Difference between revisions of "LSDF Online Storage: SMB / CIFS"

From Lsdf
(Created page with "<H1> Using SMB/CIFS for UNIX client (only KIT intern or KIT-VPN)</H1> <H2>SMB Client</H2> '''Attention:''' To access data served by LSDF_Online_Storage via '''smbclient''',...")
 
(4 intermediate revisions by the same user not shown)
Line 1: Line 1:
  +
SMB or CIFS is a network protocol providing remote shared access to files. It implements a network file system similar to NFS allowing users of the LSDF Online Storage to mount or browse their storage projects from remote clients.
<H1> Using SMB/CIFS for UNIX client (only KIT intern or KIT-VPN)</H1>
 
   
<H2>SMB Client</H2>
 
   
  +
== Prerequisites ==
'''Attention:''' To access data served by LSDF_Online_Storage via '''smbclient''', You need a '''''Service Password'''''. Please set your '' '''Service Password''' '' under following site: https://bwidm.scc.kit.edu.
 
  +
<br>
 
  +
Please note the following requirements and restrictions when using the LSDF SMB service:
A UNIX like operating system needs a CIFS client to use a share. CIFS clients are part of Samba implementation for Linux and other UNIX like operating systems (http://www.samba.org) <br><br>
 
  +
'''Attention:''' Posix style file commands (for instance chmod) must not be applied on files on a CIFS share. This may revoke sharing and Access Lists (ACLs), steering the access to the files.
 
  +
* To access the LSDF Online Storage via SMB it is required to set a service password. Please follow [https://bwidm.scc.kit.edu/service/set-password.xhtml?registryId=14181453 this link] to initially set, change or delete your service password. The service password will be used to authenticate your SMB client to the LSDF Online Storage SMB service.
<br><br>
 
  +
* SMB shares of the LSDF Online Storage are only accessible from within the KIT network or via KIT-VPN.
'''Example:'''
 
  +
* Posix style file commands like ''chmod'' must not be applied on files or folders on a SMB/CIFS share. Doing so may revoke access control lists (ACLs) preventing you or your project partners from accessing the shared file system via SMB. LSDF administrators can, if requested, prevent the usage of chmod on a storage project level.
To list the files in a SMB share, use the program smbclient.
 
  +
  +
  +
== Using SMB/CIFS on Linux with the Samba Command Line Client ==
  +
  +
Linux operating system need dedicated SMB clients to access shares. SMB clients are part of the Samba implementation for Linux and other UNIX like operating systems. To access a SMB share with the Samba command line client, e.g. to list all available shaes, issue the following commands:
 
<pre>
 
<pre>
>smbclient -L os.lsdf.kit.edu -U 'os.lsdf.kit.edu\xy1234' -m SMB2
+
$ smbclient -L os.lsdf.kit.edu -U 'os.lsdf.kit.edu\xy1234' -m SMB2
 
Enter os.lsdf.kit.edu\xy1234's password:
 
Enter os.lsdf.kit.edu\xy1234's password:
 
Domain=[LSDF] OS=[] Server=[]
 
Domain=[LSDF] OS=[] Server=[]
   
Sharename Type Comment
+
Sharename Type Comment
--------- ---- -------
+
--------- ---- -------
IPC$ IPC IPC Service (LSDF Online Storage)
+
IPC$ IPC IPC Service (LSDF Online Storage)
kit Disk kit
+
kit Disk kit
iai-projects Disk iai-projects
+
iai-projects Disk iai-projects
 
iam-cms-projects Disk iam-cms-projects
 
iam-cms-projects Disk iam-cms-projects
scc-projects Disk scc-projects
+
scc-projects Disk scc-projects
ikp-projects Disk ikp-projects
+
ikp-projects Disk ikp-projects
ioc-projects Disk ioc-projects
+
ioc-projects Disk ioc-projects
ifh-projects Disk ifh-projects
+
ifh-projects Disk ifh-projects
itg-projects Disk itg-projects
+
itg-projects Disk itg-projects
 
