[OpenIndiana-discuss] OpenIndiana-discuss Digest, Vol 38, Issue 31

[Sebastian Gabler]

Basically, there are two mechanisms supported:

1. anonymous access using the guestok=true parameter in zfs
2. mapping user ids using idmap.

The former is simple, the latter not so much. You need to decide which 
path you want to follow. It could be that narrowing down the use case 
also helps the discussion.
Most of the how-tos I am aware of are based on using the Solaris CIFS 
server instead of SAMBA. I am using that, too. Some say it's basically 
the same, but I can't witness on that because I only use CIFS .

For a how-to using anonymous access using CIFS, see i.e. 
https://blogs.oracle.com/timthomas/entry/solaris_cifs_in_workgroup_mode

A thing that should be fundamentally clear is that if you mind about 
access rights, you will either have to make your file server familiar 
with identities from other domains (i.e. computers). This is usually 
done using idmap.

Another basic prerequisite is that name resolution is working properly 
and consistently on server and client. That is specifically true for a 
configuration with mapped ids.

Best regards,

Sebastian

Am 26.09.2013 02:13, schrieb openindiana-discuss-request at openindiana.org:
> Message: 9
> Date: Wed, 25 Sep 2013 20:13:29 -0400
> From: Harry Putnam<reader at newsguy.com>
> To:openindiana-discuss at openindiana.org
> Subject: Re: [OpenIndiana-discuss] Accessing smb shares from windows
> Message-ID:<87pprwv3rq.fsf at newsguy.com>
> Content-Type: text/plain
>
> Rich<rercola at acm.jhu.edu>  writes:
>
>> >At a guess, if you don't have the OI box joined to the AD domain, it's
>> >going to map any users you haven't explicitly specified in idmap to
>> >guest.
>> >
>> >So that would be your issue there, at least.
> What is an AD domain?  And when did it become a requirement for smb
> connections?
>
> Do you know how to the mapping you mention is done?
>
> Isn't cifs supposed to work without much in the way of  special
> settings?
>
> I seem to recall having had smb shares working a good while back... I
> do remember joining a workgroup and I have done that...
>
> >From what you've said ... it sound like the way to go would be to
> setup the idmapping.
>
> Looking into that now... but really sure what I'm looking for.
>
>
>
>
> ------------------------------