Novell Doc: OES 2 SP3: Planning and Implementation Guide

18.1 Overview of File Services

The file service components in OES include the following:

FTP Services: Lets users securely transfer files to and from OES 2 servers.
NetWare Core Protocol: Provides NetWare Core Protocol (NCP) access to NCP volumes (including NSS volumes) that you define on OES 2 server partitions.
NetStorage: Provides network and Web access to various file services through common file service protocols, such as CIFS.

The NetStorage server doesn’t actually store files and folders. Rather, it provides access to other file services that support the native TCP/IP protocol.
Novell AFP: Provides native Macintosh access to files stored on an NSS volume on an OES 2 server.
Novell CIFS: Provides native Windows (CIFS and HTTP-WebDAV) access to files stored on an NSS volume on an OES 2 server.
Novell iFolder 3.8: Provides a Web-based and network-based repository (Novell iFolder server) that stores master copies of locally accessible files on the OES 2 server.
Novell Samba: Provides Windows (CIFS and HTTP-WebDAV) access to files stored on an OES 2 server’s file system.

The file service components in OES are generally compatible. However you cannot run Novell Samba on the same OES 2 server as Novell AFP, Novell CIFS, or Domain Services for Windows, which is not reviewed as a file service, but does include an alternative Samba file service.

18.1.1 Using the File Services Overviews

Each graphical overview in the following sections introduces one of the OES file service components. If visual presentations help you grasp basic concepts, continue with the following overviews. If you prefer to skip the overviews, go to Section 18.2, Planning for File Services.

18.1.2 FTP Services

OES 2 offers a level of integration between eDirectory and Pure-FTP that allows users to authenticate to eDirectory for FTP access to the server. You simply select the Novell FTP Server pattern in the OES 2 installation and then make sure the users needing access are LUM-enabled and have access rights to the areas on the server they need to use. You can also migrate an existing FTP server configuration from a NetWare server to OES 2.

For migration instructions and a brief FAQ, see Migrating FTP from NetWare to OES 2 Linux in the OES 2 SP3: Migration Tool Administration Guide.

For documentation on Pure-FTP, visit the Pure-FTP Web site.

18.1.3 NetWare Core Protocol

NetWare Core Protocol (NCP) is the technology beneath many of the network services for which NetWare is famous.

In OES, NCP is also available on Linux. The Novell NCP Server for Linux provides the rich file services that Novell is known for. Windows and Linux users who run Novell Client software can now access data, manage files and folders, map drives, etc., using the same methods as they do on NetWare servers.

Figure 18-1 illustrates the basics of NCP file services. For more information on how NCP can help you manage access to network resources, see Access Control and Authentication.

Figure 18-1 NCP Services for Linux and NetWare

The following table explains the information illustrated in Figure 18-1.

Table 18-1 NCP Access

Access Methods	Authentication	NCP Services
Access is through an NCP client—specifically, the Novell Client.	All file service access is controlled by eDirectory authentication.	Files are stored on NetWare or NCP volumes that the administrator has created. The same core set of NetWare file attributes are available on both Linux and NetWare.

Access Methods

Authentication

NCP Services

Access is through an NCP client—specifically, the Novell Client.

All file service access is controlled by eDirectory authentication.

Files are stored on NetWare or NCP volumes that the administrator has created.

The same core set of NetWare file attributes are available on both Linux and NetWare.

18.1.4 NetStorage

NetStorage makes network files available anywhere, any time.

Common Network File Storage Problems

Network file access is often confusing and frustrating to users, as illustrated in Figure 18-2.

Figure 18-2 Common Network File Storage Problems

The following table explains the information illustrated in Figure 18-2.

Table 18-2 NetStorage Access Solutions

Access Methods	Authentication	Target File Systems	Solution: NetStorage
Browser or PDA access is critical to those who must travel. However, access method support varies widely among file service providers.	Authentication helps protect information assets, but having diverse authentication methods leads to frustration and lost productivity.	Having diverse file storage services only adds to the complexity and confusion.	Novell NetStorage ties all of these issues together with an easy-to-administer, easy-to-use solution.

Novell NetStorage on Linux

NetStorage on Linux provides local and Web access to files on many systems without requiring the Novell Client (see Figure 18-3).

