[Samba] Making a public drive where admin has write access
Chris Smith
smb23 at realcomputerguy.com
Sun Dec 2 15:23:30 GMT 2007
On Sunday 02 December 2007, Dane Shea wrote:
> [public]
> comment = Public Shared Folder
> path = /home/public
> write list = DShea
> create mask = 0775
> guest ok = Yes
It's good to distinguish between other authenticated users and guests.
Authenticated users may or may not have admin rights, but they are not
guests. Guests are users that are not authenticated at all - some stranger
walking in off the street with a laptop, plugging into your network could
access a guest share.
First set the share up as read only, then give write privileges, but also
decide if you really want guest access. Best to have an admin group that the
admin users belong to, then you can have some more flexibility. Plus you may
need to qualify the name with the domain.
Of course, even more flexible is a group that has write access that the admins
belong to as well. That way you can easily give others write access by adding
them to the write group with adding them to the admin group.
Maybe:
[public]
comment = Public Shared Folder
path = /home/public
read only = yes
write list = +"daneshea.com\admin"
create mask = 0775
guest ok = no
> NET USE J: \\192.168.1.109\public <file:///\\192.168.1.109\public>
> /USER:daneshea.com\DShea dane
Plain old:
net use j: \\<servername>\public
should work just fine. The same script for everyone.
If you're logged on as an admin (if dshea is in the admin group, and you log
on as dshea, as an example) you will have write privileges, if you're not in
the admin group you wont.
--
Chris
More information about the samba
mailing list