Abstract
Most Unix-based SMB/CIFS filesystems (Linux cifs, Linux smbfs and others) have traditionally been designed to use a single set of credentials for all accesses to a particular mount. This design limitation presents challenges for deployment by administrators who would like local users to use their own credentials when accessing files on the server. This talk will cover a discussion of the Linux' CIFS client multiuser code that allows it to spawn and track new SMB sessions whenever a new user accesses the mount. Different aspects of the design will be covered, as well as the new cifscreds tool that extends this to non-krb5 auth.
Learning Objectives
Why using a single set of credentials is problematic on a multiuser system
How the Linux cifs client remedies this with multiuser mounts
How to deploy multiuser cifs mounts under Linux in a typical scenario