[Samba] How can I show only the shares that user have access to in SAMBA

2012-10-14 Thread simon ben
Dear All,

For the issue i am having to display shares only to 
users having access i did come across a article but just 
wondering what exactly it means


access based share enum (S) 
 

If this parameter is yes for a service, then the share hosted by the 
service will only be visible to users who have read or write access to 
the share during share enumeration (for example net view \\sambaserver).
 This has parallels to access based enumeration, the main difference 
being that only share permissions are evaluated, and security 
descriptors on files contained on the share are not used in computing 
enumeration access rights.
 

Default: access based share enum = no 



I apprecite if someone could clarify it with example


-

my smb.conf is

---


[kmplan]
    comment = masterplan testing directory
    path = /opt/network/testplan
    valid users = @localgrp
    write list = @localgrp
    read only = No
       hide unreadable = Yes
   hide unwriteable files = Yes
    access based share enum = Yes



want only the users of localgrp to see the share and no others

appreciate your kind help

regards


simon

--- On Sat, 10/13/12, simon ben  wrote:

From: simon ben 
Subject: [Samba] How can I show only the shares that user have access to in 
SAMBA
To: samba@lists.samba.org
Date: Saturday, October 13, 2012, 1:58 PM



Dear All,

As I have a issue to display only those shares the users have access too..
i am really trying to find a solution and came across a post 

http://serverfault.com/questions/144339/hiding-samba-share-from-browse-list-for-unauthorised-users

its about the include statement 

this would exactly achieve my purpose but when I did that as I could put 
browseable = no in my kmplan section of my smb.conf file

and 
browseable = yes in the include file 

testparm says 
Can't find include file /etc/samba/%G.conf 
i did try with other variables like u or U but its the same


Appreciate your help

regards

simon



--- On Thu, 10/11/12, simon ben  wrote:

From: simon ben 
Subject: Re: [Samba] How can I show only the shares that user have access to in 
SAMBA
To: "Björn JACKE" 
Cc: samba@lists.samba.org
Date: Thursday, October 11, 2012, 1:04 PM

Dear Bjorn,

Indeed so grateful for your quick reply

I was indeed using earlier samba

actually I just installed it using yum.

now I did upgrade samba to recent one
samba 3.6.8 and after running the testparm command displayed no errors

but still I was not able to achieve my goal

as christian mentioned in his reply i do think his mistaken cause there are 
many guys whos post i see and they have solved it by adding just his 2 below 
command in their smb.conf file
hide unreadable = Yes
hide unwriteable files = Yes

Is there anything I could look into
as I mentioned before I have used webmin to create both local and samba users 
whos user names are the same and so also groups

here below my smb.conf



[global]
    workgroup = MYGROUP
    server string = Samba Server Version %v
    disable spoolss = Yes
    domain master = No
    idmap config * : backend = tdb
    cups options = raw

[homes]
    comment = Home Directories
    read only = No
    browseable = No

[printers]
    comment = All Printers
    path = /var/spool/samba
    printable = Yes
    print ok = Yes
    browseable = No

[kmplan]
    comment = masterplan testing directory
    path = /opt/network/testplan
    valid users = @localgrp
    write list = @localgrp
    read only = No
       hide unreadable = Yes
   hide unwriteable files = Yes
    access based share enum = Yes

also here below are the permissions of /opt/network/testplan directory

drwxrws--T 3 root localgrp 4096 Oct 10 19:39 testplan


Actually every things works fine what I mean is

if I log in as a user who belongs to localgrp I can read/write the kmplan share 
which is perfect

but when i log in as user who does not belong to localgrp i can see the kmplan 
share although i cannot access it.

as christian said i can hide the share but even for valid users the share is 
hidden n i obviously dont want to hide the share for valid users

regards

simon






--- On Thu, 10/11/12, Björn JACKE  wrote:

From: Björn JACKE 
Subject: Re: [Samba] How can I show only the shares that user have access to in 
SAMBA
To: "simon ben" 
Cc: samba@lists.samba.org
Date: Thursday, October 11, 2012, 2:10 AM

