[Samba] user are able to access "/" partition.

[Mark Blake-Smith]

-----Original Message-----
From: samba-bounces+mark.blakesmith=sandicliffe.co.uk at lists.samba.org
[mailto:samba-bounces+mark.blakesmith=sandicliffe.co.uk at lists.samba.org]
On Behalf Of Dhillon, Gurjit
Sent: 14 May 2007 10:27
To: samba at lists.samba.org
Subject: [Samba] user are able to access "/" partition.

Hi All.

 

We have a samba server at our location. We are facing out with some
issue. User who have the account on the server are able to access "/"
root access.

I have tried to add an extra line In Home sharing, which is "path = %H",
this lined solved my issue, but gave other issue. After implementing
this line under Home share, I am not able to open any other user's home
directory which is shared to me or have access to open. If I try to
access other user home, it simply open my own home directory, even the
directory which I am not author... , I endup opening my own home
directory instead of getting error.

 

Can any one out some light in this issue, how can I configure My samba,
where I can access other's shared home directory and stop other user to
access "/" partition.

 

 

Below is the output of configuration file. There are 2 conf file ,
/etc/samba/smb.conf and /usr/samba/lib/smb.conf.NU-DEV0

 

Cat  /etc/samba/smb.conf

 

# Global parameters

[global]

        workgroup = TEST

        server string = Test Samba Server

        security = share

        encrypt passwords = Yes

        passwd program = /usr/bin/passwd %u

        passwd chat = *ew*password:* %n\n *e-enter*new*password:* %n\n

        max log size = 5000

        log level = 2

        name resolve order = host

        socket options = TCP_NODELAY

#       vfs objects = sgistats

        use sendfile = No

        max xmit = 65535

        strict locking = no

        printcap name = lpstat -t

        os level = 0

        oplocks = No

        kernel oplocks = No

        level2 oplocks = No

        preferred master = No

        local master = No

        domain master = No

        dns proxy = No

        comment = Samba %v

        guest account = guest

#WARNING: The "printer admin" option is deprecated

#       printer admin = lp

        printing = bsd

        print command = /usr/samba/bin/sambalp %p %s %U %m

#       dmapi support = yes

 

smb passwd file =
/usr/samba/dmf/journals/.samba/CAENFS/private/smbpasswd

private dir = /usr/samba//dmf/journals/.samba/CAENFS/private

log file = /usr/samba/dmf/journals/.samba/CAENFS/log/log.%m

#lock dir = /usr/samba/dmf/journals/.samba/CAENFS/locks

#pid directory = /dmf/journals/.samba/CAENFS/locks

#bind interfaces only = yes

netbios name = nu-dev0

#interfaces = 143.5.145.55/255.255.255.192

include=/usr/samba/lib/smb.conf.%L

 

include=/usr/samba/lib/smb.conf.%L is  opening a file called
/usr/samba/lib/smb.conf.NU-DEV0

 

cat /usr/samba/lib/smb.conf.NU-DEV0

 

[homes]

        comment = Home Directories

        read only = No

        max connections = 5

        browseable = YES

 

 

[temp]

        comment = test temp dirctory

        path = /temp

        admin users = bf6364, be9532

#        write list = be9532

#       browseable = Yes

        read only = No

 

 

 

 

Thanks

Gurjit Dhillon

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba




P Before printing, please think about the environment! 
This email and any files transmitted with it are confidential and intended solely for the use of the individual or entity to whom they are addressed. If you are not the named addressee you should not disseminate, distribute or copy this e-mail. Please notify the sender immediately by e-mail if you have received this e-mail by mistake and delete this e-mail from your system. Any views or opinions presented in this email are solely those of the author and do not necessarily represent those of Sandicliffe. Employees of Sandicliffe are expressly required not to make defamatory statements and not to infringe or authorize any infringement of copyright or any other legal right by email communications. Any such communication is contrary to company policy and outside the scope of the employment of the individual concerned. Sandicliffe will not accept any liability in respect of such communication, and the employee responsible will be personally liable for any damages or other liability arising. No employee or agent is authorized to conclude any binding agreement on behalf of Sandicliffe with another party by email without express written confirmation by a Director. Sandicliffe accepts no liability for the content of this email, or for the consequences of any actions taken on the basis of the information provided, unless that information is subsequently confirmed in writing. All quotes from Sandicliffe are valid for 30 days following the date of email transmission. Finally, the recipient should check this email and any attachments for the presence of viruses. 

Sandicliffe is a trading name of Sandicliffe Motor Holdings Ltd. registered in England and Wales. Company registration number 04609153. Registered office Nottingham Road, Stapleford, Nottingham NG9 8AU.  E-mail address info at sandicliffe.co.uk.