11.1 Security Implications

If you plan to implement Samba on your network, be aware of the following security implications:

11.1.1 Universal Password

By default, Samba uses Novell Universal Password (UP) for authentication. Changing the default UP setting is not recommended.

Before using Samba, you might want to investigate the implications for using Universal Password as documented in Universal Password in the NetIQ Modular Authentication Services Administration Guide.

Alternatively, you might choose to provide Windows users with file services using Novell Client software, Novell iFolder, or NetStorage. For more information, see File Services in the OES 2015 SP1: Planning and Implementation Guide.

For more information on Samba password options, see Section 11.2, Samba Passwords.

11.1.2 Samba Access vs. Novell Client Access

Samba uses the POSIX/Linux security model. Novell Client software and other NCP access methods use the NetWare security model.

Providing similar access priviledges for both Samba users and Novell Client (NCP) users, requires additional steps as explained in Aligning NCP and POSIX File Access Rights in the OES 2015 SP1: Planning and Implementation Guide.