HP OpenVMS Common Internet File System based on SAMBA

1. HP OpenVMS Common Internet File System based on SAMBA Hans Hosang Hewlett Packard Company

2. 2 1 July 2012 Agenda Why CIFS? Planned features OpenVMS version support Where do we stand today Active directory References Questions

3. 3 1 July 2012 TerminologyHelp Me Understand The Terms! These are essentially the same: CIFS Common Internet File System Samba Open Source implementation of CIFS http://www.samba.org Samba and CIFS are used interchangeably Also PATHWORKS, Advanced Server and ASV are used interchangeably

4. 4 1 July 2012 Why CIFS for OpenVMS Based on Samba? Keep pace with new technology - implementing Active Directory, LDAP, Kerberos, new file systems etc. Newer releases from Microsoft might break Advanced Server when NT4 gets unsupported. Larger investments required to continue to support ASV and maintain pace with MS deliveries. Championed by HP HP employees are a key part of Samba development Samba team is excited to add OpenVMS support Plan is to continue to support ASV on Alpha for the foreseeable future. Intention is to replace ASV with CIFS. LDAP - Lightweight Directory Access Protocol, a set of protocols for accessing information directories. LDAP is based on the standards contained within the X.500 standard, but is significantly simpler. And unlike X.500, LDAP supports TCP/IP, which is necessary for any type of Internet access. Because it's a simpler version of X.500, LDAP is sometimes called X.500-lite. Although not yet widely implemented, LDAP should eventually make it possible for almost any application running on virtually any computer platform to obtain directory information, such as email addresses and public keys. Because LDAP is an open protocol, applications need not worry about the type of server hosting the directory. Active Directory - A directory service from Microsoft that is part of Windows 2000. A network service that identifies all resources on a network and makes them accessible to users and applications.. Resources include e-mail addresses, computers, and peripheral devices such as printers. LDAP and NDS are examples of directory services.LDAP - Lightweight Directory Access Protocol, a set of protocols for accessing information directories. LDAP is based on the standards contained within the X.500 standard, but is significantly simpler. And unlike X.500, LDAP supports TCP/IP, which is necessary for any type of Internet access. Because it's a simpler version of X.500, LDAP is sometimes called X.500-lite. Although not yet widely implemented, LDAP should eventually make it possible for almost any application running on virtually any computer platform to obtain directory information, such as email addresses and public keys. Because LDAP is an open protocol, applications need not worry about the type of server hosting the directory. Active Directory - A directory service from Microsoft that is part of Windows 2000. A network service that identifies all resources on a network and makes them accessible to users and applications.. Resources include e-mail addresses, computers, and peripheral devices such as printers. LDAP and NDS are examples of directory services.

5. 5 1 July 2012 CIFS Planned Services/Features 1/2 Support for both Integrity & Alpha Platforms Full file & print support MS Windows 2000 & later clients Authentication and Authorization Name Resolution Service Announcement (browsing) CIFS will use the TCP/IP protocol installed on the host server Extended to include Client functionality Utilities to ease migration from ASV to CIFS Tools to aid interoperability with MS TCPIP support will include TCPware and Multinet from Process software. Client functionality means that you can mount a file system from an external server as a local disk to OpenVMS A utility will be written to make it possible to migrate from ASV to CIFS Both Sharedb migration and SAM database migration TCPIP support will include TCPware and Multinet from Process software. Client functionality means that you can mount a file system from an external server as a local disk to OpenVMS A utility will be written to make it possible to migrate from ASV to CIFS Both Sharedb migration and SAM database migration

6. 6 1 July 2012 CIFS Planned Services/Features 2/2 Advanced cluster support ASV & CIFS in same domain International character set support Advanced CIFS Management support CIFS as a Member Server As well as primary domain controller Fully support OpenVMS ACL�s for security No license required for CIFS � part of FOE, EOE and MCOE SWAT utility External authentication support Trust relationship support Advanced cluster support = accessing the same file from different nodes in the cluster at the same time, cluster wide data cache, share same folder from 2 nodes of a cluster & cluster alias. External authentication is password authentication via acme. ACL - access control list, a set of data that informs a computer's operating system which permissions, or access rights, that each user or group has to a specific system object, such as a directory or file. Each object has a unique security attribute that identifies which users have access to it, and the ACL is a list of each object and user access privileges such as read, write or execute. Advanced cluster support = accessing the same file from different nodes in the cluster at the same time, cluster wide data cache, share same folder from 2 nodes of a cluster & cluster alias. External authentication is password authentication via acme. ACL - access control list, a set of data that informs a computer's operating system which permissions, or access rights, that each user or group has to a specific system object, such as a directory or file. Each object has a unique security attribute that identifies which users have access to it, and the ACL is a list of each object and user access privileges such as read, write or execute.

7. 7 1 July 2012 The CIFS Configuration File The SAMBA configuration file, called SMB.CONF, uses the same format as Windows .ini files. SMB.CONF file is a plain-text file and may be edited with your favorite editing tool. Each section in the SMB.CONF file represents a share on the SAMBA server except [global], [homes] and [printers] sections. These sections are special, since they contain settings that apply to the whole SAMBA server and not to one share in particular. A DCL configuration utility might become available later. For more details about configuration file (SMB.CONF), refer to the following URL: http://www.samba.org/samba/docs/man/manpages-3/smb.conf.5.html

8. 8 1 July 2012 CIFS System Impact CIFS consists of multiple daemons. A daemon is a OpenVMS application that runs in the background and provides services. The CIFS server is made up of the following daemons: NMBD WINBINDD SWAT SMBD ( 1 per connected client ! ) NMBD � The NMBD handles the naming resolution & network browsing. WINDBINDD � Windows (LDAP) integration and username mapping SWAT � Samba Web Administrative Tool SMBD - The SMBD is responsible for providing shared file/printer resources.

9. 9 1 July 2012 SMBD Daemons One per connected client Name includes the BG device client is connected on