samba - Oct 2011 - access based share enum

Hi,

 

I use Samba 3.6.1 from Sernet on Centos 6.

 

In my smb.conf i have configured. "access based share enum = yes "

I also have a share were "valid users = @MYDOMAIN\download" is
configured.

 

When a user ( not a member of MYDOMAIN\download) does a "net view
\\servername <file:///\\servername> " or is browsing the shares by MS
Explorer, this share is still visible.

 

What else must be done to hide the share for users that have no access?

 

Cheers,

 

Daniel

From: "Zabel, Daniel" <Daniel.Zabel at coremedia.com>
Date: Tue, 25 Oct 2011 17:50:30 +0200
> I use Samba 3.6.1 from Sernet on Centos 6.
> 
> In my smb.conf i have configured. "access based share enum = yes
"
> 
> I also have a share were "valid users = @MYDOMAIN\download" is
> configured.
> 
> When a user ( not a member of MYDOMAIN\download) does a "net view
> \\servername <file:///\\servername> " or is browsing the shares
by MS
> Explorer, this share is still visible.
> 
> What else must be done to hide the share for users that have no access?
As far as I examined, "access based share enum" is affected by only
ACL for share, which can be set with "sharesec" command or Windows
GUI. As access based share enum's description in smb.conf(5) says:
only share permissions are evaluated, ...

---
TAKAHASHI Motonobu <monyo at samba.gr.jp>