[Samba] 3 simple questions

[MJBarber at Hearst.com]

For the user profile....

If he were to use a different path say /etc/samba/%U ... Then the user
would no longer have root access to the machine right?

Does the config below allow root access because it is an include and could
possibly execute code, this along with the fact the user can look at and
(maybe) even edit the include file?

Many thanks,
MJ Barber
 

-----Original Message-----
From: samba-bounces+mjbarber=hearst.com at lists.samba.org
[mailto:samba-bounces+mjbarber=hearst.com at lists.samba.org] On Behalf Of
Gerald (Jerry) Carter
Sent: Monday, February 20, 2006 9:52 AM
To: petermatulis at yahoo.ca
Cc: samba at lists.samba.org
Subject: Re: [Samba] 3 simple questions

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Peter wrote:
> Hi.  I am running 3.0.20.
> 
> 1. I would like to have an include statement pointing to user 
> configurations.  For a user, say 'mike', the following works:
> 
>    include = /home/mike/smb.conf
> 
> But this does not:
> 
>    include = /home/%u/smb.conf

This is a really bad idea btw.  You are allowing your users to easily gain
root access to teh server.  But if you really want don't mind this, try:

	include = /home/%U/smb.conf

> 2. I have disabled printing using:
> 
>    disable spoolss = yes
> 
> My logs are filling up with messages (every 30 minutes):
> 
> printing/print_cups.c:cups_cache_reload(85)
>   Unable to connect to CUPS server localhost - Connection refused

[global]
	printing = bsd
	printcap name = /dev/null

> 3. Is there any way to have a truly anonymous connection?  

- ------- smb.conf ---------------------- [global]
	security = user
	map to guest = bad user
	username map = /etc/samba/smbusers
	guest ok = yes
	guest account = nobody

- ------- smbusers file ---
	!foo = *





cheers, jerry
=====================================================================
I live in a Reply-to-All world                -----------------------
Samba                                    ------- http://www.samba.org
Centeris                         -----------  http://www.centeris.com
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.2 (MingW32)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFD+dehIR7qMdg1EfYRAtLUAKCxry6gojrjKu3jOy7V9+RJMp7QagCgmJS7
RVP74EV+b313nvwpQEAYHiU=
=XLZh
-----END PGP SIGNATURE-----
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba



============================================================
This e-mail message is intended for the personal use of the recipient(s) named above. If you are not an intended recipient, you may not review, copy or distribute this message.

If you have received this communication in error, please notify the Hearst Information Services HelpDesk (helpdesk at hearst.com) immediately by e-mail and delete the original message.

============================================================