Shawn Wright
2003-Feb-04 15:30 UTC
[Samba] Logon time restrictions; change ownership via samba
Are there plans to support logon time restrictions in Samba, or is it somehow supported already? We are using an NT4 PDC, and would like the samba servers to disconnect users outside of their logon times. Also, is there any way to allow one to change file ownership via samba? I have not found any way to do this. We would like domain admins to have this ability so that we can maintain file ownership & permissions from NT boxes to allow quotas to be correctly managed on the samba boxes. Currently files copied/moved to a user share on the samba box keep the ownership of the user performing the move. Domain admins need the ability to change ownership/permissions to that of a specific user. I'm using samba 2.2.5 on Redhat 7.3 with SGI XFS 1.1 partitions. Shawn Wright, I.T. Manager Shawnigan Lake School swright@SLS.bc.ca http://Zuiko.sls.bc.ca/swright http://www.sls.bc.ca
jra@dp.samba.org
2003-Feb-04 18:58 UTC
[Samba] Logon time restrictions; change ownership via samba
On Tue, Feb 04, 2003 at 07:30:38AM -0800, Shawn Wright wrote:> Are there plans to support logon time restrictions in Samba, or is it > somehow supported already? We are using an NT4 PDC, and would like > the samba servers to disconnect users outside of their logon times.This is planned for 3.0 natively, and can be emulated in 2.2 by using the "obey pam restrictions" parameter (although I think this only applies to logons, and won't disconnect after logon times have expired I think).> Also, is there any way to allow one to change file ownership via samba? I > have not found any way to do this. We would like domain admins to have > this ability so that we can maintain file ownership & permissions from NT > boxes to allow quotas to be correctly managed on the samba boxes. > Currently files copied/moved to a user share on the samba box keep the > ownership of the user performing the move. Domain admins need the > ability to change ownership/permissions to that of a specific user.mapping domain admins to root on the box will allow this. Not sure you want to do this though... Jeremy.