On Fri, 1 Feb 2002, Geoffrey S. Mendelson wrote:

> Tzafrir Cohen wrote:
>
> > I have two classes of users to which I wish to give easy access to files
> > on my servers:
>
> > 2. Mail users
> >
> > I wish to allow somne of them to build personal homepages on the web
> > server (which is currently the same as the mail server). I wish to limit
> > them to a certain subdirectory which is not their home directory
>
> > Samba:
> > The system runs in a local network, so samba is an alternative. I have yet
> > to configure it properly. One specific thing: I understand that samba does
> > not interact well with unix permissions. Those directories may need a
> > special combination of group/user/permissions and I'm not exactly sure how
> > to do it through samba.
>
> No, it does work well with unix permissions, RTFM,
>
> Set up their home directories as owned by the user, group http. Set the
> directory permissions as u+rwx, g+srx. Users would not be in group http,
> but the web server would be. Set the umask for them to 027. Set the server
> up so that ~user resolves to users home directory.
>

Yes. The only problem here is that those are only per-share permissions,
and not file-system permissions. I'll have to see if this really gives me
troubles.

> If you don't want it to be their home directory, you could change both the
> share and web server to resolve to something else.

I wasn't aware of that:

[web-page]
  ...
  path=/var/httpd/users/%s

I'll see what else I can do.

However, some of the clients are win9x users. For them changing the login
is not as easy as in NT, as mentioned before. Also, as an atribute to
crackers, the system leaves a nice user.pwl (unless you leave your windows
password empty, which is not the default).

It seems that I have some extra reading to do, as well as an upgrade of
samba to 2.2

-- 
Tzafrir Cohen
mailto:[EMAIL PROTECTED]
http://www.technion.ac.il/~tzafrir



=================================================================
To unsubscribe, send mail to [EMAIL PROTECTED] with
the word "unsubscribe" in the message body, e.g., run the command
echo unsubscribe | mail [EMAIL PROTECTED]

Reply via email to