Re: How can I control file access on a network externally?

From: Colonel Flagg (colonel_flagg_at_NOSOUPFORJ00internetwarzone.org)
Date: 05/07/03


Date: Wed, 7 May 2003 13:44:45 -0400

In article <lA9ua.59017$3h5.2326343@news2.east.cox.net>,
s.w.smithREMOVECAPS@cox.net says...
> How can I control access to shared files on a network externally? In =
> other words, I need to control access to files that are stored on a =
> server without making changes to the server. Could a router or firewall =
> be configured to do this? Or is there some other external device that =
> could sit between the server and the rest of the network?
>
> Here's a detailed explanation of why I need this. The shared files are =
> stored on an Intel Storage Station which is a network attached =
> storage(NAS) file server. It's on a small 8 user peer to peer network =
> with client computers running a mix of Windows 98, 2000 and XP. The NAS =
> runs on FreeBSD and works great as a file server. For more information =
> on this NAS, see: =
> http://www.intel.com/pressroom/archive/releases/ib072099.htm and =
> http://support.intel.com/support/inbusiness/storagestation/index.htm . =
> The Intel NAS device is managed remotely through a web browser on a =
> client computer. Users do not interact directly with FreeBSD or even =
> know that FreeBSD is the OS on the NAS. The NAS web interface is =
> supposed to manage users and groups and set file permissions. =
> Unfortunately, the file permissions do not work correctly with Windows =
> 2000 and XP clients. This problem appears to be due to the older version =
> of FreeBSD on the NAS. I'm unable to upgrade the OS on the NAS, so it =
> appears my only option is to control file access externally. I need to =
> be able to give users access to their own files while denying access to =
> the other users. It really doesn't have to be that secure. It's a 8 =
> person office of a construction company and the users are not very =
> computer literate. They just don't want their employees deleting each =
> others personal files, etc. Does anyone know how I can control file =
> access? Any help would be greatly appreciated.
>
> Steve Smith
>
>
>
>

There's several ways you can do this, from what I understand, I am
seeing a file sharing network only, you don't need to allow command line
access to the users, therefore, I would think you wouldn't even need to
IBM NAS solution at all, SAMBA and smbclient would do the trick for
simple file shares and permissions for all. I run this configuration for
several clients, as opposed to running a Windows Server, which costs
money (whereas a FreeBSD/Linux solution does not). You can also setup
printer sharing, etc. Works with an existing windows type LAN.

man samba
man smbclient

-- 
Colonel Flagg
http://www.internetwarzone.org/
Privacy at a click:
http://www.cotse.net 
Wanna ask a question in Usenet?
http://www.tuxedo.org/~esr/faqs/smart-questions.html
Everything about Usenet answered:
http://www.internetwarzone.org/answers.html
America WILL NOT forget 9-11-01


Relevant Pages

  • RE: XP not reporting free/used/capacity space on a NAS
    ... One USB 2.0 device port for connection to host PC ... One 10/100 Ethernet port for connection to network ... Network Attached Storage (NAS) ...
    (microsoft.public.windowsxp.help_and_support)
  • RE: Error: Failed to start monitoring changes - Framework 1.1
    ... I copied the web folder from the NAS to the local drive ... > reside on a UNC network share that happens to be a Network Appliance NAS. ... > domain account, have impersonation turned on, the domain account has full and ... > are references to Short File names. ...
    (microsoft.public.dotnet.general)
  • Re: NAS and extenders
    ... All my MCXs are wired. ... from a alternate PC (simulated NAS) through router to MCE to MCXs and watch ... if the network cards are recent. ... 100Mbps to each of your extenders. ...
    (microsoft.public.windows.mediacenter)
  • Re: Software RAID5 slow write speeds
    ... default settings of the new connection unchanged?Assuming you did, ... disable those in the network properties? ... Ran tests copying from LAN desktop to NAS USB drive ... Before upgrading ...
    (microsoft.public.windows.server.general)
  • Re: restricting certain machines.
    ... addresses to machines that have approved mac addresses, ... I believe there are switches that can control access by mac tables ... authentication [AH header policy could be created, ... unauthorized computer on your network puts your whole network at risk for ...
    (microsoft.public.win2000.security)