Revision 13 as of 2012-09-17 08:10:26

Clear message

The Transparent Remote File-System Access Method

An alternative to the explicit transfer of files from one machine to another is to attach the remote filesystem to the local machine such that all programs can access it as if it was just another local partition. There are several solutions to this problem, the classical examples are NFS and AFS. At the ETH we are using both of them extensively. Unfortunately NFS has security issues which prevent it from being used in an open environment, and AFS requires special (complex) software on the client side and fundamental changes in the setup of servers. We therefore currently recommend Samba for remote filesystem attachment. Samba is a free implementation of the Microsoft File Sharing Protocol (SMB). We are running it on all our Unix servers. This enables Windows computers to access files on the Unix machines as if they were on a normal Windows server. Linux is also able to access Samba and mount it just like any other file system. SMB does not encrypt the data it transfers (unlike SSH) but it uses a special method for password authentication which protects the privacy of the password.

The Samba Password

Samba (SMB) uses a fundamentally different way to handle passwords than Unix. This has the advantage that passwords do not cross the net unencrypted, but it has the big disadvantage that we have to maintain a separate password database for Samba. We have setup our system so that the Samba password gets changed at the same time as the unix password. If your samba password does not work, please contact support@ee.ethz.ch .

Accessing Samba shares from Linux with Konqueror (all machines at ETH)

Open your Konqueror Filemanager/Webbrowser.

As location, use smb://server/directory followed by <Enter>Type your username and password in the following dialog box.

For accessing your share provided from ID, use the following data:

Location:   smb://nas-nethz-users.ethz.ch/share-u-$/username
Username:   D\yourNethzUsername
Password:   yourPrivatePassword

Obs! The 'share-u-$' part of the location is dependant on the first character in your  username. If your username is 'kpelle', this part of the location will change to 'share-k-$'

For accessing your D-ITET share, user the following:

Location:   smb://homes.ee.ethz.ch/username
Username:   username
Password:   yourPrivatePassword

Using CIFS to connect to Samba shares

You can also mount your Samba home area with CIFS. If the command returns an error message saying "wrong fs type", make sure the package "cifs-utils" is installed.

$ sudo su
# mkdir /tardis-home
# mount -t cifs -o user=<your_tardis_login>,name=homes.ee.ethz.ch \\\\homes.ee.ethz.ch\\<your_tardis_login>  /tardis-home

Recent Linux Kernels contain the userspace filesystem FUSE. This allows you to use all sorts of new an inovative ways for mounting remote fileystems ... for example you can mount a file system via an ssh connection without needing root privileges:

$ mkdir ~/tardis-home
$ sshfs <your_tardis_login>@login.ee.ethz.ch: ~/tardis-home

But please note, that you can't do sshfs on homes.ee.ethz.ch - use login.ee.ethz.ch instead!

You can also unmount it again by typing:

$ fusermount -u ~/tardis-home

Please note that sshfs is not officially supported by the ISG.EE

Windows Network Drive

You can access your home directory by mounting \\homes.ee.ethz.ch\username as network drive in Windows. Click on the Computer shortcut and then click on the 'Map network drive' button from the upper toolbar.

Select the drive letter you want to use for this mapping. The Address to your folder is \\homes.ee.ethz.ch\YOUR-USERNAME. Im this example its pmeier. Replace pmeier with your username. Set the Checkbox "Connect using different credentials" and if you want, set "Reconnect at logon". Click on finish.

WindowsNetworkDrive1.png

On the next screen, Enter d\YOUR-USERNAME and Enter your password. When done, click on OK.

WindowsNetworkDrive2.png

If the mapping process worked fine, the newly created drive will open and will become available.