Figure 18-3 How NetStorage Works on OES 2

The following table explains the information illustrated in Figure 18-3.

Table 18-3 NetStorage on Linux

Access Methods	Authentication	NetStorage Server	Target Servers
Users have read and write access to files from Windows Explorer: Enabled by the HTTP protocol with WebDAV extensions. Browsers: Users can access files directly by connecting to the NetStorage server. PDAs: PDA users with network connections can access their files as well. Access is granted through login script drive mapping (NCP server required) or through Storage Location Objects.	File service access is controlled by LDAP-based authentication through the eDirectory LDAP server. Although shown separately, eDirectory could be running on the OES 2 server.	The NetStorage server receives and processes connection requests and provides access to storage on various servers on the network.	NetStorage on Linux can connect eDirectory users to their files and folders stored in the following locations: Windows workgroup shares (CIFS or Samba shares) Linux POSIX volumes through an SSH connection. Linux volumes can also be made available as NCP volumes. Management of NSS volumes on OES 2 through NetStorage requires SSH access to the server. See When Is SSH Access Required?.

Access Methods

Authentication

NetStorage Server

Target Servers

Users have read and write access to files from

Windows Explorer: Enabled by the HTTP protocol with WebDAV extensions.
Browsers: Users can access files directly by connecting to the NetStorage server.
PDAs: PDA users with network connections can access their files as well.

Access is granted through login script drive mapping (NCP server required) or through Storage Location Objects.

File service access is controlled by LDAP-based authentication through the eDirectory LDAP server.

Although shown separately, eDirectory could be running on the OES 2 server.

The NetStorage server receives and processes connection requests and provides access to storage on various servers on the network.

NetStorage on Linux can connect eDirectory users to their files and folders stored in the following locations:

Windows workgroup shares (CIFS or Samba shares)
Linux POSIX volumes through an SSH connection.

Linux volumes can also be made available as NCP volumes.

Management of NSS volumes on OES 2 through NetStorage requires SSH access to the server. See When Is SSH Access Required?.

18.1.5 Novell AFP

The Novell AFP service lets users on Macintosh workstations access and store files on OES 2 servers with NSS volumes without installing any additional software, such as the Novell Client (see Figure 18-4).

Figure 18-4 How Novell AFP Works

Table 18-4 AFP Access

Access Points	Authentication	AFP File Services
eDirectory users on Macintosh workstations have native access to the OES 2 server.	All file service access is controlled by LDAP-based authentication through the eDirectory LDAP server. Although shown separately, eDirectory could be installed on the OES 2 server.	Of course, the same files can also be accessed through other OES file services (such as NetStorage) that connect to Linux volumes.

Access Points

Authentication

AFP File Services

eDirectory users on Macintosh workstations have native access to the OES 2 server.

All file service access is controlled by LDAP-based authentication through the eDirectory LDAP server.

Although shown separately, eDirectory could be installed on the OES 2 server.

Of course, the same files can also be accessed through other OES file services (such as NetStorage) that connect to Linux volumes.

18.1.6 Novell CIFS

The Novell CIFS service lets users on Windows workstations access and store files on OES 2 servers with NSS volumes without installing any additional software, such as the Novell Client (see Figure 18-4).

Figure 18-5 How Novell CIFS Works

Table 18-5 CIFS Access

Access Methods	Authentication	CIFS File Services
eDirectory users on Windows workstations have two native Windows file access options: CIFS Client Access: Windows Explorer users can access and modify files on the OES 2 server just as they would on any workgroup server share. Web Folder: Users can create Web Folders in Windows Explorer or Internet Explorer. Files on the OES 2 server are accessed and maintained with the HTTP-WebDAV protocol.	All file service access is controlled by LDAP-based authentication through the eDirectory LDAP server. Although shown separately, eDirectory could be installed on the OES 2 server.	Of course, the same files can also be accessed through other OES file services (such as NetStorage) that connect to NSS volumes.

Access Methods

Authentication

CIFS File Services

eDirectory users on Windows workstations have two native Windows file access options:

CIFS Client Access: Windows Explorer users can access and modify files on the OES 2 server just as they would on any workgroup server share.
Web Folder: Users can create Web Folders in Windows Explorer or Internet Explorer.

