Samba on Solaris with MANY users.

[THOMAS.MIHATSCH at LHT.DLH.DE]

Hi Max,

we are running a Linux Server on Intel platform with 500GB and about 350
user. We are using CAD applications Vellum, AutoCAD and SolidWorks. For the
dokumentation we use FrameMaker and office.

There are no major problems in running the system. We are running the SAMBA
fileserver inside a Novell installation. For the convenience of our user we
programmed a form in vb for mappnig the shares in dependence of the user
login name or his group mebership. The file is like.

GROUP=TEB:USER=PDFMAKER
U:=\\matrixone\groups

GROUP=TELW
K:=\\matrixone\groups_te-lw

GROUP=EXTERN:GROUP=TE:GROUP=TEPZ:GROUP=TEA:GROUP=TEAW:GROUP=TEL:GROUP=TELW:G
ROUP=TEP:GROUP=TEPR:GROUP=TES:GROUP=TEQ:USER=U107619:USER=U053155:USER=U0151
68:USER=U018503:USER=U053811:USER!=PDFMAKER
G:=\\matrixone\groups

In addition to this we had some difficulties in managing the user and group
relation. To overcome this we programmed a form in TCL/TK which creates user
accounts in addition to the definition of the role. A role defines the
membership to a group. This file is like:

set TE         		"te-alle2"
set TEA              	"${TE}    tea-w tea te-as tea-intern te-as2"
set TEA-C          	"${TEA}   tea-c"
set TEA-C-SEN   	"${TEA-C} tea-sen sen tea-stunden"

This form is also capable of modifying and displaying the user accounts in a
grid. One line per user showing all the groups the user is in.

We experienced a problem with the groups file. Ther is alimitation in the
lenght of a line. Oure work around is to create groups with different name
but the same group id. A part of the group file looks like:

te-alle:x:122:U015168,U053155
te-alle1:x:122:U050484,U052189
te-alle2:x:122:U406500,U016780

Last but not least we use a trick to let external employs only see the
directories they are dealing with. We allowed samba to use wide links and we
create links on a (we call this ghost volume) so the external persons only
see a part of our fileserver. If the external person is member of the group
extern you can set 

invalid users = @extern

this must not be the primary group of this user.

Have Fun,

Thomas Mihatsch

If you are interested in the mentioned programs you can have them. Send an
e-mail.

----------------------------------------------------------------------------
------------------
Message: 27
Date: Mon, 23 Apr 2001 11:30:39 +0200 (MEST)
From: Max Ahston <qtxmahs at dmn.hf.sw.ericsson.se>
To: samba at lists.samba.org
Subject: Q: Samba on Solaris with MANY users.

I want to come in contact with administrators on sites with 1000+ of
concurrent users. 

Mostly I'm intressted in your experince and problems you might have run
into. There must be some "common" problem (as always with computers) that
I'm hoping I could solve before they happens.

General hints and tips of tuning the systems and Samba.

During the coming months we will move aprox 1500 users into a couple of
Sun E450's running Samba with aprox 1 TB of data.

Sincerely,

Max!


 max.ahston at dmn.hf.sw.ericsson.se  | max at ahston.se
 Ericsson Telecom                  | Tamira Konsult AB