[Samba] Samba 4.1 + User Homes

[spamvoll at googlemail.com]

Hi..

Profiles which are working have the following pems:
drwxrwx---+ 14 3000022 users 4096 Okt 26 17:37 bspears.V2
drwxrwx---+ 14 3000019 users 4096 Okt 26 17:34 testuser.V2

Homes have:
drwxrws---+  4 3000000 users   36 Okt 26 17:38 bspears
drwxrws---+  2 3000000 users   35 Okt 26 17:34 testuser


2013/10/26 <spamvoll at googlemail.com>

> Does not change anthing,
>
> drwxrws---+  4 3000000 users   36 Okt 26 17:38 bspears
> drwxrws---+  2 3000000 users   35 Okt 26 17:34 testuser
>
> all users have access to both homedirs
>
>
> 2013/10/26 steve <steve at steve-ss.com>
>
>> On Sat, 2013-10-26 at 16:33 +0200, spamvoll at googlemail.com wrote:
>> > Hi all,
>> >
>> > Ive setup Samba 4.1 and have setup Roaming Profiles and User Homes.
>> >
>> > [Profiles]
>> >      path = /home/Profiles/
>> >      read only = no
>> >
>> > [Users]
>> >         comment = Home Directories
>> >         directory_mode: parameter = 0700
>> >         path = /home/HOME
>> >         read only = No
>> >         csc policy = documents
>> >
>> > Both are working and are created automaticly, BUT everyone  has full
>> access
>> > to all HOMEDIRS.
>> >
>> > Users is completely browsabe and User have full rights.
>> >
>> > Can someone please tell me how I can restrict access only to the owner ?
>> > With Profiles that is working.
>> >
>> > Regards
>> > Hans
>>
>> There are loadsa ways of doing it, but this works quite well:
>>
>> path = /your/share.user.only
>> read only = No
>> #store dos attributes = Yes
>> create mask = 0600
>> directory mask = 0700
>> browseable = No
>> guest ok = No
>> printable = No
>> #profile acls = Yes
>> csc policy = disable
>>
>> Uncomment store dos attributes and profile acls for profiles.
>> HTH
>> Steve
>>
>>
>>
>>
>> --
>> To unsubscribe from this list go to the following URL and read the
>> instructions:  https://lists.samba.org/mailman/options/samba
>>
>
>