Quoting Weiser, Johann (johann.weiser@siemens.com):> There is this really fancy sentence in the smb.conf man page: "It is > possible to use smbd in a hybrid mode where it is offers both user and > share level security under different NetBIOS aliases." > > There are a number of question here in this mailing list around this > sentence and the answers are usually to use "map to guest" parameter. > However this parameter does not work e.g. with "SECURITY = server". > > Therefore I would be really interested in a solution as described with > this sentence above with different NetBIOS aliases. Does such a solution > really exist, or should this sentence be removed from the man page?This can be done roughly the following way: smb.conf: [global] netbios aliases = foo bar include = /etc/samba/%L.conf /etc/samba/foo.conf: security=share .../... /etc/samba/bar.conf security=user .../... The server will appear twice in the network neighbourhood. When clients connect to "foo", the server will be in share mode. When clients connect to "bar", the server will be in user mode. To my experience (but that was long ago), there may be some drawbacks as there is still one samba server running and sharing its data files between the two "personalities".
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Weiser, Johann wrote:> There is this really fancy sentence in the smb.conf man page: "It is > possible to use smbd in a hybrid mode where it is offers both user and > share level security under different NetBIOS aliases." > > There are a number of question here in this mailing list around this > sentence and the answers are usually to use "map to guest" parameter. > However this parameter does not work e.g. with "SECURITY = server". > > Therefore I would be really interested in a solution as described with > this sentence above with different NetBIOS aliases. Does such a solution > really exist, or should this sentence be removed from the man page?Configuring Samba virtual servers using netbios aliases or interface IP specific configurations has been around for a really long time. I'd be really surprised if map to guest doesn't work with security = server but then again, I think security = server is a really horrid idea anyways..... cheers, jerry - -- ====================================================================Samba ------- http://www.samba.org Likewise Software --------- http://www.likewisesoftware.com "What man is a man who does not make the world better?" --Balian -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.6 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQFIDIexIR7qMdg1EfYRAr0JAKCgP13J169Irj3s/vyLKaXpj+6PlACfWK6R rs2f8/7RLQRe69N6dcQd0Rs=xOlZ -----END PGP SIGNATURE-----