Follow along with the video below to see how to install our site as a web app on your home screen.
Note: This feature may not be available in some browsers.
_Gea any chance you can tell me how to set the sharing permissions?
Ok, lot of work/ news today.
about your problem with permissions
You need to know first, that unix uses user id's and group id's while
Windows uses security id's (completely different format)
Also group management is completely different. Unix passwords have a different format
than Windows passwort, so they are generated and stored separatly.
Sun developed Solaris to be a Windows server replacement as best as possible
under this conditions. This means that ACL' are mostly compatible and there is a
automatic mapping mechanism between user and group id's (only supported by
a unix filesystem) and Windows security id's beside a manual mapping mechanism between.
If you want to set permissions for a SMB share, you have the following option:
1. the owner of a share is root, so only root can modify permissions
After installing napp-it (this includes setup of smb service) you need to reenter password for
root to create an addtitional smb password on CLI via passwd root
You can then smb login to a share from Windows as user root.
Right Klick to the shared folder and select properties-security.
You can now either select local users or domain users and set permissions for them.
-> automatical id-mapping
Problem: Some Windows versions are not able to remote set ACL like home versions and Win7 ultimate
best are Win XP pro, Win 2003 and Win7 pro
2. Active directory only: You can set a manual mapping like winuser:xyz => unixuser: root
or wingroup=abc => unixgroup staff
If you connect now as xyz you have root permissions and if you connect as a member of
ad group abc you have the same permission like unixgroup staff.
You can use and see these users and groups for smb from a Windows machine that is also a domain member.
You can use local users even in domain mode
3. Workgroup mode
You create users via napp-it menu user (used both on unix and smb) and smb groups
and you can add users to these smb groups like power users and administrators and
your own added groups. You can use and see these users and groups for smb from a Windows machine.
4. you can use the napp-it acl extension to set permissions and ACL (under development) via napp-it
This is the only comfortable way to correctly set ACL because Solaris ACL behaves different from Windows.
Windows processes first all deny then all allow while Solaris uses only the order of the ACL list with the
first matching entry do the job.
5. you can set permissions and ACL via CLI
Only an option if you know what you are doing
Thanks a lot. That really helped me understand how it works.
It seems like it should work how I'm doing it but it just doesn't.
Here is what i did
In napp-it ui / Users add ++ smb user made 3 users
In Windows 2003+Win7Enterprice+2008+XP pro right click a folder (Connected with root) on the share in security tap add and type in user name from napp-it
Result object not found for any of the users in all windows versions.
Is there something in this that i might be doing wrong? Its like the users i made does not exists.
I got a quick question. I have an All-in-one and when my server got reset I lost 3 out of my 4 VMs. (the oldest remains). Any ideas on how to prevent this? Do I need to use a snapshot feature?
Additionally I get this error whenever I try and install VMWaretools now:
"Call "VirtualMachine.MountToolsInstaller" for object "Ubuntu 11.04" on ESXi "192.168.1.246" failed.
Unable to install VMware Tools. An error occurred while trying to access image file "/usr/lib/vmware/isoimages/linux.iso" needed to install VMware Tools: 2 (No such file or directory). If your product shipped with the VMware Tools package, reinstall VMware ESX, then try again to install the VMware Tools package in the virtual machine.
The required VMware Tools ISO image does not exist or is inaccessible. "
Where is that located or how do I fix it.
i suppoose you are looking for the wrong solution.
While Samba has more featutes like sharing any folder while Kenel-based
SMB server can share only ZFS folder/ datasets as a ZFS property it is slower.
I suppose you have two problems:
1.
A general perfomance issue. With 4 datadisks you should have a raw disk-performance
(check with bonnie or dd) of about 200 MB/s + and a usual SMB performance of about
50-100 MB/s depending of hardware
problems mostly due to:
- bad or not well supported hardware (Realtec nics, some desktop boards)
- bad cabling/ switch problems
- very low RAM (< 1 GB)
2.
Take notice of the difference between a ZFS folder/ dataset and a regular folder in a pool
A ZFS folder is a independant filesystem just like a partition on other filesystems.
A data-move between them is always a copy while a move between folders in the
same ZFS-folder/ dataset is only a change of a pointer and mostly done without delay.
If you want to reorganize your date with best performance, then do it on the server
(with OI, you can use nautilus file browser, on CLI you can use midnight commander.
You will then have raw disk speed)
you must type in usernames like hostname\user
but the easiest way is to use the advanced -search user dialog in the
Windows security windows to select the user from a list of all available user/ groups
thats the known problem with some Windows versions.
One user reported success after such a problem after a mapping via net use
otherwise try
- use another Windows
- use groups instead of users (don't know if that works)
- try napp-it ACL extension (I'a developping that because of this problem)
My problem is that every version of windows does this. That is Win7 Enterprice, XP Pro, 2003 and 2008r2
Ill guess ill go with napp-it ACL where do i find that, and how do i use it?