On 2012-10-11 at 01:22 -0700 simon ben sent off:
> but when I do a testparm it gives a error
> ---
> [root@kmshare samba]# testparm /etc/samba/smb.conf
> Load smb config files from /etc/samba/smb.conf
> Unknown parameter encountered: "access based share enum"
> Ignoring unknown parameter "access based share enum"

then your Samba version is too old then. This parameter was

[Samba] How can I show only the shares that user have access to in SAMBA

2012-10-13 Thread simon ben


Dear All,

As I have a issue to display only those shares the users have access too..
i am really trying to find a solution and came across a post 

http://serverfault.com/questions/144339/hiding-samba-share-from-browse-list-for-unauthorised-users

its about the include statement 

this would exactly achieve my purpose but when I did that as I could put 
browseable = no in my kmplan section of my smb.conf file

and 
browseable = yes in the include file 

testparm says 
Can't find include file /etc/samba/%G.conf 
i did try with other variables like u or U but its the same


Appreciate your help

regards

simon



--- On Thu, 10/11/12, simon ben  wrote:

From: simon ben 
Subject: Re: [Samba] How can I show only the shares that user have access to in 
SAMBA
To: "Björn JACKE" 
Cc: samba@lists.samba.org
Date: Thursday, October 11, 2012, 1:04 PM

Dear Bjorn,

Indeed so grateful for your quick reply

I was indeed using earlier samba

actually I just installed it using yum.

now I did upgrade samba to recent one
samba 3.6.8 and after running the testparm command displayed no errors

but still I was not able to achieve my goal

as christian mentioned in his reply i do think his mistaken cause there are 
many guys whos post i see and they have solved it by adding just his 2 below 
command in their smb.conf file
hide unreadable = Yes
hide unwriteable files = Yes

Is there anything I could look into
as I mentioned before I have used webmin to create both local and samba users 
whos user names are the same and so also groups

here below my smb.conf



[global]
    workgroup = MYGROUP
    server string = Samba Server Version %v
    disable spoolss = Yes
    domain master = No
    idmap config * : backend = tdb
    cups options = raw

[homes]
    comment = Home Directories
    read only = No
    browseable = No

[printers]
    comment = All Printers
    path = /var/spool/samba
    printable = Yes
    print ok = Yes
    browseable = No

[kmplan]
    comment = masterplan testing directory
    path = /opt/network/testplan
    valid users = @localgrp
    write list = @localgrp
    read only = No
       hide unreadable = Yes
   hide unwriteable files = Yes
    access based share enum = Yes

also here below are the permissions of /opt/network/testplan directory

drwxrws--T 3 root localgrp 4096 Oct 10 19:39 testplan


Actually every things works fine what I mean is

if I log in as a user who belongs to localgrp I can read/write the kmplan share 
which is perfect

but when i log in as user who does not belong to localgrp i can see the kmplan 
share although i cannot access it.

as christian said i can hide the share but even for valid users the share is 
hidden n i obviously dont want to hide the share for valid users

regards

simon






--- On Thu, 10/11/12, Björn JACKE  wrote:

From: Björn JACKE 
Subject: Re: [Samba] How can I show only the shares that user have access to in 
SAMBA
To: "simon ben" 
Cc: samba@lists.samba.org
Date: Thursday, October 11, 2012, 2:10 AM

On 2012-10-11 at 01:22 -0700 simon ben sent off:
> but when I do a testparm it gives a error
> ---
> [root@kmshare samba]# testparm /etc/samba/smb.conf
> Load smb config files from /etc/samba/smb.conf
> Unknown parameter encountered: "access based share enum"
> Ignoring unknown parameter "access based share enum"

then your Samba version is too old then. This parameter was introduced with
Samba 3.6 I think (maybe 3.5 already). On http://www.enterprisesamba.org you
might find recent packages for your distribution that support that feature.

