RE: [WinMac] AppleShare IP 6.0 vs. NT - domain security model?

Omar Chávez(OmarChavez[at]fliteline.usa.com)
Thu, 15 Oct 1998 08:04:56 -0400

Paul, you raise a very valid question. I fully agree with you on the
need for ASIP to further its integration into existing networks.

In fact, I am almost ready to bring in an AppleShare server for a
Mission-Critical application (our financial/accounting/inventory control
system) but am a bit concerned about password maintenance.

One thing to keep in mind though, is that the security model of NT is
being replaced from a multiple domain system (not very scalable and
difficult to manage at an enterprise level) to a global directory
service in NT 5.0.

In other words, if Apple or a third party developer figure out a way to
plug in AppleShare into an NT domain and leverage NT's SM, all that
effort would be wasted when NT 5 finally appears.

For sure, Apple is starting "to get it" by releasing ASIP 6.0 with
built-in support for Windows and a "pure" IP stack. Those technological
improvements coupled with Apple's current operational excellence and a
vastly improved PR campaign are making those G3 servers fly off the
shelves.

I'd love to hear from others about their opinions/experiences/knowledge
on this topic (ASIP/NT security).

Cheers,

Omar Chávez
Technical Services Director
*********************************************************
Flite Line Equipment Corp.
Corporate Headquarters
1100 NW 163rd Drive
Miami, FL 33169 * USA
Tel (305) 626-0004 * Fax (305) 626-0566 * OmarChavez@fliteline.usa.com
--Los Angeles--Chicago--San Francisco--Washington DC--Honolulu--Miami-
*********************************************************

> ----------
> From: Paul E. Jacoby
> Sent: Wednesday, October 14, 1998 12:16 PM
> Subject: [WinMac] AppleShare IP 6.0 vs. NT - domain security
> model?
>
>
>
> Interesting discussion here. I'd like to get impression on an item I
> see
> as the single biggest thing missing from ASIP 6.0 and it's ability to
> play
> in "real corporate space":
>
> No interconnection to the Windows NT domain security model
>
> In other words, say you are a corporation based on Windows NT.
> Everyone
> has a domain login, you use WINS, etc. You bring in an AppleShareIP
> 6.0
> server. Your PC users can use SMB to connect to it. But how do you
> get
> their ACCOUNT information onto the server?
>
> You type it in by hand or use some of the tools to bulk-add user
> ID's.
> But what about passwords? And when those NT domain passwords age-out
> and
> have to be changed, your ASIP 6.0 server is completely out of sync.
> Now
> what?
>
> The missing link with ASIP 6.0 is it's lack of interconnect with NT
> domains. Sure, it can broadcast to a WINS domain so Windows folks can
> see
> the server. But that's about it.
>
> I've mentioned to Apple on more than one occassion that this is a
> major
> missing link, one that I see keeping ASIP out of some larger NT-based
> corporations. I'm interested in other comments and impressions.
>
>
>

* Windows-MacOS Cooperation List *
* FAQ: <http://www.darryl.com/winmacfaq/> *
* Archives: <http://www.darryl.com/winmac/> *
* Subscribe: <mailto:winmac-on@xerxes.frit.utexas.edu> *
* Subscribe Digest: <mailto:winmac-digest@xerxes.frit.utexas.edu> *
* Unsubscribe: <mailto:winmac-off@xerxes.frit.utexas.edu> *

This archive was generated by hypermail 2.0b2 on Thu Oct 15 1998 - 05:14:02 PDT