[nflug] Samba
Cyber Source
peter at thecybersource.com
Thu Aug 7 16:56:39 EDT 2008
That is no problem and it all can be accomplished with the "valid user"
parameter. I would suggest thoroughly reading through a "man smb.conf".
Here is an excerpt from that man..
To restrict a service to a particular set of users you can use the
valid users parameter.
If any of the usernames begin with a ’@’ then the name will be
looked up first in the NIS netgroups list (if Samba is compiled with
netgroup support), followed by a lookup in the UNIX groups database
and will expand to a list of all users in the group of that name.
If any of the usernames begin with a ’+’ then the name will be
looked up only in the UNIX groups database and will expand to a list
of all users in the group of that name.
If any of the usernames begin with a ’&’ then the name will be
looked up only in the NIS netgroups database (if Samba is compiled
with netgroup support) and will expand to a list of all users in the
netgroup group of that name.
Note that searching though a groups database can take quite some
time, and some clients may time out during the search.
Robert Wolfe wrote:
> On Thursday 07 August 2008 16:07:57 Darin Perusich wrote:
>
>> Can you give an example of what you're trying accomplish?
>>
>> Robert Wolfe wrote:
>>
>>>> What specifically are you trying to do with group permissions,
>>>> restrict/grant access?
>>>>
>>> Correct.
>>>
>
>
> Basically, we have a Windows 2000 Advanced Server file server set up on our
> network. Each department has it's own group set up and each user can be in
> one or more department. Each department has its own folder set up on the
> file server. So, for instance, our billing department can only access the
> billing folder, but not the Systems folder, whereas the Systems department
> (where I work, has access to the Systems folder and every other folder).
> There are also departments that overlap, too. For example, our networking
> department's folder is shared by Systems and Networking, but no one else.
>
> I know with Windows 2000, I can assign multiple groups to each user; what I
> want to do here is be able to do the same thing with Samba -- both with and
> without MySQL-based authentication.
> _______________________________________________
> nflug mailing list
> nflug at nflug.org
> http://www.nflug.org/mailman/listinfo/nflug
>
More information about the nflug
mailing list