How to restrict Samba users to a particular domain

resetreset · 04-13-2012, 01:49 AM

Hi,
How do I do this? Should I just set up Samba, and then IPTables to do the restricting? Doesn't Samba use MANY ports? How do I set up IPtables then?

Thanks.

acid_kewpie · 04-13-2012, 04:15 AM

resticting user level access to an AD domain on iptables?? No way. Or do you somehow not mean the AD domain?

Nothing to do with networking. Moved to Linux - Software.

resetreset · 04-14-2012, 01:06 AM

What is an "AD" domain?

acid_kewpie · 04-16-2012, 01:54 AM

?? What do YOU mean by domain? That's probably a better thing to define...

resetreset · 04-23-2012, 08:18 AM

A domain, I was taught, is a collection of users and their passwords.....

(sorry for replying so late)

acid_kewpie · 04-23-2012, 08:47 AM

What you've described could be all sorts of things. Don't use specific words for generic purposes.

Without using the word "domain", what do you actually want to achieve?

resetreset · 04-24-2012, 11:24 AM

Oops, sorry, brain fart - by domain HERE, I meant, like, x.com (was thinking of LDAP when I posted that). I want only people in x.com to be able to connect to the Samba server.

acid_kewpie · 04-24-2012, 03:42 PM

but people aren't "in" x.com... that doesn't make sense. a company that runs a commercial website would often have various internet connections and IP ranges, not just the one that their website resolves to. you can naturally defined IP ranges in iptables rules, but you would need to identify those ranges more intelligently / manually than trying to literally use a domain name instead.