samba - Jun 2004 - How I get that a host (domain NT) only gives access to a certain user

How I get that a host (domain NT) only gives access to a certain user. That, for
example,  john only has access
to the client IP 192.168.0.11 or, said otherwise, that the host 192.168.0.11
only give access to the user john.
How could I implement it?
I have looked for in Using Samba and Google, but I have not found anything
specific...
It is a domain NT run on Debian Woody knl 2.4.25 with Samba 2.2.8 (setting as
domain master and users security)
and the clients are W95 and 98 with fixed IP.
Regards
Richard

On Fri, 4 Jun 2004 23:43 , Ricardo Chamorro <racham@hotmail.com> sent:
>How I get that a host (domain NT) only gives access to a certain user. That,
for example,  john only has access
>to the client IP 192.168.0.11 or, said otherwise, that the host 192.168.0.11
only give access to the user john.
>How could I implement it?
>I have looked for in Using Samba and Google, but I have not found anything
specific...
>It is a domain NT run on Debian Woody knl 2.4.25 with Samba 2.2.8 (setting
as domain master and users security)
>and the clients are W95 and 98 with fixed IP.

for win98/95 your only bet it to implement POLICIES - they are a pain to do and
administer - and you will probably lock yourself out of a
machine once or twice before you understand it..

>Regards
>Richard
>-- 
>To unsubscribe from this list go to the following URL and read the
>instructions:  http://lists.samba.org/mailman/listinfo/samba
>
-------------------------------------------
Chris McKeever
If you want to reply directly to me, please use
cgmckeever--at--prupref---dot---com
<A href="http://www.prupref.com">www.prupref.com</A>
Prudential Preferred Properties
<A href="http://www.prupref.com">Chicago and Illinois NorthShore
Real Estate Experts</A>

---- Prudential Preferred Properties   www.prupref.com
Success Driven By Results
   Results Driven By Commitment
      Commitment Driven By Integrity
         We Are Prudential Preferred Properties
               

Ricardo Chamorro said the following:
> How I get that a host (domain NT) only gives access to a certain
> user. That, for example,  john only has access to the client IP
> 192.168.0.11 or, said otherwise, that the host 192.168.0.11 only give
> access to the user john. How could I implement it? I have looked for
> in Using Samba and Google, but I have not found anything specific... 
> It is a domain NT run on Debian Woody knl 2.4.25 with Samba 2.2.8
> (setting as domain master and users security) and the clients are W95
> and 98 with fixed IP.
You could do it via the login script like this:
if "%username%" == "scanner" if not
"%computername%" == "SCAN"
\\server\netlogon\bin\logoff.exe /f /n

The file "logoff.exe" ist imho part of the resource kit.


Cheers
Nicki

-- 
Linksystem Muenchen GmbH                          info@link-m.de
Schloerstrasse 10                           http://www.link-m.de
80634 Muenchen                              Tel. 089 / 890 518-0
We make the Net work.                       Fax 089 / 890 518-77
PGP Keys:                             https://www.link-m.de/pgp/

On Wed, 2004-06-30 at 19:49, Nicki Messerschmidt, Linksystem Muenchen
GmbH wrote:
> Ricardo Chamorro said the following:
> 
> > How I get that a host (domain NT) only gives access to a certain
> > user. That, for example,  john only has access to the client IP
> > 192.168.0.11 or, said otherwise, that the host 192.168.0.11 only give
> > access to the user john. How could I implement it? I have looked for
> > in Using Samba and Google, but I have not found anything specific... 
> > It is a domain NT run on Debian Woody knl 2.4.25 with Samba 2.2.8
> > (setting as domain master and users security) and the clients are W95
> > and 98 with fixed IP.
> 
> You could do it via the login script like this:
> if "%username%" == "scanner" if not
"%computername%" == "SCAN"
> \\server\netlogon\bin\logoff.exe /f /n
> 
> The file "logoff.exe" ist imho part of the resource kit.
You could also look at the sambaUserWorkstations attribute in
LDAP/tdbsam

This states that for a given user, they may only login from a particular
workstation.

This is in Samba 3.0

Andrew Bartlett
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: This is a digitally signed message part
Url :
http://lists.samba.org/archive/samba/attachments/20040630/e259db71/attachment.bin