AIX IBM Shares

What does UNIX/AIX IBM call its equivalent to Windows "shares". Do they have a specific name within AIX IBM?

And does it also use a dual factor like windows does of share and directory permissions, with the most restrictive being the effective permission?

How can you get a report of the actual share permissions for AIX IBM?
LVL 3
pma111Asked:
Who is Participating?

Improve company productivity with a Business Account.Sign Up

x
 
woolmilkporcConnect With a Mentor Commented:
AIX uses (basically) NFS (Network File System) for data sharing.

The "exported directory" is called  "NFS export", but calling it "NFS share" is not uncommon.

Once you got client access to the NFS export (by "mounting" it) there are generally no other permissions than the directory permissions, besides the mount options "read only" or "read/write", of course. "ls -l" will thus show the info you need.

To be allowed to "mount" the export a client can be forced to use a certain security method for authentication, including Unix, DES, Kerberos (with or without integrity and privacy).

There are of course also ACLs (Access Contro Lists) including a special variant for NFS version 4, but I assume that's beyond the scope of your question, the more because they're also used for local directories an thus are not really specific for remotely accessed repositories.
0
 
pma111Author Commented:
Thanks

Can you produce a list of all the nfs exports on the server? If so how?
0
 
pma111Author Commented:
Does AIX IBM also have the equivalent of "admin shares" (which aretypically only accessible by local admins or groups added to local admins on windows) and "non-admin shares" (which can typically be accessed by everyone  by default).
0
A proven path to a career in data science

At Springboard, we know how to get you a job in data science. With Springboard’s Data Science Career Track, you’ll master data science  with a curriculum built by industry experts. You’ll work on real projects, and get 1-on-1 mentorship from a data scientist.

 
pma111Author Commented:
Is it possible for an NFS export to be accessible by active directory windows users ?
0
 
woolmilkporcCommented:
On a (potential) client:

showmount -e servername

On a server:

showmount -e

There are no "Admin Shares" under NFS. Not at all.
0
 
pma111Author Commented:
Is it possible for an NFS export to be accessible by active directory windows users ?
0
 
pma111Author Commented:
So just to sweep up is all data on the server within an "nfs export"... Or just the remotely accessible stuff? I.e. data you can only access locally is not within an "nfs export" (if so what are those directories referred to as? )

Can you run a showmount command from a windows computer/server, or just unix?
0
 
pma111Author Commented:
Or when you say

"On a (potential) client"

can you elaborate on such clients?
0
 
woolmilkporcCommented:
Local directories are "Local Directories", and are never accessible over the network as such (without additional measures).

"exports" are local directories which are intentionally and consciously exported to be accessible by NFS clients over the net. This requires a special server functionality called "NFS server" which is part of all Unix/Linux distributions.
0
 
woolmilkporcCommented:
>> can you elaborate on such clients? <<

To issue "showmount" you must have the NFS client software installed, which is an integral part of Unix/Linux.

To mount a share you must additionally be permitted to do so:

1. The share must be exported to your machine, to a group your machine is a member of, or to the public.

2. Your client machine must be able to authenticate with the server by one of the methods I mentioned above, if the server requests such authentication.
0
 
pma111Author Commented:
Does Windows come with an NFS client by default or is it an additional installation?
0
 
woolmilkporcCommented:
Depends on version/flavor.

Try this:

Control Panel --> Programs and Features --> Turn Windows features on or off --> Expand Services for NFS --> Client for NFS
0
 
pma111Author Commented:
Thanks woolmilkporc, just one final quick question, if you run showmount -e servername
(which I assume is similar to getting a copy of /etc/exports/ I assume somewhere you can see which users are permitted to access those exports? Where can you see which users have been granted permissions to mount these exports? Can you specify AD groups in windows for access via an NFS client?
0
 
pma111Author Commented:
And to add to that when you mount the nfs export from a windows machine, is it similar concept to map network drive when you map a network drive from a remote server, or will this process require entering username/passwords before the export will mount?
0
 
pma111Author Commented:
And how does CIFS come into this?

Can you have both NFS shares and CIFS shares on the same server? Or are they the same share, but 2 different clients for accessing them?
0
 
woolmilkporcCommented:
Depends on the authentication method requested by the server.

In any case you'll need a Unix-to-Windows user mapping.

http://support.microsoft.com/kb/324073
0
 
woolmilkporcCommented:
Exporting via NFS requires the NFS server functionality, which is part of AIX

Exporting via CIFS requires the free Samba server for AIX or a commercial equivalent.
0
 
pma111Author Commented:
Thanks again, as a general rule why would one admin share via NFS rather than CIFS, or vice versa? Why would you use CIFS when you have NFS, or why would you go for NFS if you also have Samba server, there must be some reason why you'd go down one route rather than another?
0
 
woolmilkporcCommented:
Use NFS if you have a  Unix client/server environment, perhaps including very few Windows clients.
Reason: NFS is part of Unix.

Use the AIX CIFS client if you have a Windows client/server environment and very few AIX clients.
Reason: CIFS is part of Windows.

Use Samba on AIX if you have AIX servers and mainly Windows clients.
Reason: It seems easier (at least for me) to install a Samba server on one or few AIXes than installing/activating the NFS client + name mapping on many Windows clients.
0
 
pma111Author Commented:
Ok thanks, where can you see any CIFS or Samba shares on the AIX Server, do you have a command or a file on the Server that will list those (and their permissions)?
0
 
woolmilkporcCommented:
Samba server on AIX:

smbstatus
/etc/smb.conf

CIFS client on AIX:

mount | grep -i cifs
/etc/filesystems
0
 
pma111Author Commented:
Excellent.
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.