NFS Server and File Permissions

• Microsoft Windows NT Server versions 4.0 SP3, 4.0 SP4, used with:
  • Microsoft Windows NT Services for UNIX Add-On Pack

SUMMARY

This article describes how to set up file permissions on your Windows NT network file system (NFS) exports to work with UNIX NFS workstations.

MORE INFORMATION

You do not need to perform these steps when using only anonymous authentication, although the results can give you some insight into how NTFS file permissions are reflected onto UNIX workstations.

NOTE: The following instructions assume that the Windows NT Server-based NFS computer is configured to use default values for advanced options and security permissions.

On the Microsoft Windows NT Server-based NFS computer:

1. Always set the NTFS permissions on your export (and all folders and files underneath the export) to Full Control for Everyone, the Administrators group, and the Administrator user.



2. If your export folder is empty, create a dummy file called dummyfile in your NFS export folder.



3. If you are not using a network information service (NIS) server, copy the Etc/Passwd and Etc/Group files from the appropriate UNIX computer to the Winnt\System32\drivers\etc folder.
   
   NOTE: Leave the password fields blank. It is recommended that UIDs and GIDs be unique as a whole, as well as user names and groups as a whole. For example, do not use 1001 for a user and a group, and do not have a wheel user in addition to a wheel group.



4. Map each user and each group to a unique Windows NT user and group. You can do this using Server for NFS User Manager.



5. Map the UNIX root user to the Windows NT Administrator user and the group root or wheel to the Windows NT Administrators group.

1. Log on as root (only root can mount an NFS export). Mount the export on your UNIX workstation by typing




mount ntserver:/F/export/home/user /mnt

where ntserver is the host name of the Windows NT Server-based computer, F/export/home/user is the path to the export, and mnt is a locally available mount point.


2. Check the permissions by typing:

   ls -l

   Output similar to the following example is displayed:




-rwxrwxrwx 1 root root dummyfile

3. Assign the appropriate owners to the files and folders by typing:




/usr/ucb/chown -R user.group /mnt

NOTE: In some UNIX operating systems, the chown command does not take a group parameter. In these situations, you need to type chgrp -R group /mnt in addition to this command.


4. Assign appropriate permissions to the files and folders by typing:




chmod -R g-w,o-wx /mnt

5. Verify the new permissions by typing:




ls -l

Output similar to the following example is displayed:

-rwxr-xr-- 1 user group dummyfile

1. On the Windows NT Server-based NFS computer, assign Full Control to the export for Everyone, the Administrators group, and the Administrator user.



2. On the UNIX NFS client, copy the file to a different name (you must do this as a user, not as root). Delete the original file in Windows NT and rename the file to its original name.

• Everyone



• Network



• Interactive



• System



• Authenticated users

Additional query words:

Keywords :
Version : winnt:4.0 SP3,4.0 SP4
Platform : winnt
Issue type : kbinfo