disable the
> firewall. Although I know which ports to punch through, its still simpler to
> just disable it.
>
> -SJ
>
> "pheising" wrote:
>
> > Steve,
> > If the machine sharing is Win2003 and you don't care about security, try
> > making a change to Local Security Settings. In Admin Tools->Local Security
> > Settings->Local Policies->Security Options enable the "Network Access:Let
> > Everyone Permissions Apply to Anonymous Users" setting. Then reboot the Win
> > server and make sure "Everyone" has permissions on the NFS share.
> >
> > Pat
> >