I have set up my samba with winbind and it appears to be working fine. Altered
the pam.d/system-auth file and it is creating the user directories. The issue I
am running into is that if "biguser" logs in and goes to the server
and then logs out of the W2K client and then user "david" logs in on
the same client and goes to the server he sees shared directories or appears to
see shared directories [biguser] and [david]. From my testing though it
appears that he is actually only seeing david, because if I go to the share
[biguser] I can create a file or directory and it appears in the share [david].
When I look in /home/user/david and /home/user/biguser though the files are only
created in /home/user/david. If biguser then logs into the same client then the
same thing appears to happen.
I'm concerned that this may freak out some of the users and make them think
that the server is unsecure and that users can access other users home
directories.
samba 3.0.10-1
smb.conf
----------------------------------------------------------------------------------------
[global]
workgroup = MYDOMAIN
netbios name = MBE_Data_Server
server string = samba server
security = DOMAIN
password server = 192.168.5.1 192.168.5.2
obey pam restrictions = yes
idmap uid = 10000-20000
idmap gid = 10000-20000
template homedir = /home/users/%U
template primary group = "Domain Users"
template shell = /bin/bash
winbind separator = +
hosts allow = 192.168.5. 127.
smb ports = 139
printcap name = /etc/printcap
wins server = 192.168.5.1
load printers = yes
vfs objects = extd_audit
log file = /var/log/samba/%U.%m.log
log level = 0 vfs:2
max log size = 50
# encrypt passwords = yes
# smb passwd file = /etc/samba/smbpasswd
# socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
printer admin = MYDOMAIN+biguser root-clark biguser
lpq cache time = 20
printing = CUPS
printcap = CUPS
dns proxy = no
[homes]
comment = Home Directories
path = /home/users/%U
write list = MYDOMAIN+%U
browseable = no
[Special_Data]
comment = MBE System A
browseable = yes
path = /MBEData/CURRENT_MBE/MBE1_Data
read only = no
valid users = MYDOMAIN+biguser,@"MYDOMAIN+Domain Users"
write list = MYDOMAIN+biguser,MYDOMAIN+david
read list = MYDOMAIN+biguser,@"MYDOMAIN+Domain Users"
create mask = 0774
security mask = 0774
force security mode = 770
dos filetimes = yes
directory mask = 2777
directory security mask = 0770
force directory security mode = 770
inherit permissions = yes
writable = yes
guest ok = no