imk-tro-projects Disk imk-tro-projects
 
imk-tro-projects Disk imk-tro-projects
 
imk-asf-projects Disk imk-asf-projects
 
imk-asf-projects Disk imk-asf-projects
ifkm-projects Disk ifkm-projects
+
ifkm-projects Disk ifkm-projects
  +
(...)
ibpt-projects Disk ibpt-projects
 
ips-projects Disk ips-projects
 
fast-projects Disk fast-projects
 
gpi-projects Disk gpi-projects
 
ifp-projects Disk ifp-projects
 
imk-aaf-projects Disk imk-aaf-projects
 
inr-projects Disk inr-projects
 
int-projects Disk int-projects
 
ipe-projects Disk ipe-prolects
 
iket-projects Disk iket-projects
 
ivd-projects Disk ivd-projects
 
itm-projects Disk itm-projects
 
lti-projects Disk lti-projects
 
sport-projects Disk sport-projects
 
imk-ifu-projects Disk imk-ifu-projects
 
ebi-projects Disk ebi-projects
 
aph-projects Disk aph-projects
 
...
 
 
</pre>
 
</pre>
   
The program allows You to access the files with a FTP like tool in an interactive shell.
+
The ''smbclient'' program provides a FTP like set of commands to access files and directories in an interactive shell:
 
<pre>
 
<pre>
>smbclient //os.lsdf.kit.edu/kit -U 'os.lsdf.kit.edu\xy1234' -m SMB2
+
$ smbclient //os.lsdf.kit.edu/kit -U 'LSDF\xy1234' -m SMB2
 
Enter os.lsdf.kit.edu\xy1234's password:
 
Enter os.lsdf.kit.edu\xy1234's password:
 
Domain=[LSDF] OS=[] Server=[]
 
Domain=[LSDF] OS=[] Server=[]
Line 58: Line 45:
 
smb: \> help
 
smb: \> help
 
</pre>
 
</pre>
  +
Details information on the usage of ''smbclient'' can be found in [https://www.samba.org/samba/docs/current/man-html/smbclient.1.html the manual].
   
<h2>Mount a Share</H2>
 
   
  +
== Mounting a Remote File System on Linux (as root) ==
'''Attention:''' To access data served by LSDF_Online_Storage via CIFS protocol, You need a '''''Service Password'''''. Please set your '' '''Service Password''' '' under following site: https://bwidm.scc.kit.edu.
 
<br>
 
A share can be mounted to a local directory, (e.g. /mnt/cifs ).
 
You do need root rights on the local system.
 
   
  +
A remote SMB share can be mounted to a local directory. You do need root rights on the local system to perform the mount operation.
<h3>Mount over command line</h3>
 
 
'''Example:'''
 
   
  +
To mount a remote file system issue the following command:
 
<pre>
 
<pre>
>mkdir /mnt/cifs
+
$ mkdir /mnt/cifs
>mount -t cifs -o vers=2.0,username='xy1234' //os.lsdf.kit.edu/inst-projects /mnt/cifs
+
$ mount -t cifs -o vers=2.0,username='xy1234' //os.lsdf.kit.edu/inst-projects /mnt/cifs
 
Password for xy1234@//os.lsdf.kit.edu/inst-projects: **********
 
Password for xy1234@//os.lsdf.kit.edu/inst-projects: **********
 
--------------------------------------------------------------------------------------------
 
--------------------------------------------------------------------------------------------
>df | grep cifs
+
$ df | grep cifs
 
//os.lsdf.kit.edu/inst-projects 966367641600 138649829376 827717812224 15% /mnt/cifs
 
//os.lsdf.kit.edu/inst-projects 966367641600 138649829376 827717812224 15% /mnt/cifs
  +
</pre>
 
 
or
 
or
  +
<pre>
 
>mount -t cifs -o vers=2.0,username='xy1234' //os.lsdf.kit.edu/kit /mnt/cifs
+
$ mount -t cifs -o vers=2.0,username='xy1234' //os.lsdf.kit.edu/kit /mnt/cifs
 
Password for xy1234@//os.lsdf.kit.edu/kit: **********
 
Password for xy1234@//os.lsdf.kit.edu/kit: **********
 
 
</pre>
 
</pre>
Verify the success of the mount invoking the mount command without any arguments:
+
Verify the success of the mount with the following command:
 
