Solved

AIX IBM Shares

Posted on 2013-06-10
22
480 Views
Last Modified: 2013-06-10
What does UNIX/AIX IBM call its equivalent to Windows "shares". Do they have a specific name within AIX IBM?

And does it also use a dual factor like windows does of share and directory permissions, with the most restrictive being the effective permission?

How can you get a report of the actual share permissions for AIX IBM?
0
Comment
Question by:pma111
  • 13
  • 9
22 Comments
 
LVL 68

Accepted Solution

by:
woolmilkporc earned 500 total points
ID: 39234430
AIX uses (basically) NFS (Network File System) for data sharing.

The "exported directory" is called  "NFS export", but calling it "NFS share" is not uncommon.

Once you got client access to the NFS export (by "mounting" it) there are generally no other permissions than the directory permissions, besides the mount options "read only" or "read/write", of course. "ls -l" will thus show the info you need.

To be allowed to "mount" the export a client can be forced to use a certain security method for authentication, including Unix, DES, Kerberos (with or without integrity and privacy).

There are of course also ACLs (Access Contro Lists) including a special variant for NFS version 4, but I assume that's beyond the scope of your question, the more because they're also used for local directories an thus are not really specific for remotely accessed repositories.
0
 
LVL 3

Author Comment

by:pma111
ID: 39234553
Thanks

Can you produce a list of all the nfs exports on the server? If so how?
0
 
LVL 3

Author Comment

by:pma111
ID: 39234561
Does AIX IBM also have the equivalent of "admin shares" (which aretypically only accessible by local admins or groups added to local admins on windows) and "non-admin shares" (which can typically be accessed by everyone  by default).
0
 
LVL 3

Author Comment

by:pma111
ID: 39234562
Is it possible for an NFS export to be accessible by active directory windows users ?
0
 
LVL 68

Expert Comment

by:woolmilkporc
ID: 39234563
On a (potential) client:

showmount -e servername

On a server:

showmount -e

There are no "Admin Shares" under NFS. Not at all.
0
 
LVL 3

Author Comment

by:pma111
ID: 39234577
Is it possible for an NFS export to be accessible by active directory windows users ?
0
 
LVL 3

Author Comment

by:pma111
ID: 39234586
So just to sweep up is all data on the server within an "nfs export"... Or just the remotely accessible stuff? I.e. data you can only access locally is not within an "nfs export" (if so what are those directories referred to as? )

Can you run a showmount command from a windows computer/server, or just unix?
0
 
LVL 3

Author Comment

by:pma111
ID: 39234593
Or when you say

"On a (potential) client"

can you elaborate on such clients?
0
 
LVL 68

Expert Comment

by:woolmilkporc
ID: 39234611
Local directories are "Local Directories", and are never accessible over the network as such (without additional measures).

"exports" are local directories which are intentionally and consciously exported to be accessible by NFS clients over the net. This requires a special server functionality called "NFS server" which is part of all Unix/Linux distributions.
0
 
LVL 68

Expert Comment

by:woolmilkporc
ID: 39234642
>> can you elaborate on such clients? <<

To issue "showmount" you must have the NFS client software installed, which is an integral part of Unix/Linux.

To mount a share you must additionally be permitted to do so:

1. The share must be exported to your machine, to a group your machine is a member of, or to the public.

2. Your client machine must be able to authenticate with the server by one of the methods I mentioned above, if the server requests such authentication.
0
 
LVL 3

Author Comment

by:pma111
ID: 39234651
Does Windows come with an NFS client by default or is it an additional installation?
0
Free Gift Card with Acronis Backup Purchase!

Backup any data in any location: local and remote systems, physical and virtual servers, private and public clouds, Macs and PCs, tablets and mobile devices, & more! For limited time only, buy any Acronis backup products and get a FREE Amazon/Best Buy gift card worth up to $200!

 
LVL 68

Expert Comment

by:woolmilkporc
ID: 39234664
Depends on version/flavor.

