We're in the early stages of migrating from a Linux terminal server environment with a CentOS 5.9 file server to Citrix XenDesktop/XenApp with Windows fileservers. We'll have a period where users on the Citrix systems will need to access files on the CentOS server (currently running NFSv3, no Samba).
On a test system running Win2k8R2 with Remote Desktop Services and the Client for NFS, I've set up a batchfile to mount one of the Linux NFS shares at boot, per this advice. I've also populated the uidNumber and gidNumber attributes of a few test accounts in our Active Directory domain, matching them to objects in an instance of OpenLDAP we use to authenticate users and provide the groups used to create filesystem ACLs on the CentOS box.
Mounting the share works fine and I can traverse a couple levels down into the filesystem. At a certain level, I'm no longer able to traverse into folders that my test user has access to when logged into one of the Linux terminal servers; I receive an "access denied" message from Windows. I've not been able to find any likely suspects in event logs and online research hasn't turned up anything that resembles this issue. I expect our Linux ACLs are causing this issue, but I'm not sure where to take my troubleshooting next, being a Windows guy primarily.
SAM has stated in this thread/post that Samba should take care of this transparently, but I'm concerned about the additional configuration and management (i.e. risk) that would entail in our environment (I'm not the admin responsible for the CentOS fileserver, though).
Has anyone had experience/behavior like this? What was your solution? Thanks!