[%U] comment = Home Directories browseable = yes read only = no path = %H valid users = @"DOMAIN\postgrad" ea support = yes store dos attributes = yes map readonly = no map archive = no map system = no hide files = /*.desktop/*.ini/
This seems to be working exactly the way I want it to. Does anyone see any security issues with the above configuration? Thanks for all the replys! On Tue, 10 Mar 2009 18:10:11 +0000, David Markey <dmar...@dodds.dmarkey.com> wrote: > No.. > > I want only postgrad group to have access but I dont want them to access > anyone elses home directory as discussed previously(using the valid users > = > %D%w%S). > > In other words i need some kind of AND statement. > > i.e. valid users = @DOMAIN\postgrads AND %D%w%S > > > > > > On Tue, 10 Mar 2009 14:04:29 -0400, Andrew Chaplin > <chaplina+sa...@canisius.edu> wrote: >> I think you are saying you only want the postgrad group to have access >> to their home directory share. >> >> Look at the smb.conf entry for "valid users". >> >> David Markey wrote: >>> I really think i have explained the situation enough and its not that >>> complex. I only want the users in the postgrad group to get access to >>> their home directories via samba but i dont want them to be able to >>> access anyone elses. >>> >>> include = %D%w%S.smb.conf wont work, that would obviosly mean id need >>> an include for for every user in the postgrad group i.e. >>> DOMAINdmarkey.smb.conf DOMAINjoebloggs.smb.conf which is not what i >>> want. >>> On Tue, 10 Mar 2009 18:08:15 +0100, Stéphane PURNELLE wrote: >>> Could you provide more information about your configuration. >>> a homes share with two access, why ? >>> A idea : >>> about include parameter, if you edit your smb.conf and put end of the >>> file the homes shares and the include parameter like : >>> include = %D%w%S.smb.conf >>> [homes] >>> ... >>> valid user= @postgrad >>> and ofcourse define on %D%w%S.smb.conf (the correct homes share for >>> %D%w%S) >>> ----------------------------------- >>> Stéphane PURNELLE >>> stephane.purne...@corman.be >>> >>> Service Informatique Corman S.A. Tel : 00 32 >>> 087/342467 >>> samba-bounces+stephane.purnelle=corman...@lists.samba.org a >>> écrit sur 10/03/2009 17:52:07 : >>> > If you are referring to >>> http://marc.info/?l=samba&m=122692173903872&w=2 >>> > >>> > This doesnt work for me because postgrad isnt the primary group of >>> those >>> > particular users. >>> > >>> > >>> > On Tue, 10 Mar 2009 16:18:44 +0000, Miguel Medalha >>> > wrote: >>> > > >>> > >> Im my [homes] share i want to have two access rules. First one >>> is >>> > >> %D%w%S so that DOMAINdmarkey will only be able to access his >>> own home >>> > >> directory and nobody elses >>> > >> But I only want users in the postgrad group to be able to >>> access >>> > >> their home directory. >>> > >> >>> > >> >>> > > >>> > > That question has already been solved in previous posts. Please >>> search >>> > > the list. >>> > > >>> > > The solution lies with the use of the "include" parameter. >>> > >>> > > > -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba