samba 2.2.5: Share security

[Rainer von Bongartz]

There seem to be two ways to put security on samba shares:

1) with smb.conf params
valid user; read_list , write list etc.

2) using native NT server Manager. samba stores this settings in a file called share_info.tdb.

Question:

Are both ways equivalent or is there a difference i should know?

Regards
Rainer

[Chuck J]

Not to sure.

Try this site:

http://www.linuxfocus.org/English/March2002/article177.shtml

[Rodney Hills]

The key parameter to security setup is the SECURITY= value. Which can be user, share, server, or domain. For domain and server, samba only uses an NT server for password validation, not file permission determination.

Samba attempts to map the NT username to a unix username. Then whatever security on the unix side is what determines file accesses.

Using read_list or write_list only provides a layer of security that is managed by Samba itself.

Their are of course other options available within Samba on how shares are managed. If you connect via "SWAT", you can look at each configuration parameter, click the "help" and see a good summary of the options available.

HTH

-- Rod Hills