These instructions describe how to set up a share for a Sophos Anti-Virus Central Installation Directory (CID) on a UNIX or Linux server, so that Mac OS X computers can install and update from it.
What to do
In the notes below, 'Linux' refers to either Linux or UNIX.
Setting up the share on the Linux server
- Create the directory
Create the directory in which the CID will actually sit, e.g.
- Add the share details to smb.conf
You must now add the share details to the file smb.conf. This can be found in /etc/samba/
You must check the following values in smb.conf
You must then define your share. Under the title '
workgroup = (the name of the workgroup or domain in which the server resides)
security = share (this must be set to the share, not the user)
guest account = guest (this can be set to any user as long as they exist on the system)
encrypt passwords = yes
Share Definitions' add:
Additional values can also be set
comment = CID for Macs (or any other comment you want to add)
path = <path to CID> (this must be the path to the CID, e.g./opt/maccid/)
public = yes (this makes the share viewable via utilities like 'My Network Places' on Windows)
browseable = yes (this makes the contents of the share browseable).
Once the share details have been added, save the smb.conf file.
force user = root (this can be useful when testing, but take care)
guest ok = yes (this allows a guest account to be used)
write list = emlibuser1 (this can be a list of users who are allowed to write to the share. Use a comma as a separator).
- Test the share
You must test the share. To do this, type
This will show you all of the shares running on this system, as well as their configuration.
This is the stage at which you can troubleshoot any problems with the share.
- Start the samba service
Once the share is set up correctly, you can start samba to start the sharing service. On most versions of Linux or UNIX, this is
service smb start
- Start sharing
Lastly, to start sharing, type
smbclient -L localhost
You can replace 'localhost' with a computer name or IP address.
This will start sharing the shares that you created on the network.
Connecting to the CID from the Mac
To connect to the Mac CID on the Linux server, do as follows:
- On the Mac computer, select Go|Connect to Server.
smb://<ip address or name of server>/<path to CID>/
Note: The escosx folder should not be included in the CID path. For example,
/opt/maccid/CIDs/[serial number] not
- Enter username and an appropriate password. Alternatively, select 'Guest', if this has been enabled.
- Select the volume which you want to mount. You should now have the Linux volume mounted on your desktop.
- Browse to the Mac CID.
Sophos Update Manager
Sophos Update Manager can be used to manually update the Sophos Anti-Virus.mpkg file in the Mac CID on the Linux server. To do this, mount the Mac CID on the Linux server and run the Sophos Update Manager from the CID. You must be authenticated with the Linux server as a user that can access the share and write to it.