I am trying to create an individual secure share in Samba. We have it loaded on a Solaris box and our users access the shares using Windows Explorer. It appears that everything I've read only allows me to create secure shares for all the shares. Is there a way to create individual secure shares? Those can be password protected or not. Thanks Scott Webb Senior Consultant, Booz Allen Hamilton Content Staging Engineer, CDHQ, CFSOCC Camp As Sailiyah, Doha Qatar 318 432-7254 DSN 974 447-2156 HOME 974 578-8319 CELL
Currently our smb.conf file config reads: Security = share What I'm trying to do though is create a share that I can apply security to, whether that is from password protection, or specifying which users can access certain shares. The Network Operations Center on our network wants to have a share that only their Sys Ads have access to. I can get you more info as needed, but if you can assist me with this issue you'll make me a hero! Thanks Scott Webb Senior Consultant, Booz Allen Hamilton Content Staging Engineer, CDHQ, CFSOCC Camp As Sailiyah, Doha Qatar 318 432-7254 DSN 974 447-2156 HOME 974 578-8319 CELL -----Original Message----- From: samba@lists.samba.org [mailto:samba@lists.samba.org] Sent: Thursday, January 26, 2006 10:24 PM To: Webb, Mr Scott (CTR) Subject: Re: [Samba] Secure Share Webb, Mr Scott (CTR) wrote:> I am trying to create an individual secure share in Samba. We have it > loaded on a Solaris box and our users access the shares using Windows > Explorer. It appears that everything I've read only allows me tocreate> secure shares for all the shares. Is there a way to create individual > secure shares? Those can be password protected or not.What precisely do you mean by 'Secure' share? -- Best regards, Charles
On Tue, 2006-01-24 at 10:53 +0300, Webb, Mr Scott (CTR) wrote:> I am trying to create an individual secure share in Samba. We have it > loaded on a Solaris box and our users access the shares using Windows > Explorer. It appears that everything I've read only allows me to create > secure shares for all the shares. Is there a way to create individual > secure shares? Those can be password protected or not.I'm a little unclear what you mean by a 'secure share'. Many aspects of the security protocols operate on the TCP session or the (potentially multiple) user contexts on that session. These include SMB signing in particular. We don't get the information on what share a user is after at that point. However, with %L (see the manpage) we can have two virtual names with different behaviours. Andrew Bartlett -- Andrew Bartlett http://samba.org/~abartlet/ Authentication Developer, Samba Team http://samba.org Student Network Administrator, Hawker College http://hawkerc.net -------------- next part -------------- A non-text attachment was scrubbed... Name: not available Type: application/pgp-signature Size: 189 bytes Desc: This is a digitally signed message part Url : http://lists.samba.org/archive/samba/attachments/20060131/f94f73b5/attachment.bin
On Tue, 2006-01-31 at 13:04 +0300, Webb, Mr Scott (CTR) wrote:> I have Samba loaded on a Solaris 8 box. And that is where the shares > reside. Personnel use Windows Explorer and map a drive to these shares. > Right now, it's wide open for anyone logged onto the domain. I'm trying > to create a share in Samba that affords some kind of security, whether > that is password protection, or group policy that only allows certain > users access. Is this possible in Samba? To have multiple security > configs in the smb.conf? > > If so, how do I do it?Samba honours the underlying unix access permissions, and this (setting unix permissions) is by far the most secure and effective way to protect data. Simply put your authorized users in a group, and set that group permission on the files/folders. Andrew Bartlett -- Andrew Bartlett http://samba.org/~abartlet/ Authentication Developer, Samba Team http://samba.org Student Network Administrator, Hawker College http://hawkerc.net -------------- next part -------------- A non-text attachment was scrubbed... Name: not available Type: application/pgp-signature Size: 189 bytes Desc: This is a digitally signed message part Url : http://lists.samba.org/archive/samba/attachments/20060131/b6cc37c0/attachment.bin
I have Samba loaded on a Solaris 8 box. And that is where the shares reside. Personnel use Windows Explorer and map a drive to these shares. Right now, it's wide open for anyone logged onto the domain. I'm trying to create a share in Samba that affords some kind of security, whether that is password protection, or group policy that only allows certain users access. Is this possible in Samba? To have multiple security configs in the smb.conf? If so, how do I do it? Thanks! Scott Webb Senior Consultant, Booz Allen Hamilton Content Staging Engineer, CDHQ, CFSOCC Camp As Sailiyah, Doha Qatar 318 432-7254 DSN 974 447-2156 HOME 974 578-8319 CELL -----Original Message----- From: Andrew Bartlett [mailto:abartlet@samba.org] Sent: Tuesday, January 31, 2006 12:32 PM To: Webb, Mr Scott (CTR) Cc: samba@lists.samba.org Subject: Re: [Samba] Secure Share On Tue, 2006-01-24 at 10:53 +0300, Webb, Mr Scott (CTR) wrote:> I am trying to create an individual secure share in Samba. We have it > loaded on a Solaris box and our users access the shares using Windows > Explorer. It appears that everything I've read only allows me tocreate> secure shares for all the shares. Is there a way to create individual > secure shares? Those can be password protected or not.I'm a little unclear what you mean by a 'secure share'. Many aspects of the security protocols operate on the TCP session or the (potentially multiple) user contexts on that session. These include SMB signing in particular. We don't get the information on what share a user is after at that point. However, with %L (see the manpage) we can have two virtual names with different behaviours. Andrew Bartlett -- Andrew Bartlett http://samba.org/~abartlet/ Authentication Developer, Samba Team http://samba.org Student Network Administrator, Hawker College http://hawkerc.net