samba - Apr 2011 - MSDFS - Can you hide folders with no access

Hello,

i got a msdfs share running and now i want to hide folders from users who
got no access to them anyway.


For example:

List of shares:
test1
test2

User sees only:
test1


Is something like that possible mit samba itself or does someone know a
workaround to get it running like that ?

Thanks for any ideas.

A.Dura

> i got a msdfs share running and now i want to hide folders from users who
> got no access to them anyway
In smb.conf:

hide unreadable =yes

Maybe this does what you need. Consult the man page for smb.conf.

As far as I know this is not possible. You can only manage this by writing
your own prexec script ex.: that generates
The dfs links as for each user as he has the right for a special share  in
his home directory. Or you do a ln-s to the wanted shares.
But this is tricky.

-----------------------------------------------
EDV Daniel M?ller

Leitung EDV
Tropenklinik Paul-Lechler-Krankenhaus
Paul-Lechler-Str. 24
72076 T?bingen

Tel.: 07071/206-463, Fax: 07071/206-499
eMail: mueller at tropenklinik.de
Internet: www.tropenklinik.de
-----------------------------------------------

-----Urspr?ngliche Nachricht-----
Von: samba-bounces at lists.samba.org [mailto:samba-bounces at lists.samba.org]
Im
Auftrag von guyver at on-luebeck.de
Gesendet: Dienstag, 5. April 2011 10:47
An: samba at lists.samba.org
Betreff: [Samba] MSDFS - Can you hide folders with no access

Hello,

i got a msdfs share running and now i want to hide folders from users who
got no access to them anyway.


For example:

List of shares:
test1
test2

User sees only:
test1


Is something like that possible mit samba itself or does someone know a
workaround to get it running like that ?

Thanks for any ideas.

A.Dura

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba

From: guyver at on-luebeck.de
Date: Tue, 5 Apr 2011 10:47:09 +0200 (CEST)
> i got a msdfs share running and now i want to hide folders from users who
> got no access to them anyway.
(snip)
> Is something like that possible mit samba itself or does someone know a
> workaround to get it running like that ?
For example 

To set smb.conf
-----
[dfsshare]
  path = /some/where
  include = dfsshare.%G
-----

To set dfsshare.group1
-----
  veto files = /group2*/group3*/
-----

To set on dfsshare

-----
# ls -l 
... group1-share1 -> msdfs:...
... group1-share2 -> msdfs:...
... group2-share1 -> msdfs:...
... group2-share2 -> msdfs:...
... group3-share1 -> msdfs:...
... group3-share2 -> msdfs:...

----

This way is a workaround?

As far as I examined on Samba 3.5.8, to set veto files parameter,
matched files (including msdfs:... symlinks) are not accesible. So to
combine with include parameter and %G variable, you can control which
groups (or users) can access which links ( or %U if you want to
control per user).

---
TAKAHASHI Motonobu <monyo at samba.gr.jp>