Performing discovery on Windows NFS shares

If you want to perform data discovery on Windows file shares, you need to install NFS client on your Data Security server. If you have more than one Data Security server, install NFS client on the one with the crawler you will use to perform discovery.

Do not install Data Security on the same machine as the NFS server.

Windows Server 2003

On the Data Security server you will use to perform discovery, install the NFS client from the "Windows Services for Unix" package. You can download the package from Microsoft's Technet.

During installation, select the following:

Utilities

NFS > Client for NFS

Authentication tools for NFS

All others features must be disabled.

After installation has completed, select Start > Programs > Windows Services for UNIX > Services for UNIX Administration.

Navigate to Client for NFS and set the file permissions to All, Read, Write and Execute.

Under Performance, change the transport protocol from UDP to TCP and the Mount type from Soft to Hard.

Ensure that the buffer size is at the maximum of 32 KB.

Click Apply when done.

Navigate to User Name Mapping.

On the Configuration tab specify whether the user name to be mapped will be imported from a Network Information Service (NIS) or from password/group files (/etc/passwd and /etc/group). For NIS mapping, enter the IP address or host name of the NIS server and the NIS domain name. Files are used in the example below.


	Note If you select User Password and Group Files, you only need to add the users and groups that need to be mapped.

10.

On the Maps tab, select the machine or domain for the user account that will be specified in the discovery task and click List Windows Users.

11.

Click List UNIX Users and specify an account that has access to the NFS share.

12.

Select a user name from each list box, then click Add to map the names.

13.

Log onto the TRITON Console, and select the Data Security tab.

14.

Create a data discovery policy in TRITON - Data Security. (See the section "Creating a data discovery policy" in TRITON - Data Security Help for instructions.)

15.

Create a file system task. Select Main > Policy Management > Discovery Policies, and then select Add Network Task > File System Task.

16.

On the General screen, add a name and description for the discovery task and select the crawler to perform the discovery (the one where you installed the NFS client).

17.

On the Networks screen, click Advanced and add port 2049 to the existing list of scanned ports.

18.

On the Scanned Folders screen, specify the shared to be scanned and the user name and password of the Windows user mapped to the UNIX user name.


	Note Network discovery has a limit of 255 characters for the path and file name. Files contained in paths that have more than 255 characters are not scanned.

Field

Description

Shared folders

Select the shared folders you want to scan:

Administrative shares - Select this if you want to scan administrative share drives such as C$.

Shared folders - Select this if you want to scan shared folders such as PublicDocs.

Specific folders - Select this if you want to scan specific folders, then enter the name(s) of the folder(s) to scan, separated by semi-colons.

Method

Select the method to use when scanning network shares:

TCP - Select TCP if you want to scan the share drives using transmission control protocol.

ICMP - Select ICMP if you want to scan the share drives using Internet control message protocol.

User name

Enter the user name of an administrator with network access.

Password

Enter a password for this administrator.

Domain

Optionally, enter the domain name of the network.

19.

Deploy your changes.

For more information on the wizard for creating file system discovery tasks, see the section "File System tasks" in TRITON - Data Security Help.