Control samba with IPA, aka IPA controlling say ssh, so hbacl control between a 
samba user group and a samba host group per samba share.

So redhat linux clients to redhat linux samba server (rhel6.2's) 

I need to automount smb shares for linux users who are in IPA.

So far I have kerberos going, but I cant control a samba share based on IPA 
groups....or even users...so far it seems to be valid users = guest1 in the 
smb.conf, which is close to useless.

I need the control of the share(s) valid users = ipaserver/sambagroup/user1,2,3 
etc type of thing, can this be done?

A useable alternative would be a IPA kerberos ticket to login and use AD for 
group control, clunky but centralised...I know in ipav3? domain trusts will be 
possible to look up AD groups......but really I want to use IPA s groups as I 
have linux users who do not want to be / are not in AD....


Steven Jones

Technical Specialist - Linux RHCE

Victoria University, Wellington, NZ

0064 4 463 6272

From: Rob Crittenden [rcrit...@redhat.com]
Sent: Thursday, 23 February 2012 5:26 p.m.
To: Steven Jones
Cc: freeipa-users@redhat.com
Subject: Re: [Freeipa-users] samba & IPA

Steven Jones wrote:
> Hi,
> Any good docs on making samba / smbclient / clients work with ipa?  not 
> having much luck with google....

What is it you're looking to do? The more details the better.



Freeipa-users mailing list

Reply via email to