Has anyone tried doing the following.

 

Use a windows server with 2 NIC's. Connect one NIC to the UNRAID server the other NIC to the Router which runs your LAN.

Make the UNRAID server available only to the Windows Server - static IP no routing/bridging etc.

Map the UNRAID server drives to the Windows server (can write a NETUSE script if you want or use persistant connections).

 

Then (the 64 thousand dollar question) can you share the disks out as Windows shares from the Windows server?

And if you can - can you then apply security via the Windows server?

 

The lack of security severely limits the uses of the UNRAID system - else it is a very timely solution.

 

Thanks in advance for your feedback/comments.

Given the likely forthcoming solution within unraid, that seems to be overly complex and expensive.  It would also probably be slow.

 

 

Bill

and, is it possible to share a mapped drive??

So when are these security features expected?

 

I need the windows server anyways for other things - so cost is not an issue.

 

Good point about sharing a networked drive - I dont know - I will test this out.

eh - this is no good. Cant share network drives in XP. So this is a no go. That means UNRAID is a no go till there are security features...

.......it was fun when it looked like it was a decent solution. I'll keep checking back....

daytona235-  Quick question: is this level of security is "sufficient" for your needs?

 

1. can create users & groups

2. users enter password to connect to server

3. you can configure which users have read-only and/or read-write access to individual shares

4. but 'security' tab via Windows Explorer can not modify permissions (ie, no NTFS permissions)

 

 

yes, yes, yes

 

Two small things you dont mention:

- Shares can be "retired" thats is not shared at all. I use for rarely used backups, as XBOX and Wii games

- Public shares

 

Never mind the Win/NTFS security features. :-)

/Rene

 

daytona235-  Quick question: is this level of security is "sufficient" for your needs?

 

1. can create users & groups

2. users enter password to connect to server

3. you can configure which users have read-only and/or read-write access to individual shares

4. but 'security' tab via Windows Explorer can not modify permissions (ie, no NTFS permissions)

 

 

Tom,

All of that is good, but only if the web-page that manages the unRaid server is also password protected. 

 

As already mentioned, the ability to enable/disable/hide individual shares from appearing on the network would be very desirable.  That way my the share I use for backups can be available, but hidden from the media servers looking at the unRaid server for their content on a different share.

 

Joe L.

I would also add replacing (or supplementing) telnet with SSH, and using HTTPS for the management web page, or else passwords can be sniffed off of the network with relative ease.

daytona235-  Quick question: is this level of security is "sufficient" for your needs?

 

1. can create users & groups

2. users enter password to connect to server

3. you can configure which users have read-only and/or read-write access to individual shares

4. but 'security' tab via Windows Explorer can not modify permissions (ie, no NTFS permissions)

 

 

 

So what you are saying is when a user tries to map to a share say \\tower\movies a login dialog box comes up on the screen and they have to then enter an account and a password?

 

This is would be good - I mean it would give some level of security / data separation which is the primary need.

 

Would the Admin/root would be able to take ownership and or override user granted read/write access?

 

Dont mind not being able to assign security via NTFS - but it would be really nice if you could have some kind of pass through authentication from NT so there doesnt need to be a second login - but this is a nice to have.

 

Of course a password to the control page per comments made on this thread would be required.

 

by the way could I mount a true crypt drive on top of this share?

So I am guessing WHEN is too hard a question to answer?

 

How about using these guys to do some of this work? http://www.rentacoder.com/RentACoder/default.asp

 

No I don't work for them no I don't get any referral fees I just want unRAID to have some of these basic functions or at least to know WHEN these will be available.

So I am guessing WHEN is too hard a question to answer?

 

How about using these guys to do some of this work? http://www.rentacoder.com/RentACoder/default.asp

 

No I don't work for them no I don't get any referral fees I just want unRAID to have some of these basic functions or at least to know WHEN these will be available.

 

Lime is a small operation and (as I read it) a second job.  As such, the software release process is a bit of "I'll prioritize as best I can, but delivery dates are TBD".  Tom gets out releases fairly frequently and the added functionality is usually what folks are looking for.  Security is near the top of the priority list, so I suspect you will get what you need soon.  I *believe* I read that security is in the next release so my personal guess would be "weeks" away, not "months".

 

 

Bill

Weeks? Now that would be sweet!

 

This is a very neat piece of software - and what a timely idea!!!

 

I am totally excited by the possibilities - this why I was putting out the ideas on how this might be developed a bit faster.

 

Just got my first test box up and I am trying to come up with a truecrypt based alternative to security. Shall post once I get it going (or not).