Cheers
Björn
-- 
SerNet GmbH, Bahnhofsallee 1b, 37081 Göttingen
  ☎ +49-551-37-0, ℻ +49-551-37-9
AG Göttingen, HRB 2816, GF: Dr. Johannes Loxen
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba

Re: [Samba] How can I show only the shares that user have access to in SAMBA

2012-10-11 Thread simon ben
Dear Bjorn,

Indeed so grateful for your quick reply

I was indeed using earlier samba

actually I just installed it using yum.

now I did upgrade samba to recent one
samba 3.6.8 and after running the testparm command displayed no errors

but still I was not able to achieve my goal

as christian mentioned in his reply i do think his mistaken cause there are 
many guys whos post i see and they have solved it by adding just his 2 below 
command in their smb.conf file
hide unreadable = Yes
hide unwriteable files = Yes

Is there anything I could look into
as I mentioned before I have used webmin to create both local and samba users 
whos user names are the same and so also groups

here below my smb.conf



[global]
    workgroup = MYGROUP
    server string = Samba Server Version %v
    disable spoolss = Yes
    domain master = No
    idmap config * : backend = tdb
    cups options = raw

[homes]
    comment = Home Directories
    read only = No
    browseable = No

[printers]
    comment = All Printers
    path = /var/spool/samba
    printable = Yes
    print ok = Yes
    browseable = No

[kmplan]
    comment = masterplan testing directory
    path = /opt/network/testplan
    valid users = @localgrp
    write list = @localgrp
    read only = No
       hide unreadable = Yes
   hide unwriteable files = Yes
    access based share enum = Yes

also here below are the permissions of /opt/network/testplan directory

drwxrws--T 3 root localgrp 4096 Oct 10 19:39 testplan


Actually every things works fine what I mean is

if I log in as a user who belongs to localgrp I can read/write the kmplan share 
which is perfect

but when i log in as user who does not belong to localgrp i can see the kmplan 
share although i cannot access it.

as christian said i can hide the share but even for valid users the share is 
hidden n i obviously dont want to hide the share for valid users

regards

simon






--- On Thu, 10/11/12, Björn JACKE  wrote:

From: Björn JACKE 
Subject: Re: [Samba] How can I show only the shares that user have access to in 
SAMBA
To: "simon ben" 
Cc: samba@lists.samba.org
Date: Thursday, October 11, 2012, 2:10 AM

On 2012-10-11 at 01:22 -0700 simon ben sent off:
> but when I do a testparm it gives a error
> ---
> [root@kmshare samba]# testparm /etc/samba/smb.conf
> Load smb config files from /etc/samba/smb.conf
> Unknown parameter encountered: "access based share enum"
> Ignoring unknown parameter "access based share enum"

then your Samba version is too old then. This parameter was introduced with
Samba 3.6 I think (maybe 3.5 already). On http://www.enterprisesamba.org you
might find recent packages for your distribution that support that feature.

Cheers
Björn
-- 
SerNet GmbH, Bahnhofsallee 1b, 37081 Göttingen
  ☎ +49-551-37-0, ℻ +49-551-37-9
AG Göttingen, HRB 2816, GF: Dr. Johannes Loxen
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba

Re: [Samba] How can I show only the shares that user have access to in SAMBA

2012-10-11 Thread simon ben
Dear Bjorn
 
I really apprecite your quick reply.
by the way I did add the 
 access based share enum = yes

but when I do a testparm it gives a error
---
[root@kmshare samba]# testparm /etc/samba/smb.conf
Load smb config files from /etc/samba/smb.conf
Unknown parameter encountered: "access based share enum"
Ignoring unknown parameter "access based share enum"
Processing section "[homes]"
Processing section "[printers]"
Processing section "[kmplan]"
Loaded services file OK.
Server role: ROLE_STANDALONE
Press enter to see a dump of your service definitions
[global]
    workgroup = MYGROUP
    server string = Samba Server Version %v
    passdb backend = tdbsam
    disable spoolss = Yes
    winbind use default domain = Yes
    winbind trusted domains only = Yes
    cups options = raw
[homes]
    comment = Home Directories
    read only = No
    browseable = No
[printers]
    comment = All Printers
    path = /var/spool/samba
    printable = Yes
    browseable = No
[kmplan]
    comment = masterplan testing directory
    path = /opt/network/testplan
    valid users = @localgrp
    write list = @localgrp
    read only = No
    hide unreadable = Yes
    hide unwriteable files = Yes
 

the directory /opt/network/testplan is sahred as kmplan and localgrp has 2 
valid users
user1 and user2 
so if I log in as user1 or user2 kmplan share can be accessed perfectly
 
i have a third user user3 and he not belong the localgrp .
 
