samba - Sep 2017 - Restrict share access per IP/client machines

On Tue, 5 Sep 2017 11:17:56 -0300 (BRT)
Dante Colo via samba <samba at lists.samba.org> wrote:
> Hello 
> 
> Is there anyway to restrict a user to logon on domain or connect to a
> Samba AD server only from some specific client machines ? 
> 
> Regards 
> Dante 
> 
> 
Read in 'man smb.conf' about 'hosts deny' and 'hosts
allow'

Rowland

Hello Rowland

But using host deny and allow will restrict source ips , i was thinking to doing
this in addition for a specific user , anyway i never tried host allow/deny
directives on a per share basis, does it work ?

Regards 
Dante F. B. Colò



----- Original Message -----
From: "samba" <samba at lists.samba.org>
To: "samba" <samba at lists.samba.org>
Sent: Tuesday, September 5, 2017 12:23:19 PM
Subject: Re: [Samba] Restrict share access per IP/client machines

On Tue, 5 Sep 2017 11:17:56 -0300 (BRT)
Dante Colo via samba <samba at lists.samba.org> wrote:
> Hello 
> 
> Is there anyway to restrict a user to logon on domain or connect to a
> Samba AD server only from some specific client machines ? 
> 
> Regards 
> Dante 
> 
> 
Read in 'man smb.conf' about 'hosts deny' and 'hosts
allow'

Rowland

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba

On Tue, 5 Sep 2017 14:34:44 -0300 (BRT)
Dante Colo <dante.colo at stwbrasil.com> wrote:
> Hello Rowland
> 
> But using host deny and allow will restrict source ips , i was
> thinking to doing this in addition for a specific user , anyway i
> never tried host allow/deny directives on a per share basis, does it
> work ?
> 
Yes, but in your case I think you want 'invalid users'

Rowland