topic Re: Samba Security in Operating System - HP-UX

Samba Security

Cifs 9000 — Fri, 12 Jan 2007 11:33:13 GMT

I joined my samba server with ads windows2000.

i have one share directory test
Inside test directory i have around 10 directory. i want to give access to specific windows global group to particular directory
example: Global group name : accounts
group can access only share : test/acct10
and other has no access on that directory.
I don't want to create any user and local unix and samba group.
Please let me know if its possible . how can i do it from windows 2000 site.
should i need dedicate windows workstation for samba share because generally we are adding/removing user from groups.

Re: Samba Security

Geoff Wild — Fri, 12 Jan 2007 22:11:24 GMT

Yes you can do it - but you can't adminster from Windows (well I guess you can - you could use SWAT via a web browser).

Try something like:

[test]
comment = Network Drive
path = /some/path/test
valid users = @accounts, @"DOMAIN+accounts"
read only = no
browseable = yes

I'm assuming your winbind separator = +

Rgds...Geoff

Re: Samba Security

Cifs 9000 — Mon, 15 Jan 2007 11:11:10 GMT

It means i cannot give permission from windows site. example.

1. login to windows domain as admin.
2. give share permission to specific group

Re: Samba Security

Cifs 9000 — Mon, 15 Jan 2007 11:28:11 GMT

i couldn't see the option of valid user in swat.

suppose domain : xyz

@"xyz+accounts"

accounts : windows group

Re: Samba Security

Cifs 9000 — Wed, 17 Jan 2007 14:20:05 GMT

thanks