Discussion:
[Samba] how to disable home directory to some users?
Jordi Castells
2003-12-01 19:01:42 UTC
Permalink
hi all,

I am configuring a samba server version 2.2.7-security-rollup-fix, under redhat 8.0

I would like to configure which user have access to the home directory and which not

the smb.conf home configuration is:
[homes]
comment = Home Directories
browseable = no
writable = yes
valid users = +homeusr
create mode = 0664
directory mode = 0775

where homeusr group is the group of users that have home directory access, I also delete the home directory for the users that I do not give access

the problem is every user that connect to the samba linux box see a share with the user name (of course is not posible to access because the directory do not exists)

I would that only users with home directory access view the share to avoid confusions

any ideas about where is the problem?

thanks
Andrew Bartlett
2003-12-01 19:01:44 UTC
Permalink
Post by Jordi Castells
hi all,
I am configuring a samba server version 2.2.7-security-rollup-fix, under redhat 8.0
I would like to configure which user have access to the home directory and which not
[homes]
comment = Home Directories
browseable = no
writable = yes
valid users = +homeusr
create mode = 0664
directory mode = 0775
where homeusr group is the group of users that have home directory access, I also delete the home directory for the users that I do not give access
the problem is every user that connect to the samba linux box see a share with the user name (of course is not posible to access because the directory do not exists)
I would that only users with home directory access view the share to avoid confusions
If you set a global 'broweable = no' and enable it explicitly for your
other shares, then you can stop it showing up. Also, you can use:
'valid users = %S' to ensure you keep people out of those shares.

Andrew Bartlett
--
Andrew Bartlett ***@pcug.org.au
Manager, Authentication Subsystems, Samba Team ***@samba.org
Student Network Administrator, Hawker College ***@hawkerc.net
http://samba.org http://build.samba.org http://hawkerc.net
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: This is a digitally signed message part
Url : http://lists.samba.org/archive/samba/attachments/20030430/b9b2ed04/attachment.bin
Jordi Castells
2003-12-01 19:01:45 UTC
Permalink
I try this sugestion and is not exactly what I want:

with a global 'broweable = no' no one see the home directories, including users that belong to group homeusr

I also try to set group id of home directory to homeusr group, without any luck

any ideas?

thanks
-----Mensaje original-----
Enviado el: mi?rcoles, 30 de abril de 2003 7:30
Para: Jordi Castells
CC: Samba List (E-mail)
Asunto: Re: [Samba] how to disable home directory to some users?
Post by Jordi Castells
hi all,
I am configuring a samba server version
2.2.7-security-rollup-fix, under redhat 8.0
Post by Jordi Castells
I would like to configure which user have access to the
home directory and which not
Post by Jordi Castells
[homes]
comment = Home Directories
browseable = no
writable = yes
valid users = +homeusr
create mode = 0664
directory mode = 0775
where homeusr group is the group of users that have home
directory access, I also delete the home directory for the
users that I do not give access
Post by Jordi Castells
the problem is every user that connect to the samba linux
box see a share with the user name (of course is not posible
to access because the directory do not exists)
Post by Jordi Castells
I would that only users with home directory access view the
share to avoid confusions
If you set a global 'broweable = no' and enable it explicitly for your
'valid users = %S' to ensure you keep people out of those shares.
Andrew Bartlett
--
http://samba.org http://build.samba.org http://hawkerc.net
Loading...