Re: XP Blues

From: Mike Brown (mike_at_tkg.ca)
Date: 10/13/04


Date: Tue, 12 Oct 2004 23:37:02 -0400

FyRE wrote:
>
> [...]
>
> NFS mounts are used to give access to HPUX servers on one site, which
> simply involved setting up the correct users on the HPUX box, with
> matching UID/GID settings to allow permissions to work pretty
> transparently.
>

I had assumed from Titman's post and your reply that you were suggesting
mounting an NFS share from OpenServer to Linux, and then sharing that resource
with Samba. I was interested if you had tried this on a large scale,
and if so what versions of products did you use?

>
> The only problems I've seen with SP2 is for clients to kill Samba's
> children when trying to synchronize with the servers. This may be
> fixed in 3.0.7, but I've not tested it myself. The real issue is with
> MySQL and SP2. If you do not disable "locale setting" in the MySQL
> ODBC driver, you'll find queries take anything up to 100 (maybe more)
> times as long, with 100% CPU load on the clients. It turns out that a
> bug in SP2 (curiously) causes any ODBC link other than MSSQL to set
> the locale for each row returned from a query.
>

I think situations like that hint at the big problem with M$, standard
network services get treated differently depending on whether they are
coming from a M$ server or not.

>
> Well if someone is still using WFW on clients they may as well just
> use public shares on Samba with no password checking since they're
> obviously not bothered about security. You could also use Samba's
> restrictions on subnets/IP addresses, or even IPTables to allow only
> specific clients access to the server.

The site I was installing on had some WIN95 machines, and in house security
problems are pretty minimal. Plain text passwords had been set up and
used without a problem for the last 7 years, but now because of new PCs
being added to the network running XP things must change. I don't even
try to explain to the customer that this is an improvement and everything
will work better, there was nothing wrong before.

What is the difference between public transit and high tech? With public
transit you wait for a bus that will take you where you want to go, and
then have a slow ride. With high tech you get on a very fast bus that may
or may not be going where you want. If it seems you are going the wrong way,
you get off and hope for better luck on the next bus.

Mike

-- 
Michael Brown
The Kingsway Group


Relevant Pages

  • Re: Help with setting up Sites.
    ... Site A - respresenting physical site B ... servers is increasing by the day. ... Do you have any DCs at SiteB? ... clients servers in the relevant sites to authenticate against them. ...
    (microsoft.public.windows.server.active_directory)
  • Re: adding machine to domain with NATed IPs
    ... sounds that the DCs are not reaching the>> clients ... can the servers pint the clients by IP and Name? ... we specified these IPs as DNS server within ...
    (microsoft.public.windows.server.active_directory)
  • Re: Computer Browsing Service - anyone want to contribute for a good conversation?
    ... Do you have all client machines and servers ... Browse lists are built and exchanged by the computer browser service. ... It doesn't matter which subnet your clients are in. ... The most common cause of master browser failures is multihomed ...
    (microsoft.public.windows.server.networking)
  • Re: adding machine to domain with NATed IPs
    ... Can you ping back the clients and servers? ... can the servers pint the clients by IP and Name? ... there are five DCs for three sites. ... > Type: SRV (Service location) ...
    (microsoft.public.windows.server.active_directory)
  • RE: [fw-wiz] Defense in Depth to the Desktop
    ... feel that servers are the best defended resources on the network. ... while exposing the servers to the risks of the clients. ... MAC isolation (or private vlans in Cisco(tm) speak) block any traffic to vlan ... ports that are not designated as "community" or "public" ports. ...
    (Firewall-Wizards)