Hello,
I've coded the following in our smb.conf file (security = share coded in the
[global] section) and this works fine where users can access the share
without a password :-
[ts]
comment = Tech support directory
path = /information
guest only = Yes
guest ok = Yes
guest account = nobody
writable = no
browsable = no
Is it possible somehow to restrict access to this share to say three users
only (say tom, dick and harry) but still allowing the three users to logon
without a password being prompted for? The above share works fine but i
don't want everyone to access it, say just three certain users.
I'm running Samba versions 3.0.14a and 2.0.5.a both on Sun Solaris8 Unix
systems.
Thanks.
^**********************************************************************^
This email and any files transmitted with it are confidential and
intended solely for the use of the individual or entity to whom they
are addressed. If you have received this email in error please notify
the system manager.
Postmaster@merton.gov.uk
http://www.merton.gov.uk
**********************************************************************
force user = userone, usertwo,userthree or you can do it by groups force groups = groupone,grouptwo --mark ----- Original Message ----- From: "James Briar" <james.briar@merton.gov.uk> To: <samba@lists.samba.org> Sent: Sunday, June 12, 2005 11:19 AM Subject: [Samba] Samba share query> > Hello, > I've coded the following in our smb.conf file (security = share coded in > the > [global] section) and this works fine where users can access the share > without a password :- > > [ts] > > comment = Tech support directory > > path = /information > > guest only = Yes > > guest ok = Yes > > guest account = nobody > > writable = no > > browsable = no > > Is it possible somehow to restrict access to this share to say three users > only (say tom, dick and harry) but still allowing the three users to logon > without a password being prompted for? The above share works fine but i > don't want everyone to access it, say just three certain users. > > I'm running Samba versions 3.0.14a and 2.0.5.a both on Sun Solaris8 Unix > systems. > > Thanks. > > > ^**********************************************************************^ > This email and any files transmitted with it are confidential and > intended solely for the use of the individual or entity to whom they > are addressed. If you have received this email in error please notify > the system manager. > Postmaster@merton.gov.uk > http://www.merton.gov.uk > ********************************************************************** > > -- > To unsubscribe from this list go to the following URL and read the > instructions: https://lists.samba.org/mailman/listinfo/samba
If you put the three users in a group and give that group what ever unix premissions you want, set the other premission to non, leave what you have in the smb.conf file, that should do it. You should not have to map the unix group to a windows group for read write exec stuff. I hope that helps. On 6/12/05, James Briar <james.briar@merton.gov.uk> wrote:> > Hello, > I've coded the following in our smb.conf file (security = share coded in the > [global] section) and this works fine where users can access the share > without a password :- > > [ts] > > comment = Tech support directory > > path = /information > > guest only = Yes > > guest ok = Yes > > guest account = nobody > > writable = no > > browsable = no > > Is it possible somehow to restrict access to this share to say three users > only (say tom, dick and harry) but still allowing the three users to logon > without a password being prompted for? The above share works fine but i > don't want everyone to access it, say just three certain users. > > I'm running Samba versions 3.0.14a and 2.0.5.a both on Sun Solaris8 Unix > systems. > > Thanks. > > > ^**********************************************************************^ > This email and any files transmitted with it are confidential and > intended solely for the use of the individual or entity to whom they > are addressed. If you have received this email in error please notify > the system manager. > Postmaster@merton.gov.uk > http://www.merton.gov.uk > ********************************************************************** > > -- > To unsubscribe from this list go to the following URL and read the > instructions: https://lists.samba.org/mailman/listinfo/samba >
Hello Mark, I've now got a good fix for my problem (after hours of trial and
error). I coded the following in my smb.conf file :-
[global]
...
hosts allow
oplocks = Yes
security = share
[ts]
comment = Tech support directory
path = /information
guest ok = yes
guest only = yes
browsable = no
read only = yes
force user = %U
I created a Unix user with the same name as my network login as well as
creating the user in the smbpasswd file. I can now map a drive to the ts
share without being prompted for a password, if another network user tries
to map a drive to the share and they have not been created as a Unix/Samba
user they get an error. This is just what i want. If i've only got say Samba
users user1, user2 and user3 set up on the Unix side then only these can map
a drive without being prompted for a password.
^**********************************************************************^
This email and any files transmitted with it are confidential and
intended solely for the use of the individual or entity to whom they
are addressed. If you have received this email in error please notify
the system manager.
Postmaster@merton.gov.uk
http://www.merton.gov.uk
**********************************************************************
Hello Dominic, thanks for your reply, I've now got a good fix for my problem
(after hours of trial and error). I coded the following in my smb.conf file
:-
[global]
...
hosts allow
oplocks = Yes
security = share
[ts]
comment = Tech support directory
path = /information
guest ok = yes
guest only = yes
browsable = no
read only = yes
force user = %U
I created a Unix user with the same name as my network login as well as
creating the user in the smbpasswd file. I can now map a drive to the ts
share without being prompted for a password, if another network user tries
to map a drive to the share and they have not been created as a Unix/Samba
user they get an error. This is just what i want. If i've only got say Samba
users user1, user2 and user3 set up on the Unix side then only these can map
a drive without being prompted for a password. I set browsable = no just for
extra security.
^**********************************************************************^
This email and any files transmitted with it are confidential and
intended solely for the use of the individual or entity to whom they
are addressed. If you have received this email in error please notify
the system manager.
Postmaster@merton.gov.uk
http://www.merton.gov.uk
**********************************************************************