RE: [Hampshire] samba permissions

Top Page

Reply to this message
Author: Noble R.M.
Date:  
To: Hampshire LUG Discussion List
Subject: RE: [Hampshire] samba permissions

> In which case it giving him access to the individual home directories
> the best solution? I would have thought that a separate share
> specifically for sharing files around would make most sense. If you
> don't wish to allow everyone to read/write some files then create an
> individual directory below that share for each user (or just those

that
> require the facility). The permissions on these directories would

allow
> full read/write access to the user and write only access to anyone

that
> needs to drop files in there. This would be tidier than sharing home
> directories even though it may seem to be duplicating the facility.

With
> this you could also have directories with group read/write access, not
> just individual users. For convenience you can create a symlink into
> individual home directories if you like, although that may get to be a
> bit messy if you have too many users to manage. Better to get everyone
> to map the shared access directory structure.


Thanks for all your replies everyone.

I already have a "temp" share that everyone can see and has full
read/write access to outside of the home folders. Maybe my best bet is
to just give brian "viewing" permission to our homes and just ask him to
drop files into the temp. I could create individual user folders in the
temp share to keep files organised on a user basis. Here's my smb.conf
as it stands (with bits edited out obviously)

-------------------------
[homes]
comment = Home
valid users = %S
read only = no
browsable = no

[temp]
comment = Temporary storage (accessible by all)
path = /home/temp
public = yes
read only = No
guest ok = Yes
create mask = 0666
directory mask = 0777
browsable = yes

[printers]
comment = All Printers
path = /var/spool/samba
printable = yes
public = no
writable = no
create mode = 0700

[print$]
comment = Printer Drivers
path = /var/lib/samba/printers
browseable = yes
read only = yes
guest ok = no
write list = root, @smbadmin


[netlogon]
comment = Network Logon Service
path = /home/samba/netlogon
admin users = Administrator
valid users = %U
read only = no
guest ok = yes
writable = no
share modes = no
available = no
browsable = no
public = no

[profile]
comment = User profiles
path = /home/samba/profiles
valid users = %U
create mode = 0600
directory mode = 0700
writable = yes
browsable = no
guest ok = no
available = no
public = no

[private]
path = /home
writable = no
valid users = brian
browsable = no
comment = Private Directories

----------------------------------------------

PS: keith, I'm getting my chmasks comfused with my create/directory
masks >_<

Rob