Share management

Steven French sfrench at
Mon Jan 14 10:05:05 GMT 2002

>Message: 6
>From: "Nigel Williams" <nigel at>
>To: <samba-technical at>
>Subject: command line share management tool
?Date: Fri, 11 Jan 2002 18:46:39 -0800
>I have recently written the additional code required to allow command line
>share management. i.e. enum/add/delete/modify share entries including
>permissioning.  I'd like some feedback on what form a share management
>should take.  Are people happy to use a combination of rpcclient and
>smbcacls for this or should a separate share management tool be written.
>How much interest would there be in such a tool?

Having a DCE/RPC alternative to the RAP code that net currently calls for
share management of (mostly Windows) servers would be useful (since you may
be able to get at higher level structures than the share_info_2 data
structure) but the share operations are pretty simple conceptually unlike
the access control operations.   Whether we should consider access control
management part of share management is more controversial though.
Although it was nice prior to NT4 when you could type something like "NET
ACCESS c:\exports /GRANT user1:R" to give user1 read-access to the path -
having the API work directly on the file or directory object (as it did
since NT4) seems better.   Implementing ACL management in a way that would
make it easier to link in (as part of the smbclient library) would be
great.   It would make creating a CIFS aware file browser much easier (so
the non-Windows equivalent of the "my computer" and file explorer tools on
Windows could manage ACLs, not just list files and the basic file
attributes).    There is some benefit in having the ability to type
something like "NET ACCESSENTRY ADD unc_path user_or_group permissions
acl_type" and that would be nice but it may be oversimplifying the complex
Win2K ACL model and smbcacls does an OK job already - the big hole seems to
be the ability to access control via a decent file/directory browser.

Steve French
Senior Software Engineer
Linux Technology Center - IBM Austin
phone: 512-838-2294
email: sfrench at

More information about the samba-technical mailing list