samba - Apr 2003 - how to disable home directory to some users?

hi all,
 
I am configuring a samba server version 2.2.7-security-rollup-fix, under redhat
8.0
 
I would like to configure which user have access to the home directory and which
not
 
the smb.conf home configuration is:
[homes]
   comment = Home Directories
   browseable = no
   writable = yes
   valid users = +homeusr
   create mode = 0664
   directory mode = 0775

where homeusr group is the group of users that have home directory access, I
also delete the home directory for the users that I do not give access
 
the problem is every user that connect to the samba linux box see a share with
the user name (of course is not posible to access because the directory do not
exists)
 
I would that only users with home directory access view the share to avoid
confusions
 
any ideas about where is the problem?
 
thanks

On Tue, 2003-04-29 at 21:36, Jordi Castells wrote:
> hi all,
>  
> I am configuring a samba server version 2.2.7-security-rollup-fix, under
redhat 8.0
>  
> I would like to configure which user have access to the home directory and
which not
>  
> the smb.conf home configuration is:
> [homes]
>    comment = Home Directories
>    browseable = no
>    writable = yes
>    valid users = +homeusr
>    create mode = 0664
>    directory mode = 0775
> 
> where homeusr group is the group of users that have home directory access,
I also delete the home directory for the users that I do not give access
>  
> the problem is every user that connect to the samba linux box see a share
with the user name (of course is not posible to access because the directory do
not exists)
>  
> I would that only users with home directory access view the share to avoid
confusions
If you set a global 'broweable = no' and enable it explicitly for your
other shares, then you can stop it showing up.  Also, you can use:
'valid users = %S' to ensure you keep people out of those shares.

Andrew Bartlett

-- 
Andrew Bartlett                                 abartlet@pcug.org.au
Manager, Authentication Subsystems, Samba Team  abartlet@samba.org
Student Network Administrator, Hawker College   abartlet@hawkerc.net
http://samba.org     http://build.samba.org     http://hawkerc.net
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: This is a digitally signed message part
Url :
http://lists.samba.org/archive/samba/attachments/20030430/b9b2ed04/attachment.bin

I try this sugestion and is not exactly what I want:

with a global 'broweable = no' no one see the home directories,
including users that belong to group homeusr

I also try to set group id of home directory to homeusr group, without any luck

any ideas?

thanks

> -----Mensaje original-----
> De: Andrew Bartlett [mailto:abartlet@samba.org]
> Enviado el: mi?rcoles, 30 de abril de 2003 7:30
> Para: Jordi Castells
> CC: Samba List (E-mail)
> Asunto: Re: [Samba] how to disable home directory to some users?
> 
> 
> On Tue, 2003-04-29 at 21:36, Jordi Castells wrote:
> > hi all,
> >  
> > I am configuring a samba server version 
> 2.2.7-security-rollup-fix, under redhat 8.0
> >  
> > I would like to configure which user have access to the 
> home directory and which not
> >  
> > the smb.conf home configuration is:
> > [homes]
> >    comment = Home Directories
> >    browseable = no
> >    writable = yes
> >    valid users = +homeusr
> >    create mode = 0664
> >    directory mode = 0775
> > 
> > where homeusr group is the group of users that have home 
> directory access, I also delete the home directory for the 
> users that I do not give access
> >  
> > the problem is every user that connect to the samba linux 
> box see a share with the user name (of course is not posible 
> to access because the directory do not exists)
> >  
> > I would that only users with home directory access view the 
> share to avoid confusions
> 
> If you set a global 'broweable = no' and enable it explicitly for
your
> other shares, then you can stop it showing up.  Also, you can use:
> 'valid users = %S' to ensure you keep people out of those shares.
> 
> Andrew Bartlett
> 
> -- 
> Andrew Bartlett                                 abartlet@pcug.org.au
> Manager, Authentication Subsystems, Samba Team  abartlet@samba.org
> Student Network Administrator, Hawker College   abartlet@hawkerc.net
> http://samba.org     http://build.samba.org     http://hawkerc.net
>