[Samba] access based shared enum = yes

[Fabian von Romberg]

Hi Takahashi,

thanks for your reply.

Actually I tried that under the share definition.  Please see my smb.conf:

[global]
	workgroup = MYDOMAIN
	realm = MYDOMAIN.COM
	netbios name = PDC
	server role = active directory domain controller
	server services = s3fs, rpc, nbt, wrepl, ldap, cldap, kdc, drepl, winbind, ntp_signd, kcc, dnsupdate

	log level = 2
	max log size = 0

[netlogon]
	path = /usr/local/samba/var/locks/sysvol/expomediosgye.com/scripts
	read only = No

[sysvol]
	path = /usr/local/samba/var/locks/sysvol
	read only = No

[shared2]
	path = /shared/share2
	read only = No
	access based share enum = yes
	hide unreadable = yes

With the administrator account I have set privileges to the user Administrator only.  When I login with another user Im still able to see the share, however when I want to open it I get an access denied error which is correct, the thing is that I want to hide the share when the user has no access to it.

Thanks and regards,
Fabian


On 02/16/2013 08:30 AM, TAKAHASHI Motonobu wrote:
> From: Fabian von Romberg <fromberg100 at hotmail.com>
> Date: Fri, 15 Feb 2013 22:41:52 -0500
> 
>> how can accomplish access based shared enum = yes in Samba4?
>>
>> I want to hide a share to a user who has not read access.  I read that
>> this is possible in Samba3.
> 
> As far as I examined in Samba 4.0.1, it works.
> 
> My smb.conf is:
> 
> -----
> [global]
> #  access based share enum = yes
> 
> [tmp]
>   writeable = yes
>   path = /tmp
> -----
> 
> Remember that you set "tmp" share's access rights via Windows GUI (not via
> Samba parameters such as "valid users").
> 
> --
> TAKAHASHI Motonobu <monyo at monyo.com> / @damemonyo 
>                    facebook.com/takahashi.motonobu
>