[Samba] Worksatation Logon restriction

Kurt Weiss input.maillists at kwnet.at
Wed Feb 19 11:59:21 GMT 2003



Marco A R Henriques schrieb:
> Hi Kurt,
> 
> Thanks for your reply. My users should be logon on my network (samba
> domain), but some them only logon through some specific workstation. Is it

so u can realize this:

e.g.
network 192.168.10.
user a,b,c have access from all places
user c,d only from ip adresses .10 and .11

use this in your smb.conf [global] section:
===========================================
netbios name = intern
netbios alias = extern

# than take an include:

include = /usr/local/samba/lib/smb.conf.%L

#<rest of the file>
===========================================

use this in your smb.conf.intern file: (access only for a,b,c)
===========================================
hosts allow = 192.168.10. EXCEPT 192.168.10.10 EXCEPT 192.168.10.11
invalid users = c,d
===========================================

use this in your smb.conf.extern file: (login for all users)
===========================================
hosts allow = 192.168.10.10 192.168.10.11
===========================================

now u can access over server "extern" with all users from .10 and .11
and u can access to "intern" with all workstations, but not users c,d

!!*attention*!!
if u use invalid users in a share section, so u overwrite the default.

i hope, it helped,

gk



More information about the samba mailing list