Files on the OES 2 server are accessed and maintained with the HTTP-WebDAV protocol.

All file service access is controlled by LDAP-based authentication through the eDirectory LDAP server.

Although shown separately, eDirectory could be installed on the OES 2 server.

Of course, the same files can also be accessed through other OES file services (such as NetStorage) that connect to NSS volumes.

18.1.7 Novell iFolder 3.8

Novell iFolder 3.8 supports multiple iFolders per user, user-controlled sharing, and a centralized network server for file storage and secure distribution (see Figure 18-6).

Figure 18-6 How Novell iFolder Works

The following table explains the information illustrated in Figure 18-6.

Table 18-6 iFolder Access

Access Methods	Authentication/File Encryption	Novell iFolder 3.8 Services
Linux, Mac, and Windows workstation users who have the Novell iFolder Client installed can access and modify their files in one or more workstation folders. Changes are automatically synchronized with the iFolder 3.8 Enterprise servers. A Web interface lets users access their files from any computer with an active network or Internet connection.	All file service access is controlled by LDAP- based authentication through the eDirectory LDAP server. Although shown separately, eDirectory could be installed on the OES 2 server. Files can be encrypted for transport using SSL connections (HTTPS).	Slave servers can be added as needed, providing the ability to dynamically grow iFolder services without disrupting users. Local and network copies of each file are automatically synchronized by the Novell iFolder Client and Server pieces.

Access Methods

Authentication/File Encryption

Novell iFolder 3.8 Services

Linux, Mac, and Windows workstation users who have the Novell iFolder Client installed can access and modify their files in one or more workstation folders. Changes are automatically synchronized with the iFolder 3.8 Enterprise servers.

A Web interface lets users access their files from any computer with an active network or Internet connection.

All file service access is controlled by LDAP- based authentication through the eDirectory LDAP server.

Although shown separately, eDirectory could be installed on the OES 2 server.

Files can be encrypted for transport using SSL connections (HTTPS).

Slave servers can be added as needed, providing the ability to dynamically grow iFolder services without disrupting users.

Local and network copies of each file are automatically synchronized by the Novell iFolder Client and Server pieces.

Additional overview information is available in Overview of Novell iFolder in the Novell iFolder 3.8.4 Administration Guide.

18.1.8 Novell Samba

Samba on an OES 2 server provides Windows (CIFS and HTTP-WebDAV) access to files stored on the OES 2 server (see Figure 18-7).

Figure 18-7 How Samba on OES Works

The following table explains the information illustrated in Figure 18-7.

Table 18-7 Samba Access

Access Methods	Authentication	File Storage Services
eDirectory users on Windows workstations have two native Windows file access options (if their eDirectory accounts have been enabled for LUM and Samba): CIFS Client Access: Windows Explorer users can access and modify files on the Samba server just as they would on any workgroup server share. Web Folder: Users can create Web Folders in Windows Explorer or Internet Explorer. Files on the OES 2 server running Samba are accessed and maintained with the HTTP-WebDAV protocol.	All file service access is controlled by LDAP-based authentication through the eDirectory LDAP server. Although shown separately, eDirectory could be installed on the OES 2 server.	Of course, the same files can also be accessed through other OES file services (such as NetStorage) that connect to Linux volumes.

Access Methods

Authentication

File Storage Services

eDirectory users on Windows workstations have two native Windows file access options (if their eDirectory accounts have been enabled for LUM and Samba):

CIFS Client Access: Windows Explorer users can access and modify files on the Samba server just as they would on any workgroup server share.
Web Folder: Users can create Web Folders in Windows Explorer or Internet Explorer.

Files on the OES 2 server running Samba are accessed and maintained with the HTTP-WebDAV protocol.

All file service access is controlled by LDAP-based authentication through the eDirectory LDAP server.

Although shown separately, eDirectory could be installed on the OES 2 server.

Of course, the same files can also be accessed through other OES file services (such as NetStorage) that connect to Linux volumes.

Samba is an open source initiative. In addition to Linux support, Samba initiatives provide support for other platforms such as Apple Computer’s operating systems. More information is available on the Web.