also wanted to mentioned that I have used webmin to create local users and in 
samba windows file sharing option of webmin==> user and group synchronisation 
==> i am using yes for all. that is when a unix user is created automatically 
add a samba user likewise for groups.
 
apprecite your help and advise
 
 
regards
 
simon


--- On Wed, 10/10/12, Björn JACKE  wrote:


From: Björn JACKE 
Subject: Re: [Samba] How can I show only the shares that user have access to in 
SAMBA
To: "simon ben" 
Cc: samba@lists.samba.org
Date: Wednesday, October 10, 2012, 1:28 PM


On 2012-10-10 at 13:02 -0700 simon ben sent off:
> i have right now one share and want only the users who have access to the 
> share to see it
> and the others should not
> 
> when I log into the user who has no access I see the share and when i double 
> click it ask me for username and password
> 
> googling arround this issuse is solved by using the below in smb.conf file
>  hide dot files = yes
>         hide unreadable = yes
> in the share definition section.
> 
> but its still visible

can you please try setting

    access based share enum = yes

?

Cheers
Björn
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


[Samba] How can I show only the shares that user have access to in SAMBA

2012-10-10 Thread simon ben
Dear All,

I have implemented samba to right now in test environment to be implemented in 
production as  samba file server

so far its working grt 

but I have one issue

i have right now one share and want only the users who have access to the share 
to see it
and the others should not

when I log into the user who has no access I see the share and when i double 
click it ask me for username and password

googling arround this issuse is solved by using the below in smb.conf file
 hide dot files = yes
hide unreadable = yes
in the share definition section.

but its still visible

security is set as user

here the part of my smb.conf
--
[kmplan]
    writeable = yes
    path = /opt/network/testplan
    write list = @localgrp
    revalidate = yes
    hide unreadable = yes
    hide dot files = yes
    comment = masterplan testing directory
    valid users = @localgrp
-

is there anything i need to set in smb.conf
appreciate your help and advice


regards

simon




-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


[Samba] quotas on samba shares

2012-10-10 Thread simon ben
Dear All,

Below I had earlier posted this issue but its solved
I accutally forgot about going to unused modules and then configure quota


sorry for this


regards

simon


Dear All,

I have just implemented a new setup of centos 5.8 server to be used as a Linux 
file server using sambais 
The server is partitioned with the defaults
below is a df -k output
---

Filesystem           1K-blocks      Used Available Use% Mounted on
/dev/mapper/VolGroup00-LogVol00
                     119885916   1174332 112523348   2% /
/dev/hda1               101086     12632     83235  14% /boot
tmpfs                  1029780         0   1029780   0% /dev/shm

---

I have created samba users and shares and everything is fine.

i have used webmin to
 achieve this


now I want to have quotas implemented on the shares that is both for users home 
share and group share

In webmin under system i dont see quota option

I have tried to install quota package with yum but still I dont see the quota 
option in webmin

appreciate if someone could help me and advise me or help me with some helpful 
link



regards

simon


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


[Samba] setting up quotas on shares

2012-10-08 Thread simon ben
Dear All,

I have just implemented a new setup of centos 5.8 server to be used as a Linux 
file server using sambais 
The server is partitioned with the defaults
below is a df -k output
---

Filesystem           1K-blocks      Used Available Use% Mounted on
/dev/mapper/VolGroup00-LogVol00
                     119885916   1174332 112523348   2% /
/dev/hda1               101086     12632     83235  14% /boot
tmpfs                  1029780         0   1029780   0% /dev/shm

---

I have created samba users and shares and everything is fine.

i have used webmin to achieve this


now I want to have quotas implemented on the shares that is both for users home 
share and group share

In webmin under system i dont see quota option

I have tried to install quota package with yum but still I dont see the quota 
option in webmin

appreciate if someone could help me and advise me or help me with some helpful 
link



regards

simon
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba