g p
2010-Jan-21 20:39 UTC
[Samba] standalone server - force connections from windows group to be a specific unix user (UID)
We have an application that is run as setuid on the linux side, and it's directory structure has a consistent owner:group with 755 permissions throughout. When the application is started under linux, the process is suid to run as the owner of the contents of this directory structure, and is therefore able to read/write any file needed during execution. We have a port of this application now on windows, and need to be able to have a similar access scheme to be able to have the windows users (which could be any arbitrary user both on and off a domain, and the number of users vary widely from 1 to many thousands so a smbuser map is not desirable - nor is the need to maintain idmap, windbind, ldap, etc. configurations) access the data that resides on the linux system, but do not wish to just open up the linux samba share to allow anyone read/write access. Ideally, we would be able to have the linux system just be a stand alone samba server with share level access control, and be able to use some mechanism to allow read/write access to the samba shares based on the group a windows user belongs to. It would be nice to have a windows user of some predetermined windows group always be forced via samba to the UID that owns the samba exported linux directories and files. Does anyone know of a lightweight (from an admin setup and maintainability standpoint) samba configuration that would meet this need, or behave in a similar manner without the need for moderate to very complex directory service configurations? Any help would be greatly appreciated!
Maybe Matching Threads
- [Bug 136] New: setgid() deemed to fail for non-suid ssh client on linux if using other than primary group
- Patch: --drop-suid Remove suid/sgid from target files
- --{enable/disable}-suid-ssh removed, rhosts auth gone when UID != 0
- Possible UID/GID bug in chrooted shells?
- [CSSA-2000-015-0] Caldera Security Advisory: KDE suid root applications