Updated FAQ

[Brian Roberson]

At 05:57 AM 1/27/99 +1100, you wrote:
>Greetings all...
>
>I've updated a few things on the FAQ (only the HTML version) 
>just to let you know.
>
>* It is possible with some tools to include domain 
>  users in NTFS directory and file ACLs.  However, explorer.exe
>  is not one of these tools.  However, \winnt\system32\calcs.exe
>  does! This is working against CVS source code from mid 
>  december with a couple of small fixes.  Haven't tried 
>  it against today's source. Anyone feel up to it?
>

Just as a side note, 95/98 will allow user level security, and will verify
users via SAMBA 2.0.?? and up,
it just cant get the user list.. I have found ways to get around this..
after you enable user level security, specifying the domain to get users
from ( your Workgroup perameter in smb.conf  ), share the drive/directory,
and dont 'add' any users. then, under the registry key:
[HKEY_LOCAL_MACHINE\Security\Access]
are the drive/paths that you have shared..... you can add a key simmilar to:

XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
REGEDIT4 

[HKEY_LOCAL_MACHINE\Security\Access\C:] 
"*"=hex:81,80 
[HKEY_LOCAL_MACHINE\Security\Access\C:] 
[HKEY_LOCAL_MACHINE\Security\Access\C:\temp] 
"BST\\BRIAN"=hex:b7,00 
"BST\\SOMEUSER"=hex:81,00 
XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX

and under the registry key:
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Network\LanMan]
are the resource name/types, you dont need to manually enter anything
there, just thought someone
would want to know. :)

More info can be found at
http://bstc.net/~brian/docs/w95-8-registry-info/USER_LEVEL_ACCESS.txt
there's even a simple web-interface to make a registry key, 
http://bstc.net/~brian/docs/w95-8-registry-info/online/  
This is very primative, USE IT AT YOUR OWN RISK, It will only make shares 1
level deep, so c:\shared\docs wont work, just c:\shared will, however after
you see what its doing, you should be able to figure out how to add keys
yourself. if you would like to see a shell script that does basically the
same thing, it in the same directory, called regmaker.sh, its a bash scipt
although it _should_ work with any shell, the only externals it needs are
tr and perl, eventually I will convert it all to a perl script, I just
havent had the time.


--



~~~~~~ Brian Roberson ~~~~~~
~~~ BrainStorm Technologies ~~
~~~ Linux Solution Provider ~~~
~~~~~~~ info at bstc.net ~~~~~~
~~~~~ http://www.bstc.net/ ~~~~
~~~~~~~ (402) 690-7306 ~~~~~~