[Samba] Re: Hiding some stuff

[Jim C.]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Mário Gamito wrote:

| Hi,
|
| Is there a way i could hide "netlogon", "profiles", "homes", etc., from my
| windows 2000 users ?
| Will "hide files" solves the issue, or is there another way ?
|
| Any help would be appreciated.
|
| Warm Regards,
| Mário Gamito
|
|

This is what we did to keep users from mucking up our profiles dir:

1. Hide it.
2. Make it inaccessible even when they do find it.

I got a tip from the Mandrake Expert list from Fajar Priyanto on how
this can be achieved:

First, In the profiles share set "browseable = no" as discussed earlier
in this thread.

Second we take away writeability to /var/lib/samba/profiles from the
domain like this:

chmod 755 /var/lib/samba/profiles
chown root.root /var/lib/samba/profiles

Third, we give Samba an alternate means for dynamicly createing user
profile directories by adding a script that executes just prior to the
user gaining access to the profile service.  In the profiles share add
this line:

root preexec = PROFILE=/var/lib/samba3/profiles/%u; if [ ! -e $PROFILE ]; \
~                then mkdir -pm700 $PROFILE; chown "%u"."%g" $PROFILE;fi

The quotes around %u and %g are what allow user and group names with
spaces in them to be used. The "\" at the end of the first line is legal
smb.conf syntax for a line break so this can be copied as is. :-)


- --

- -----------------------------------------------------------------
| I can be reached on the following Instant Messenger services: |
|---------------------------------------------------------------|
| MSN: j_c_llings at hotmail.com  AIM: WyteLi0n  ICQ: 123291844 	|
|---------------------------------------------------------------|
| Y!: j_c_llings               Jabber: jcllings at njs.netlab.cz	|
- -----------------------------------------------------------------
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.3-nr1 (Windows XP)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFA7Y6557L0B7uXm9oRAg/jAJ9ZQHs5/FUvefjz9gWOOxiz9ME1IACfUgFj
DNPq2aUcgSD/f3vXNYdkXAs=
=mN+S
-----END PGP SIGNATURE-----