David Roid
2010-Jul-29 05:38 UTC
[Samba] Samba server running in AD domain, local users can still access share
Hello all, I have a Samba 3.5 server running in an AD domain and domain users can access nonpublic shares with their credentials. Good since this is what I want. However accidentally I found that local users (of the server itself) could also access nonpublic shares with their credentials. Is this a bug or Samba works this way, accepting both local and domain users? Is there anyway I can make the server just dedicates to AD domain users? Thanks and Regards David
Dale Schroeder
2010-Jul-29 17:45 UTC
[Samba] Samba server running in AD domain, local users can still access share
If you're running winbind, something like the following should work: valid users = DOMAIN\user1, @DOMAIN\group1 Dale On 07/29/2010 12:38 AM, David Roid wrote:> Hello all, > > I have a Samba 3.5 server running in an AD domain and domain users can > access nonpublic shares with their credentials. Good since this is what I > want. > > However accidentally I found that local users (of the server itself) could > also access nonpublic shares with their credentials. Is this a bug or Samba > works this way, accepting both local and domain users? Is there anyway I can > make the server just dedicates to AD domain users? > > Thanks and Regards > David
Reasonably Related Threads
- Winbindd and Domain local groups
- Give users Power user access level to local machines.
- Panic / EL6 / KVM / kernel-2.6.32-754.2.1.el6.x86_64
- [homes] share not created unless linux user has a home directory in /etc/passwd
- home share issue: //server/homes errs, while //server/<username> works