Transcript Common Runtime Support for Applications High Performance Virtualization Windows Java MySQL/PHP C/C++ .NET Services For UNIX Linux Virtualized Windows / Linux / UNIX on Hyper-V UNIX.

Common Runtime Support
for Applications
High Performance
Virtualization
Windows
Java
MySQL/PHP
C/C++
.NET
Services
For UNIX
Linux
Virtualized
Windows / Linux / UNIX on Hyper-V
UNIX
Virtualization
File Services
Directory
Services
Application
Sharing and
Integration
Management
Virtual Machine1
Windows
2000
Virtual Machine 2
http://blogs.technet.com/enterprise_admin
UNIX to Windows
identity mapping
SuSE Linux 10
Solaris
UNIX-based
NFS clients
Windows
Server 2008 R2
Active
Directory / AD
LDS
Windows 7/Vista
Windows-based
SMB clients
Identity Mapping sources (for Mapped Access)
Authentication options
UNM (User Name Mapping Server)
AUTH_SYS – No server authentication
Active Directory
Kerberos v5 authentication (Krb5)
ADLDS (Active Directory Lightweight Directory Services)
Kerberos v5 integrity and authentication (Krb5i)
•
•
•
•
•
•
•
•
MSNFS_Server
MSNFS_Client
MSNFS_UserNameMapping
MSNFS_ClientGroup
MSNFS_NetGroup
MSNFS_ClientLock
MSNFS_Export
MSNFS_ExportFencing
• Enables remote management of NFS server & client
• Can (for exmple) list NFS shares in PowerShell with
gwmi –namespace root\msnfs –class MSnfs_Export
http://blogs.technet.com/enterprise_admin/archive/2010/05/13/linuxp2v-with-dd-and-vhdtool-easy-and-cheap.aspx
Microsoft funded research project
(NFS 4.1 & pNFS capable standalone Windows client)
Center for Information Technology Integration
(University of Michigan)
•
•
•
•
Prominent member of the NFS Open Source community
First NFS v4.0 and v4.1 Linux implementations
Linux NFS maintainer
Instrumental in starting pNFS effort in the industry
Details (CITI website):
http://www.citi.umich.edu/projects/nfsv4/windows
Problem: Customer wants to integrate non-Windows
systems into Active Directory
Solution: Active Directory offers integration options either
thru customization or third-party applications
Windows Desktops
Windows Server 2008 R2
MMC and PowerShell
Users and Computers Snapin
Active Directory
Kerberos/LDAP
MMC Snapin or
Just PowerShell Scripting
Kerberos/LDAP
Authentication
Authorization
Linux AD Client
Library
Kerberos/LDAP
API
Linux Service Daemon
PAM
NSS
NIS Proxy
PAM
NSS
YPBIND
ldapsearch
(NIS)
(LDAP)
Linux System Auth & Authz
Linux SYSTEMS
LAPD Proxy
# If the user can authenticate with S/Key, that's sufficient;
# allow clear password. Try kerberos, then try plain Linux password.
login
auth
sufficient
pam_skey.so
login
auth
sufficient
pam_opie.so
no_fake_prompts
login
auth
requisite
pam_cleartext_pass_ok.so
login
auth
required
pam_Linux.so
try_first_pass
login
account
required
pam_Linux.so
login
password required
pam_permit.so
login
session
required
pam_permit.so
# The entry '[NOTFOUND=return]' means that the search for an entry should stop if the search
# in the previous entry turned up nothing. Note that if the search failed due to some other
# reason (like no NIS server responding) then the search continues with the next entry
passwd:
files ldap nisplus nis
shadow:
files nisplus nis
group:
files ldap nisplus nis
hosts:
netgroup:
files dns
files nis
automount:
aliases:
files
files nisplus
UNIX
Applications
Open Source
tools: Apache,
Tcl/Tk, bash, etc.
UNIX, XPG,
POSIX.2
commands
& utilities
U
N
I
X
Motif
X11
S
D
K
UNIX
shells
Windows
Apps
Windows
Windows
GUI
(gcc)
SUA/Interix
Windows
command
Shell
Windows system
admin, commands
& networking
3rd Party
Windows APIs
UNIX /POSIX APIs
Win32 Subsystem
Interix Subsystem
win32k.sys
Windows Kernel
Other device drivers
X11
R6
server
Windows
Apps
CDFS
FAT
NTFS
Hardware Abstraction Layer
NFS Client NFS Server
•
•
•
•
More than 2,000 UNIX API calls
pthread
X11R6
Utilities
– More than 350 tools and utilities
New component for Cross Platform
Health
Service
OpsMgr
SSH
Modules
WS-Man
Modules
WS-Man
WinRM
OpsMgr
Providers
Transfer File
OpenPegasus 2.9
with
WS-Management
Support
Session
OS
Resources
CIMOM
Execute Cmd
CIMOM
OpsMgr
Providers
SFTP
Modules
Putty Library
Invoke
Get
Enumerate
WS-Man
Existing v3 or SP1 component
Outside dependency
Built-in Unix/Linux functionality
SSH
Daemon
OS
Resources
Virtualization
Web
Servers
Database
Servers
Application
Servers
Communication
Servers
http://blogs.msdn.com/powershell/archive/2008/03/23/selectstring-and-grep.aspx
http://www.SUACommunity.com
WSV305 Deploying, Virtualizing, and Managing Linux and UNIX with Hyper-V Tuesday - 8:00AM! - Room 356
WSV202 - Building a Business Critical System: Technology, Architecture, and
Process - Tuesday 5:00 PM - Auditorium C
MGT26-HOL - Monitoring UNIX/Linux with Microsoft System Center Operations
Manager 2007 R2
www.microsoft.com/teched
www.microsoft.com/learning
http://microsoft.com/technet
http://microsoft.com/msdn
Sign up for Tech·Ed 2011 and save $500
starting June 8 – June 31st
http://northamerica.msteched.com/registration
You can also register at the
North America 2011 kiosk located at registration
Join us in Atlanta next year