[Samba] Restrict access to users home drives

[Daniel Müller]

Should be sufficient:
[home]
Path=/directory/path/to/home
Read only no

Nothing else.
Just start the ads management tool from within a windows client and set the
path like: \\your.domain.server\home\%username%
This will create the home directory for that user in your home path
described in your smb.conf


-----------------------------------------------
EDV Daniel Müller

Leitung EDV
Tropenklinik Paul-Lechler-Krankenhaus
Paul-Lechler-Str. 24
72076 Tübingen

Tel.: 07071/206-463, Fax: 07071/206-499
eMail: mueller at tropenklinik.de
Internet: www.tropenklinik.de
-----------------------------------------------
-----Ursprüngliche Nachricht-----
Von: samba-bounces at lists.samba.org [mailto:samba-bounces at lists.samba.org] Im
Auftrag von spamvoll at googlemail.com
Gesendet: Samstag, 26. Oktober 2013 20:49
Cc: samba at lists.samba.org
Betreff: Re: [Samba] Restrict access to users home drives

Hi..

Im using XFS, so no user_xattr should be needed

> directory_mode: parameter = 0700
What is this for a parameter? I don't find "directory_mode" in the (4.0.9)
smb.conf manpage.

Correct its also not in 4.1. So it should not have any effect. Dont know
where it came from tested so much


2013/10/26 Marc Muehlfeld <samba at marc-muehlfeld.de>

> Hello Hans,
>
> Am 26.10.2013 17:14, schrieb spamvoll at googlemail.com:
>
>  I have exactly the same problem.
>> Just installed 4.1.0, roaming profiles are working, only the user has 
>> access to it, but Users Home Shares are visible and writeable for all.
>>
>> [Users]
>>          comment = Home Directories
>>          directory_mode: parameter = 0700
>>          path = /home/HOME/
>>          read only = No
>>          csc policy = documents
>>
>> [Profiles]
>>       path = /home/Profiles/
>>       read only = no
>>
>
>
> Did you checked the HowTo?
> http://wiki.samba.org/index.**php/Setup_and_configure_file_**shares<ht
> tp://wiki.samba.org/index.php/Setup_and_configure_file_shares>
>
>
> Have you enabled user_xattr on the filesystem where your homes are? 
> And have you set the permissions on the share and it's folders on Windows?
>
>
>
> > directory_mode: parameter = 0700
>
> What is this for a parameter? I don't find "directory_mode" in the 
> (4.0.9) smb.conf manpage.
>
>
>
>
> Regards,
> Marc
> --
> To unsubscribe from this list go to the following URL and read the
> instructions:  
> https://lists.samba.org/**mailman/options/samba<https://lists.samba.or
> g/mailman/options/samba>
>
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba