Samba user access

[Robbie Smeeton]

Hi,
I have configure a win2000 server to access a shared directory on a HPUX 11.0 Server.
With "security = share", read access is too open. How can I configure the smb.conf file to limit access to a single user, preferably without a password ?

Robbie

[Steven E. Protter]

The user id needs to exist on the HP-UX box unless you are using LDAP.

/opt/samba/bin/smbpasswd -a userid password

Root user runs this command and then the user is authorized for the samba share.

I'm uploading a sample smb.conf file for you to use as a reference.

SEP

[Darren Prior]

Hi Robbie,

It sounds like user level security is a better fit for what you need. I suggest you have a read of the Using Samba book by O'Reilly (which is supplied in html format with HP's CIFS/9000 product) - there's a good section on Authentication Security that discusses user level security. You will need to setup the smbpassword file (as mentioned in the previous response), and have a valid HPUX user. If the user's password in smbpassword is the same as their Win2000 password and their HPUX user is named identically to their Win2000 username the authentication process won't ask for a password.

A sample share definition may look something like this if you wanted to limit to just the user bobjones:

[ourdata]
path = /user3/data
comment = ourdata - limited to bobjones
guest ok = no
valid users = bobjones

regards,

Darren.