openSolaris 2008 - Managing CIFS Mounts in the Global Environment (Task Map)

Managing CIFS Mounts in the Global Environment (Task Map)

The following table points to the tasks that superuser can perform to manage CIFS mounts.

Task	Description	For Instructions
Mount a share on a public mount point, such as one in the root file system, so that many users can access the share.	Some shares include files and directories that many people on a system might want to access, such as a global set of files or programs. In such cases, instead of each user mounting the share in his own directory, the system administrator can mount the share in a public place so that all users can access the share from the same location.	How to Mount a Multiuser Share
Customize the global environment by using the `sharectl` command to set Solaris CIFS properties.	User-specified properties override global properties with the exception of security settings.	How to Customize the Global Solaris CIFS Environment
View the global Solaris CIFS property settings by using the `sharectl` command.	If one property is set with different values in each section, all values are shown.	How to View the Global Solaris CIFS Environment Property Settings
Add a CIFS share to an automounter map.	Use this procedure if you want a CIFS share to be automatically mounted at boot time.	How to Add a Direct Automounter Entry for a CIFS Share
Delete all persistent passwords.	Use this procedure if you want to clear all persistent passwords.	How to Delete All Persistent Passwords

How to Mount a Multiuser Share

If you want to make a share available to one or more users on a system, you can mount the share on a mount point anywhere on the system. When you mount a share as superuser, you do not need to own the mount point.

Become superuser or assume an equivalent role.
Roles contain authorizations and privileged commands. For more information about roles, see Configuring RBAC (Task Map) in System Administration Guide: Security Services. To configure a role with the Primary Administrator profile, see Chapter 2, Working With the Solaris Management Console (Tasks), in System Administration Guide: Basic Administration.
Find the share that you want to mount from a server.
```
# smbutil view //server
```
Specify the password at the prompt.
Determine the mount point that you want to use.
For example, you decide to mount shares on the /sales-tools mount point.

Perform the mount.

# mount -F smbfs //[workgroup;][user[:password]@]server/share mount-point

For example, to mount the /tmp share from the solarsystem server on the /sales-tools mount point, type:

# mount -F smbfs //solarsystem/tmp /sales-tools

How to Customize the Global Solaris CIFS Environment

You can customize the global Solaris CIFS environment by using the sharectl(1M) command. With the exception of the minauth property, globally set properties can be overridden by a value set in user's .nsmbrc file. The most secure value of the minauth property takes precedence over a less secure value set by the user or set in the global environment.

Become superuser, assume an equivalent role, or use the “SMBFS Management” RBAC profile, which is part of the “File System Management” profile.
Roles contain authorizations and privileged commands. For more information about roles, see Configuring RBAC (Task Map) in System Administration Guide: Security Services. To configure a role with the Primary Administrator profile, see Chapter 2, Working With the Solaris Management Console (Tasks), in System Administration Guide: Basic Administration.
Determine which properties you want to set.
For a description of the properties, see the nsmbrc(4) man page.
Set a property value for the global Solaris CIFS environment.
```
# sharectl set [-h] [-p property=value] … smbfs
```
For example, to specify a default workgroup name of SALES for the default section, type:
```
# sharectl set -p section=default -p workgroup=SALES smbfs
```

How to View the Global Solaris CIFS Environment Property Settings

You can view the global Solaris CIFS environment property settings by using the sharectl(1M) command.

If you set a value for the same property in more than one section, the sharectl get output includes the section name, property name, and value.

Determine which properties you want to view.
For a description of the properties, see the nsmbrc(4) man page.
- To view the value for a specific property, type:
```
$ sharectl get [-p property] … smbfs
```
  For example, to view the values for the timeout property, type:
```
$ sharectl get -p timeout smbfs
[SALES] timeout=5
[default] timeout=10
```
- To view all of the property settings, type:
```
$ sharectl get smbfs
[SALES]
password=$$178465324253e0c07
timeout=5

[default]
timeout=10
```

How to Add a Direct Automounter Entry for a CIFS Share

You can add a CIFS share /etc/auto_direct file so that the share will be automatically mounted when a user accesses the mount point. See How to Store a Persistent Password.

To successfully use the automount feature, you must store a persistent password for authentication to mount the share.

Become superuser or assume an equivalent role.
Roles contain authorizations and privileged commands. For more information about roles, see Configuring RBAC (Task Map) in System Administration Guide: Security Services. To configure a role with the Primary Administrator profile, see Chapter 2, Working With the Solaris Management Console (Tasks), in System Administration Guide: Basic Administration.
Edit the /etc/auto_direct file to add the mapping.
The following examples show the changes to the /etc/auto_direct file to configure automount maps.
- To configure an automount of the //solarsystem/public share on the /PUBLIC mount point, create the following entry in the /etc/auto_direct file:
```
/PUBLIC -fstype=smbfs //solarsystem/public
```
- To configure an automount of a share and to specify the password to be used for authentication, create the following entry in the /etc/auto_direct file:
```
/PUBLIC -fstype=smbfs //guest:guest@solarsystem/public
```
  This entry specifies that all access to the //solarsystem/public share is done as the user guest and uses the specified password, which in this example is guest.
- To configure an automount of a share that can be accessed anonymously, which does not require a password, specify the noprompt option:
```
/PUBLIC -noprompt,fstype=smbfs //solarsystem/public
```
When a user accesses the /PUBLIC directory, such as by using the ls or cd command, the share is automounted.
```
$ ls /PUBLIC
bin docs
```
After the CIFS share is mounted, a user can use regular Solaris commands to access the files. Automounted shares are automatically unmounted after a period of inactivity.

How to Delete All Persistent Passwords

Use this procedure to delete all of the persistent passwords that are used to authenticate CIFS transactions.

If you only want to delete the persistent passwords for a particular user, see How to Delete a Persistent Password.

Become superuser or assume an equivalent role.
Roles contain authorizations and privileged commands. For more information about roles, see Configuring RBAC (Task Map) in System Administration Guide: Security Services. To configure a role with the Primary Administrator profile, see Chapter 2, Working With the Solaris Management Console (Tasks), in System Administration Guide: Basic Administration.
Delete all of the persistent passwords.
```
# smbutil logoutall
```
After the persistent passwords are deleted, each time a user performs a transaction with a CIFS server, he is prompted for his password.