About Automatic Access And Storage Locations; About Ssh Storage Locations; Assigning User And Group Access Rights; Authenticating To Access Other Target Systems - Novell OPEN ENTERPRISE SERVER - PLANNING AND IMPLEMENTATION GUIDE 12-2010 Implementation Manual

17.7.1 About Automatic Access and Storage Locations

The inherent value of NetStorage lies in its ability to connect users with various servers and file
systems. Some connections are created automatically depending on the OES platform where
NetStorage is installed. Other connections must be created by the network administrator.
In summary, NetStorage provides automatic access to:

NSS volumes on the same server that use the default mount point (/media/nss)

User Home directories that are specified in eDirectory on NCP or NSS volumes.

Drive mapping locations in login scripts of the user logging in (if the NCP Server for Linux is
running on the server)
To provide access to file systems not listed above, you must create Storage Location objects in
eDirectory. For instructions on creating Storage Locations, see
in the OES 2 SP3: NetStorage Administration

17.7.2 About SSH Storage Locations

If you plan to use SSH storage locations, be aware that by default any users who are enabled for
Samba cannot access data stored at the SSH locations. Additional steps are required to grant
simultaneous access to Samba and SSH. For more information, see
OES 2," on page

17.7.3 Assigning User and Group Access Rights

Because NetStorage provides access to other file storage systems, the users and groups that access
the other systems through NetStorage must be created and granted file and directory access on those
systems.
For example:

eDirectory users must exist in the eDirectory tree where the OES server resides and have access
rights to the files and directories on the OES server.

Windows users must exist on the Windows systems and have the required access rights to the
files and directories on those systems.

If your users will access Samba files on an OES 2 server, they must be enabled for LUM and
Samba access on the OES 2 server. For more information, see
LUM-Enabled Access" on page
IMPORTANT: The usernames and passwords used to authenticate to the NetStorage (OES) server
through eDirectory must match the usernames and passwords defined on the target systems.

17.7.4 Authenticating to Access Other Target Systems

The OES installation establishes a primary authentication domain for NetStorage. To access any
storage location, users must exist somewhere in this primary domain. When it receives an
authentication request, NetStorage searches for the username in the context you specified during
OES installation and in all its subcontexts.
204 OES 2 SP3: Planning and Implementation Guide
91.
150.
"Creating a Storage Location
Guide.
Section 11.4, "SSH Services on
"Services in OES 2 That Require
Object"