<pre>
 
<pre>
mount | grep cifs
+
$ mount | grep cifs
 
//os.lsdf.kit.edu/kit on /mnt/cifs type cifs (rw)
 
//os.lsdf.kit.edu/kit on /mnt/cifs type cifs (rw)
 
</pre>
 
</pre>
   
<h3>Mount over /etc/fstab</h3>
 
   
'''Example:'''
 
   
  +
== Using SMB/CIFS on Windows ==
<pre>
 
>mkdir /mnt/mountpoint
 
/etc/fstab
 
//os.lsdf.kit.edu/kit/inst/xy1234 /mnt/mountpoint cifs uid= xxxx,gid= yyyy,credentials=/path_to_user_HOME/credentialsfile,auto 0 0
 
# xy1234 : LSDF Online Storage user
 
# xxxx/yyyy : user uid/gid
 
 
>cat /path_to_user_HOME/credentialsfile
 
username=xy1234
 
password=*****
 
domain=os.lsdf.kit.edu
 
 
>mount /mnt/mountpoint
 
</pre>
 
Verify the success of the mount invoking the mount command without any arguments:
 
<pre>
 
mount | grep cifs
 
//os.lsdf.kit.edu/kit/inst/xy1234 on /mnt/mountpoint type cifs (rw)
 
</pre>
 
 
<H1> Using SMB/CIFS for Windows client (only KIT intern or KIT-VPN)</H1>
 
 
'''Attention:''' To access data served by LSDF Online Storage via CIFS, You need a '''''Service Password'''''. Please set your '' '''Service Password''' '' under following site: https://bwidm.scc.kit.edu.
 
   
<br>
 
 
You can use a CIFS share from a Microsoft operating system.
 
You can use a CIFS share from a Microsoft operating system.
   
<H2>Adopting Universal Naming Convention (UNC) syntax</H2>
+
=== Adopting Universal Naming Convention (UNC) syntax ===
   
 
Use Windows Explorer entering the path to the share in UNC syntax:
 
Use Windows Explorer entering the path to the share in UNC syntax:
Line 142: Line 99:
 
You can now manipulate Your files as accustomed.
 
You can now manipulate Your files as accustomed.
   
  +
<H2>Creation of a network (pseudo) drive with Windows Explorer</H2>
 
  +
=== Creation of a network (pseudo) drive with Windows Explorer ===
   
 
To connect to a network share in Windows Explorer select the control field<br>
 
To connect to a network share in Windows Explorer select the control field<br>
Line 149: Line 107:
 
Instead of the domain name in KIT, which You are accustomed to, take for user xy1234 e.g.: '''os.lsdf.kit.edu\xy1234'''. Use the dedicated '''''service password''''' instead of Your KIT Domain password.
 
Instead of the domain name in KIT, which You are accustomed to, take for user xy1234 e.g.: '''os.lsdf.kit.edu\xy1234'''. Use the dedicated '''''service password''''' instead of Your KIT Domain password.
   
  +
<hr>
 
  +
== External Links ==
<br>
 
  +
<br>
 
  +
* [https://bwidm.scc.kit.edu/service/set-password.xhtml?registryId=14181453 Service password management]
<br>
 
  +
* [https://www.samba.org/samba/docs/current/man-html/smbclient.1.html Samba command line client (''smbclient'') manual page]
<br>
 
  +
[[Category:LSDF_Online_Storage|CIFS|SMB]]
 
  +
[[Category:LSDF_Online_Storage|SMB|CIFS]]

Revision as of 15:30, 17 April 2019

SMB or CIFS is a network protocol providing remote shared access to files. It implements a network file system similar to NFS allowing users of the LSDF Online Storage to mount or browse their storage projects from remote clients.