Try this:

Control Panel --> Programs and Features --> Turn Windows features on or off --> Expand Services for NFS --> Client for NFS
0
 
LVL 3

Author Comment

by:pma111
ID: 39234680
Thanks woolmilkporc, just one final quick question, if you run showmount -e servername
(which I assume is similar to getting a copy of /etc/exports/ I assume somewhere you can see which users are permitted to access those exports? Where can you see which users have been granted permissions to mount these exports? Can you specify AD groups in windows for access via an NFS client?
0
 
LVL 3

Author Comment

by:pma111
ID: 39234687
And to add to that when you mount the nfs export from a windows machine, is it similar concept to map network drive when you map a network drive from a remote server, or will this process require entering username/passwords before the export will mount?
0
 
LVL 3

Author Comment

by:pma111
ID: 39234716
And how does CIFS come into this?

Can you have both NFS shares and CIFS shares on the same server? Or are they the same share, but 2 different clients for accessing them?
0
 
LVL 68

Expert Comment

by:woolmilkporc
ID: 39234718
Depends on the authentication method requested by the server.

In any case you'll need a Unix-to-Windows user mapping.

http://support.microsoft.com/kb/324073
0
 
LVL 68

Expert Comment

by:woolmilkporc
ID: 39234741
Exporting via NFS requires the NFS server functionality, which is part of AIX

Exporting via CIFS requires the free Samba server for AIX or a commercial equivalent.
0
 
LVL 3

Author Comment

by:pma111
ID: 39234766
Thanks again, as a general rule why would one admin share via NFS rather than CIFS, or vice versa? Why would you use CIFS when you have NFS, or why would you go for NFS if you also have Samba server, there must be some reason why you'd go down one route rather than another?
0
 
LVL 68

Expert Comment

by:woolmilkporc
ID: 39234790
Use NFS if you have a  Unix client/server environment, perhaps including very few Windows clients.
Reason: NFS is part of Unix.

Use the AIX CIFS client if you have a Windows client/server environment and very few AIX clients.
Reason: CIFS is part of Windows.

Use Samba on AIX if you have AIX servers and mainly Windows clients.
Reason: It seems easier (at least for me) to install a Samba server on one or few AIXes than installing/activating the NFS client + name mapping on many Windows clients.
0
 
LVL 3

Author Comment

by:pma111
ID: 39234799
Ok thanks, where can you see any CIFS or Samba shares on the AIX Server, do you have a command or a file on the Server that will list those (and their permissions)?
0
 
LVL 68

Expert Comment

by:woolmilkporc
ID: 39234808
Samba server on AIX:

smbstatus
/etc/smb.conf

CIFS client on AIX:

mount | grep -i cifs
/etc/filesystems
0
 
LVL 3

Author Comment

by:pma111
ID: 39234817
Excellent.
0

Featured Post

Enabling OSINT in Activity Based Intelligence

Activity based intelligence (ABI) requires access to all available sources of data. Recorded Future allows analysts to observe structured data on the open, deep, and dark web.

Join & Write a Comment

Container Orchestration platforms empower organizations to scale their apps at an exceptional rate. This is the reason numerous innovation-driven companies are moving apps to an appropriated datacenter wide platform that empowers them to scale at a …
Join Greg Farro and Ethan Banks from Packet Pushers (http://packetpushers.net/podcast/podcasts/pq-show-93-smart-network-monitoring-paessler-sponsored/) and Greg Ross from Paessler (https://www.paessler.com/prtg) for a discussion about smart network …
Learn how to get help with Linux/Unix bash shell commands. Use help to read help documents for built in bash shell commands.: Use man to interface with the online reference manuals for shell commands.: Use man to search man pages for unknown command…
Learn how to find files with the shell using the find and locate commands. Use locate to find a needle in a haystack.: With locate, check if the file still exists.: Use find to get the actual location of the file.:

706 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

19 Experts available now in Live!

Get 1:1 Help Now