I'm using a NAS (Buffalo LinkStation Pro with SSH access, if that matters) which runs Linux (2.6.31.8 #1 Fri Jun 8 11:07:30 JST 2012 armv5tel GNU/Linux, with smbd --version = Version 3.0.30-1.4.osstech), while all clients run Windows 7. Currently, the shares are on a xfs partition. How can samba be modified such that the share behaves like an NTFS share to the clients, i.e. allowing for encryption? Or do I need to reformat the partition as an NTFS drive (or more likely, use a loop-mounted NTFS file)?
asked Oct 10, 2012 at 13:55
-
Do you want the server or the client to do the encryption? If you want to do encryption in the Windows client, you're asking on the wrong site: flag to have your question migrated to Super User.– Gilles 'SO- stop being evil'Oct 10, 2012 at 23:12
-
@Gilles I'd prefer if the client did the actual encryption. But what I'm asking for is how (if possible) to set up samba (or whatever else is required on a Linux server) such that a network share will be treated with EFS support. It's a question about a Linux server interacting with Windows clients, so if the question is off-topic here, I'd rather have it migrated to Server Fault. But since the ideal solution would simple have the NAS share look like a true Windows machine share, it is a *nix question IMHO– Tobias KienzlerOct 11, 2012 at 5:46
-
@Gilles ... However, I may have asked the wrong question. How to set up an encrypted directory to be mounted only during samba access? is maybe a better idea...– Tobias KienzlerOct 11, 2012 at 6:09
Add a comment
|
1 Answer
A Samba share can never behave as a NTFS share, only as a SMB/CIFS share. If you want encryption then you will need to use a per-file/directory tool, or implement it in the server instead.
answered Oct 10, 2012 at 14:53
-
Does that mean there is no way to have the NAS share files that are en-/decrypted transparently on the client side? Oct 10, 2012 at 15:04
-
The NAS will share whatever files you like, but the transparency must be handled by the client unless you, again, implement it in the server. Oct 10, 2012 at 15:12
-
And can't NTFS do exactly that, and the NAS would simply store the encrypted data more or less without knowing it's encrypted? Oct 10, 2012 at 15:15
-
-
I see :-/ So the only way to have transparent client-side encryption is via some third-party software? Can't I share like another Windows PC does, where encryption is possible? Oct 10, 2012 at 15:23