add veto files = /*.mp3/*.wma/ so that they don't fill up their home directories with mp3's. might also want hide dot files = yes and follow sym links = yes

David Markey wrote:
[%U]
        comment = Home Directories
        browseable = yes
        read only = no
        path = %H
        valid users = @"DOMAIN\postgrad"
        ea support = yes
        store dos attributes = yes
        map readonly = no
        map archive = no
        map system = no
        hide files = /*.desktop/*.ini/


This seems to be working exactly the way I want it to. Does anyone see any
security issues with the above configuration?

Thanks for all the replys!







On Tue, 10 Mar 2009 18:10:11 +0000, David Markey
<dmar...@dodds.dmarkey.com> wrote:
No..

I want only postgrad group to have access but I dont want them to access
anyone elses home directory as discussed previously(using the valid users
=
%D%w%S).

In other words i need some kind of AND statement.

i.e. valid users = @DOMAIN\postgrads AND %D%w%S





On Tue, 10 Mar 2009 14:04:29 -0400, Andrew Chaplin
<chaplina+sa...@canisius.edu> wrote:
I think you are saying you only want the postgrad group to have access to their home directory share.

Look at the smb.conf entry for "valid users".

David Markey wrote:
I really think i have explained the situation enough and its not that
complex. I only want the users in the postgrad group to get access to
their home directories via samba but i dont want them to be able to
access anyone elses.
include = %D%w%S.smb.conf wont work, that would obviosly mean id need
an include for for every user in the postgrad group i.e.
DOMAINdmarkey.smb.conf DOMAINjoebloggs.smb.conf which is not what i
want. On Tue, 10 Mar 2009 18:08:15 +0100, Stéphane PURNELLE wrote: Could you provide more information about your configuration. a homes share with two access, why ? A idea : about include parameter, if you edit your smb.conf and put end of the file the homes shares and the include parameter like : include = %D%w%S.smb.conf [homes] ... valid user= @postgrad and ofcourse define on %D%w%S.smb.conf (the correct homes share for %D%w%S) ----------------------------------- Stéphane PURNELLE stephane.purne...@corman.be

Service Informatique       Corman S.A.           Tel : 00 32
087/342467 samba-bounces+stephane.purnelle=corman...@lists.samba.org a
écrit sur 10/03/2009 17:52:07 :
 > If you are referring to
http://marc.info/?l=samba&m=122692173903872&w=2
> > This doesnt work for me because postgrad isnt the primary group of
those
 > particular users.
> > > On Tue, 10 Mar 2009 16:18:44 +0000, Miguel Medalha > wrote: > > > >> Im my [homes] share i want to have two access rules. First one
is
 > >> %D%w%S so that DOMAINdmarkey will only be able to access his
own home
> >> directory and nobody elses > >> But I only want users in the postgrad group to be able to
access
> >> their home directory. > >> > >> > > > > That question has already been solved in previous posts. Please search > > the list. > > > > The solution lies with the use of the "include" parameter. > >

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba

Reply via email to