Prerequisites

Please note the following requirements and restrictions when using the LSDF SMB service:

  • To access the LSDF Online Storage via SMB it is required to set a service password. Please follow this link to initially set, change or delete your service password. The service password will be used to authenticate your SMB client to the LSDF Online Storage SMB service.
  • SMB shares of the LSDF Online Storage are only accessible from within the KIT network or via KIT-VPN.
  • Posix style file commands like chmod must not be applied on files or folders on a SMB/CIFS share. Doing so may revoke access control lists (ACLs) preventing you or your project partners from accessing the shared file system via SMB. LSDF administrators can, if requested, prevent the usage of chmod on a storage project level.


Using SMB/CIFS on Linux with the Samba Command Line Client

Linux operating system need dedicated SMB clients to access shares. SMB clients are part of the Samba implementation for Linux and other UNIX like operating systems. To access a SMB share with the Samba command line client, e.g. to list all available shaes, issue the following commands:

$ smbclient -L os.lsdf.kit.edu -U 'os.lsdf.kit.edu\xy1234' -m SMB2
Enter os.lsdf.kit.edu\xy1234's password: 
Domain=[LSDF] OS=[] Server=[]

        Sharename        Type      Comment
        ---------        ----      -------
        IPC$             IPC       IPC Service (LSDF Online Storage)
        kit              Disk      kit
        iai-projects     Disk      iai-projects
        iam-cms-projects Disk      iam-cms-projects
        scc-projects     Disk      scc-projects
        ikp-projects     Disk      ikp-projects
        ioc-projects     Disk      ioc-projects
        ifh-projects     Disk      ifh-projects
        itg-projects     Disk      itg-projects
        imk-tro-projects Disk      imk-tro-projects
        imk-asf-projects Disk      imk-asf-projects
        ifkm-projects    Disk      ifkm-projects
(...)

The smbclient program provides a FTP like set of commands to access files and directories in an interactive shell:

$ smbclient //os.lsdf.kit.edu/kit  -U 'LSDF\xy1234' -m SMB2
Enter os.lsdf.kit.edu\xy1234's password: 
Domain=[LSDF] OS=[] Server=[]
smb: \> pwd
Current directory is \\os.lsdf.kit.edu\kit\
smb: \> help

Details information on the usage of smbclient can be found in the manual.


Mounting a Remote File System on Linux (as root)

A remote SMB share can be mounted to a local directory. You do need root rights on the local system to perform the mount operation.

To mount a remote file system issue the following command:

$ mkdir /mnt/cifs
$ mount -t cifs -o vers=2.0,username='xy1234' //os.lsdf.kit.edu/inst-projects /mnt/cifs
Password for xy1234@//os.lsdf.kit.edu/inst-projects:  ********** 
--------------------------------------------------------------------------------------------
$ df | grep cifs
//os.lsdf.kit.edu/inst-projects          966367641600  138649829376  827717812224  15% /mnt/cifs

or

$ mount -t cifs -o vers=2.0,username='xy1234' //os.lsdf.kit.edu/kit /mnt/cifs
Password for xy1234@//os.lsdf.kit.edu/kit:  ********** 

Verify the success of the mount with the following command:

$ mount | grep cifs 
//os.lsdf.kit.edu/kit on /mnt/cifs type cifs (rw)


Using SMB/CIFS on Windows

You can use a CIFS share from a Microsoft operating system.

Adopting Universal Naming Convention (UNC) syntax

Use Windows Explorer entering the path to the share in UNC syntax:

Examples:

\\os.lsdf.kit.edu 
or
\\os.lsdf.kit.edu\kit\inst\xy1234
or
\\os.lsdf.kit.edu\inst-projects

Following the input of the UNC path, a window will pop up:
Loginname: os.lsdf.kit.edu\xy1234
Password: Service Password

Following authentication a new window pops up, showing the content of the share. You can now manipulate Your files as accustomed.


Creation of a network (pseudo) drive with Windows Explorer

To connect to a network share in Windows Explorer select the control field
Select a drive letter to be associated with the network share and enter the network path (e.g. \\os.lsdf.kit.edu\kit). Select ‘use a different identification‘, as these differ from Your credential used locally.

Instead of the domain name in KIT, which You are accustomed to, take for user xy1234 e.g.: os.lsdf.kit.edu\xy1234. Use the dedicated service password instead of Your KIT Domain password.


External Links