The Hermit Hacker
1999-Apr-08 12:50 UTC
Letting users modify there own 'valid users = ' directive
Here's an odd question/request ... Right now, if you setup smb.conf with a [homes] section, anyone can connect and login to the server, as themselves, and mount their home directory. No probs there. Has anyone thought of, and possibly implemented, a means where that end user could change things for themselves to extend permissions on their directory? Basically, make a Win based utility that would connect to the smb server (smbd would most likely have to be extended for this) and allow a user to modify how their [homes] share is accessed. For instance, Joe-blow user wants Jane to be able to access, modify and work in his directory. By default, [homes] only allows him to access it, so he runs this config utility that adds a [joe-blow] entry to smb.conf that contains the same/similar info to [homes], but adds: force user = joe-blow valid users = joe-blow, jane To the new entry. Something like this could be further extended so that when the config program is run, joe-blow would be presented with a list of all shares on the system where 'force user = joe-blow', allowing him to change the 'valid users = ' entry for each of them... Reason for asking: Over the past year, I've been working on getting our Novell group to accept moving all the WWW accounts for all the students, staff, faculty and departments over to a Unix host with Samba. This "permissions" thing tends to be my one major hurdle on this, since, under Novell, users do have this ability... One suggestion that I've heard was to write a Java server for the Unix side of things, and then Java clients for the Windows, where the Java server handled locking and modifications ... Anyone? Marc G. Fournier ICQ#7615664 IRC Nick: Scrappy Systems Administrator @ hub.org primary: scrappy@hub.org secondary: scrappy@{freebsd|postgresql}.org