access control list (ACL)
A list associated with a file that contains information about which users or groups have permission to access or modify the file.
Active Directory (AD)
A Windows naming service that runs on a domain controller to protect network objects from unauthorized access. This service also replicates objects across a network so that data is not lost if one domain controller fails.
A transient share of a user's home directory that is created when the user logs in and is removed when the user logs out.
Software that enables a system to access SMB shares from a SMB server
Software that enables a system to make SMB shares available to SMB clients
SMB Common Internet File System
A protocol that follows the client-server model to share files and services over the network, and which is based on the Server Message Block (SMB)
A rule that maps between a Windows group and an Oracle Solaris user and between an Oracle Solaris group and a Windows user. These mappings are needed when Windows uses a group identity as a file owner, or a user identity as a file group.
A way to use name mapping information that is stored in user or group objects in the Active Directory (AD), in the native LDAP directory service, or both to map users and groups.
Domain Name System (DNS)
A service that provides the naming policy and mechanisms for mapping domain and machine names to addresses outside of the enterprise, such as those on the Internet. DNS is the network information service used by the Internet.
Dynamic DNS (DDNS)
A service that is provided with AD
that enables a client to dynamically update its entries in the DNS database.
A dynamic UID or GID mapping for an SID that is not already mapped by name.
group identifier (GID)
An unsigned 32-bit identifier that is associated with an Oracle Solaris group.
A process that enables Windows clients to transparently access SMB shares and remote services from the Oracle Solaris SMB server
Lightweight Directory Access Protocol (LDAP)
A standard, extensible directory access protocol that enables clients and servers that use LDAP naming services to communicate with each other.
A directory to which you mount a file system or a share that exists on a remote system.
The name of a host or workgroup used by NetBIOS.
Network Information Service (NIS) database
A distributed database that contains key information about the systems and the users on the network. The NIS database is stored on the master server and all replica or slave servers.
Network Time Protocol (NTP)
A protocol that enables a client to automatically synchronize its system clock with a time server. The clock is synchronized each time the client is booted and any time it contacts the time server.
A stored password that enables an SMB client to mount SMB shares without having to authenticate each mount action. This password remains in storage until removed by the
smbadm remove-key command.
A way to use rules to associate Windows users and groups with equivalent Oracle Solaris users and groups by name rather than by identifier.
An open source service that enables UNIX servers to provide SMB file-sharing to SMB clients.
Security Accounts Manager (SAM) database
A local resource on a server that is accessible to clients on the network. On an Oracle Solaris SMB server, a share is typically a directory. Each share is identified by a name on the network. To clients on the network, the share does not expose the local directory path directly above the root of the share.
Most shares have the type
disk because the shares are directories. A share of type
pipe represents a device, such as an IPC share.
Server Message Block (SMB)
A protocol that enables clients to access files and to request services of a server on the network.
user identifier (UID)
An unsigned 32-bit identifier that is associated with an Oracle Solaris user.
A centrally administered group of computers and accounts that share a common security and administration policy and database. Computer, user, and group accounts are centrally managed by using servers known as domain controllers
. In order to participate in a Windows domain, a computer must join the domain and become a domain member.
Windows domain controller
A Windows system that is used to provide authentication services for its Windows domain.
Windows Internet Naming Service (WINS)
A service that resolves NetBIOS names to IP addresses.
A group of standalone computers that are independently administered. Each computer has independent local user and group accounts and a security and policy database. In a Windows workgroup, computers cooperate through the use of a common workgroup name but this peer-to-peer model has no formal membership mechanism.