This document outlines how to connect from Linux, specifically Ubuntu, to a Windows share that is on a machine managed in the Stanford 'WIN' Active Directory domain. Shares on this domain typically require a SUNet ID and password. Mounting file shares using this method requires the Samba suite of tools, specifically smbfs. These instructions detail how to mount a Windows Share manually as well as mounting the share at boot time. These instructions require sudo/root privileges on the client machine and some familiarity with the Command Line Interface (CLI). Any text in these commands below in ITALICIZED BOLD letters indicates where each user should enter in their own SUNet ID, password, etc. Security Risks and AnalysisThe steps for mounting a Windows share at boot time requires putting your SUNet password, UNENCRYPTED, in a root-privileged text file. If multiple users have root access, then you should NOT use this method and have each user manually mount shares at login time. If you have only one user with root access to a machine, the risk is still high and security should still be tightly controlled on that machine since a root compromise would also compromise the users SUNet password. Lastly, mounting a share at boot time on a system with multiple users could give those users access to the Windows share as if they were the user with the specified WIN domain credentials. This scenario should also be avoided. Each user should only have write access to shares which they have been specifically granted access to. Mounting a Share manually
Mounting a Share at Boot timeThis method requires root access to the machine.
|
Home‎ > ‎Server config‎ > ‎