My problem is that every version of windows does this. That is Win7 Enterprice, XP Pro, 2003 and 2008r2
Ill guess ill go with napp-it ACL where do i find that, and how do i use it?
I'm finding the same issue, with Win7 Pro and WinXP. No users show up when setting ACL's, no matter how I set it up.
If you use the ACL extension, just add a user to the SMB share, then that same user should show up when viewing from Windows.
I'm having issues with SMB sharing and read this past page about the ACL. I'm totally lost on how to set the ACL and where. maybe i overlooked where its at.
I'm not sure how to set it up via. the acl extension.
This is what i see http://dl.dropbox.com/u/4118803/acl.png
hi
i would like to turn my old main pc into a nas, and i would like to use zfs, so nappit on one of the mentioned OS seems a good idea.
i don't want the nas to be running 24/7, that's just to much power usage. is there a way to put any of the supported OS in suspend mode while using nappit, maybe even automatically after some idle time? and if suspend is possible, is wake-on-lan possible?
thanks for any help.
Sorry if this has been asked before but I couldn't seem to find any mention...
Could I use an AMD-based system instead? I notice that even cheap 6-core phenoms have ECC support so perhaps the system could be done quite cheaply.
I was planning an AMD system too, Intel NICs are $20 and I have an extra one, is there any other reason not to use AMD? Remember this is for home use, I need to save money where possible. Supermicro motherboards are at least $100 more than vanilla AMD motherboards and a Xeon (required for ECC) costs at least $200 vs $60 for a Phenom II X3 720. The $200 savings would pay for three 2TB or two 3TB hard drives.I would not.
Most AMD systems have Raltek Nics, not suggested with any Solaris.
I would currently prefer a Intel server chipset based mainboard with 5520, 3420
or 202/204 chipset.
Look at SuperMicro based X8 or X9 series with ..-F (IPMI remote manageent)
They are quite affordable and the best to buy for any Solaris (my opinion)
!! Solaris is not mainstream. There is not too many hardware that is really good to use
Have you measured your power consumption?I use AMD with OI/napp-it. Everything is working as far as I know....
I use AMD with OI/napp-it. Everything is working as far as I know....
me too, I use a e-350 zacate/fusion APU and I use the realtek 8111E, everything runs great.
Hi all,
I'm looking for a bit of advice on the creation of a pure SSD pool for my VMs.
I currently have bulk storage with SSD read/write caches but I have recently acquired some Crucial C300s and I was looking to make a pool of them exclusively for storing my VMs.
I was wondering if anyone else has attempted this? What's the best practice for best performance? Is this a good idea?
Any tips/hints/experiences would be much appreciated.
Thanks!
Since a few days I'm using OpenIndiana with napp-it on a home NAS box in order to be able to use ZFS. This works great.
However, I do have a problem with sharing:
I have a ZFS folder shared with smb with guest access (guest-ok). Guest access is needed because the Windows box connecting to this share is in an AD domain. This works fine, I can create/delete/rename files and folders from the Windows box.
However, if I look at the files on the OI box, I see they get a 'strange' UID/GID (a number like 2147483649). I don't know if this is normal? (Im used to Linux mapping this to nobody.nogroup). But it works fine so far.
Now I also share this folder with NFS.
I mount the NFS share on a Ubuntu box. This also works, I can create/delete/rename files and folders from the Ubuntu box.
However, the files/folders made on the Ubuntu box are 'read-only' in the Windows share pointing to that folder.
When I look at the files on the OI box, I see they get the UID/GID of the Ubuntu User (instead of being mapped to nobody.nobody). They are also created as 'rw-r--r--'
I've been trying for 1.5 days now to get this working.
Can someone please point me in the right direction (a share which is 'world accessible' though both smb and nfs?)
Main problem: SMB is ACL only while NFS3 is unix permission only.
You may try to modify NFS share options, you may try NFS4 (capable of ACL)
or you may disable guest access (join domain or use local user-login) and set
ACL according to your needs
I would either use SMB always or set the share to full access if its a secure net
_
Now why is it i can see these usersnames when i right click for the security permissions for the share, but i can't actually use that name/password combo i created to login, i have to use root still. Did it need applied to documents and not the shareddocuments folder?
You can restrict SMB-access to your ZFS Server either via file and folder permissions
or with restrictions on the share.
With the napp-it ACL extension, you can set ACL on files and folders of your ZFS-Folder
in menu extension -> acl setting after selecting a shared folder
You are in the submenu extension -> acl setting -> smb share
where you can set ACL on the share after selecting a share.
This setting does not modify files and folders ACL
but are like a general restriction independent of file or folder settings
A SMB client must respect both settings
My problem is that i just dont know what to set.
My servers is named nas and it has a zfs folder named nas under this i have 2 folders that i want 2 users to have access to so they don't have access to the rest. Can you tell me how?
seems all ok.
but, file/ folder level acl are used after login, if you cannot login the problem is not with file/folder ACL
have you modified share level acl?
they work at login time