It mounts as an ordinary partition with the right credentials. So it wont matter what you use to access it once it is mounted. AFAIK the credentials can be on a usb key on boot and removed after.<div><br></div><div>Let me know if this is incorrect.</div>
<div><br></div><div>I only have only used it as purposeful mounted directory for testing on win and Linux<br><div><br></div><div><br></div><div><br><div class="gmail_quote">2009/10/28 Ari <span dir="ltr"><<a href="mailto:sothisistheinternet@gmail.com">sothisistheinternet@gmail.com</a>></span><br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex;"><div class="im">Scott Middleton wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
You could also look at truecrypt.<br>
<a href="http://www.truecrypt.org/" target="_blank">http://www.truecrypt.org/</a><br>
<br>
It works with windows and linux and has hidden partitions accessible with different authentication.<br>
<br>
</blockquote>
<br></div>
I'll have a look, thanks. Is there information there on how to integrate it with samba?<br>
<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
2009/10/28 Ari <<a href="mailto:sothisistheinternet@gmail.com" target="_blank">sothisistheinternet@gmail.com</a> <mailto:<a href="mailto:sothisistheinternet@gmail.com" target="_blank">sothisistheinternet@gmail.com</a>>><div>
<div></div><div class="h5"><br>
<br>
Phillip Bennett wrote:<br>
<br>
Ari wrote:<br>
<br>
Hi all,<br>
<br>
Okay, I need some guidance here. I've helped a mate get<br>
started with<br>
linux and he's happy using a FC11 install as a samba<br>
server (he wanted a<br>
copy of what I had, but with more hard drives for backing<br>
up his video<br>
editting, documents, etc etc). All is well with that, but<br>
after a recent<br>
theft he's worried about his files being accessed if the<br>
server or the<br>
backup drives are stolen. I'm not really sure where to<br>
start for<br>
encrypting things but still having them available to all<br>
his windows<br>
PCs. He has 3TB of storage drives (the FC11 install is on<br>
a separate<br>
small 40GB drive) with the entire drives shared via samba.<br>
I've got him<br>
using rsync for his backups to his external usb drives. Is<br>
it possible<br>
to encrypt the samba shared drives and still have samba be<br>
able to use<br>
them? What about the backups with rsync? I'm reluctant to<br>
admit I've<br>
never worked with encryption on linux drives before, and I<br>
know I really<br>
really should have as it's the sort of security measure<br>
that I should<br>
know about. Help please :-(<br>
<br>
TIA,<br>
<br>
Ari<br>
_______________________________________________<br>
PLUG discussion list: <a href="mailto:plug@plug.org.au" target="_blank">plug@plug.org.au</a><br></div></div>
<mailto:<a href="mailto:plug@plug.org.au" target="_blank">plug@plug.org.au</a>><div class="im"><br>
<a href="http://www.plug.org.au/mailman/listinfo/plug" target="_blank">http://www.plug.org.au/mailman/listinfo/plug</a><br>
Committee e-mail: <a href="mailto:committee@plug.linux.org.au" target="_blank">committee@plug.linux.org.au</a><br></div>
<mailto:<a href="mailto:committee@plug.linux.org.au" target="_blank">committee@plug.linux.org.au</a>><div><div></div><div class="h5"><br>
<br>
<br>
<br>
<br>
Hi,<br>
<br>
You could always try out LUKS encryption. It's pretty<br>
standard with<br>
RedHat and probably fedora - my home box is off right now, so<br>
can't<br>
check for you.. Basically, you create an encrypted partition<br>
that gets<br>
opened at boot with a password. You can even dictate the<br>
strength of<br>
the encryption when you set it up. Once it's opened with the<br>
password,<br>
it will be seen by the operating system as just another block<br>
device<br>
that can be formatted as whatever you like (etx2/3, fat32,<br>
etc..) so<br>
samba would be able to see it and share it as if it was just<br>
another<br>
filesystem. Once powered off, the encrypted data is inaccessible<br>
without the password. We use it here in the Scottish Blood<br>
Service for<br>
keeping patient data secure on our mobile devices (laptops).<br>
<br>
Hth,<br>
Phil.<br>
<br>
<br>
Thank you Phil, this sounds like it could be just the thing.<br>
<br>
</div></div></blockquote><div><div></div><div class="h5">
<br>
_______________________________________________<br>
PLUG discussion list: <a href="mailto:plug@plug.org.au" target="_blank">plug@plug.org.au</a><br>
<a href="http://www.plug.org.au/mailman/listinfo/plug" target="_blank">http://www.plug.org.au/mailman/listinfo/plug</a><br>
Committee e-mail: <a href="mailto:committee@plug.linux.org.au" target="_blank">committee@plug.linux.org.au</a><br>
</div></div></blockquote></div><br><br clear="all"><br>-- <br>Scott Middleton<br>Managing Director - AssureTek<br>Email - <a href="mailto:Scott@assuretek.com.au">Scott@assuretek.com.au</a><br>Phone - 1300 551 696<br>Mobile - 0400 212 724<br>
<br>
</div></div>