LinuxQuestions.org
Share your knowledge at the LQ Wiki.
Home Forums Tutorials Articles Register
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Security
User Name
Password
Linux - Security This forum is for all security related questions.
Questions, tips, system compromises, firewalls, etc. are all included here.

Notices


Reply
  Search this Thread
Old 03-13-2009, 10:31 AM   #1
perfectpol7
Member
 
Registered: Feb 2009
Posts: 84

Rep: Reputation: 15
Samba folder access permission


I have a fedora 10 file server and need to assign folder permission. Samba setting security Authentication mode : share, guest account : no guest account.

I have four folders which are shared and out of these four folders i want users A and B to have full control of all four folder and only one to be accessed by everyone on the network and the other three must not be access by other network users. My LAN have a windows small business server 2003 DNS. I have select users A and B on samba share and on the other folder to be accessed by everyone l have enable allow access to eveyone but still to no avail. Any idea have to achieve this.
 
Old 03-14-2009, 03:52 AM   #2
jschiwal
LQ Guru
 
Registered: Aug 2001
Location: Fargo, ND
Distribution: SuSE AMD64
Posts: 15,733

Rep: Reputation: 682Reputation: 682Reputation: 682Reputation: 682Reputation: 682Reputation: 682
How many users do you have on your network. If it only a handful, and you don't use AD for authentication, I'd recommend using the "Security = User" model. Then a user authenticates once when building a session.

In the Global part of smb.conf, use "Map to Bad User = Guest". A non-authenticated user will be a guest user. This is the equivalent to the "nobody" user on the samba server. For a globally writable share, use the same permissions as the /tmp directory. E.G. use "sudo chmod a=rwxt <directory>" to make it world writable and set the sticky bit. That way one authenticated user can delete a file owned by another authenticated user. For "security = user" model, by default, the smbpasswd file is used. Create a Linux user for each windows user and add the user using the "smbpasswd" command as well. If the samba server is configured to be a domain controller, ala windows NT, you can use your windows GUI tools to add users when logged in as a network administrator. ( I don't know what having a Windows SBS entails. ) For joining a domain, you can't use XP home edition.

The samba server includes the html based version of the book "Using Samba". If you also install the samba-doc package, you will get the ps or pdf version of three books including "Samba 3 by Example" and "The Official Samba 3 HOWTO and Reference Guide". These are the same official Samba books you will find in a book store. The Samba 3 by Example book has a number of sample network configurations with step-by-step setup instructions. The "Using Samba" book is the 2nd edition O'Reilly book. The version in book stores is the 3rd edition and includes more information on using samba with Active Directory.

I'd recommend using a Profile service for each user. This will give them a private share. When they open up a profile service, they will be in their own private directory. The directories of the other users will not be visible.

Since this is a file server, I'd recommend planning from the start on using quotas and auditing. This may entail using the correct filesystem extensions when formatting the filesystem. However these options are usually enabled by default by the installer.
 
  


Reply



Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
CLI How to change folder access permission for particular user sfkong Linux - Newbie 10 07-20-2008 12:34 PM
Ubuntu - Samba folder permission safapombo Linux - Server 5 04-30-2007 02:48 AM
Problem in samba(Folder Permission) RajendraKumar Linux - Software 1 07-30-2006 10:11 AM
Folder Access Problems: Permission Denied piva.francesco Linux - Software 3 03-28-2006 12:11 AM
File, Folder permission and SAMBA Steve1445 Linux - Newbie 2 01-15-2004 02:13 PM

LinuxQuestions.org > Forums > Linux Forums > Linux - Security

All times are GMT -5. The time now is 06:11 PM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration