[Samba] [SOLVED] profile question

éric le hénaff eric.le.henaff.nospam at ens.fr
Fri Jul 21 12:36:43 GMT 2006

i solved my problem.
i wanted a manager to be able to modify files in the users' profiles 
from his windows workstation.
The solution i found is with adding this lige to the profiles share 
bloc in smb.conf :
root postexec = setfacl -R -m g:"Domain Admins":rwx /share/profiles/%U

-------- Message original --------
Sujet: profile question
Date: Tue, 18 Jul 2006 18:52:07 +0200
De: éric le hénaff <eric.le.henaff at ens.fr>
Forums de discussion: gmane.network.samba.general

i have a profile question
here under is my profile definition. it's nothing more than the one from
the idealx samba howto.
profiles just work fine on my box BUT i want more ...
i want a manager to have read/write acces on every users' profile
subdirectory for troubleshooting from his windows workstation with
invoking \\server\profiles. he's in the domain admins.
How to do that
Thank you for any help, i tried different scenarios (samba tweaking,
acls inheritance and so on) for an afternoon and didnt find one working.

path = /home/profiles
read only = no
create mask = 0600
directory mask = 0700
browseable = No
guest ok = Yes
profile acls = yes
csc policy = disable
# next line is a great way to secure the profiles
force user = %U
# next line allows administrator to access all profiles
valid users = %U @"Domain Admins"

École normale supérieure - Centre de ressources informatiques
Informaticien, Ingénieur développements et systèmes auprès des 
bibliothèques de l'ENS

Préférez firefox! http://www.mozilla-europe.org/fr/

SVP, évitez de m'envoyer des attachements au format Word, Excel ou 
Préférez les formats rtf, csv, html ou pdf au lieu des formats word et 
Voir http://www.gnu.org/philosophy/no-word-attachments.fr.html pour plus

To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

More information about the samba mailing list