LinuxQuestions.org
Latest LQ Deal: Latest LQ Deals
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Software
User Name
Password
Linux - Software This forum is for Software issues.
Having a problem installing a new program? Want to know which application is best for the job? Post your question in this forum.

Notices


Reply
  Search this Thread
Old 01-14-2009, 08:23 AM   #1
Donboy
Member
 
Registered: Aug 2003
Location: Little Rock, Arkansas
Distribution: RH, Fedora, Suse, AIX
Posts: 736

Rep: Reputation: 31
Question Samba suggestions on group permissions


I have a user community of about 2000 users and a samba server running on AIX that currently hosts a read-only share for the whole company.

[Released]
path = /mypath
guest ok = Yes

But now I have been requested to make this share available as read-only for some users and completely inaccessible to everyone else. The number of users who will have access is probably a few hundred and I expect users to be added/removed on a daily basis. Some of the users have unix logins, while others do not.

Because of this, I hesitate to mess with user mapping because I would have to manage this every day, unless I do something with a script.

Can someone suggest a scheme I can use to deny everyone except for certain users without having to use user mapping?

Someone here in my office suggested we use hosts allow or deny, since the users who will still have access are located on the same subnet. However, there is a distinct possibility that a small number of people on a few other subnets will need access. Is there a way I can specify hosts allow but still allow specific users from other subnets?

Forgive me if this question has been asked before. I'm sure it must have been, but I am having trouble doing a search of the archives that will give me advice about this particular problem.

Thanks in advance.
 
Old 01-14-2009, 11:23 AM   #2
arckane
Member
 
Registered: Sep 2005
Location: UK
Distribution: Gentoo/Debian/Ubuntu
Posts: 308

Rep: Reputation: 39
If the users will be sitting at the same PCs and DHCP is setting static IP addresses then you could effectively use permissions based on IP and subnet.

Unfortunately you are being pushed in to a managed situation and managed is what you'll have to do. Only other option is to lock her up tight and have a Full user/pass, Read-Only user/pass and just give those to individuals that require the access. We all know users are about as secure as a hooker on a street corner, so if possible I'd opt for choice #1.
 
Old 01-14-2009, 11:35 AM   #3
Donboy
Member
 
Registered: Aug 2003
Location: Little Rock, Arkansas
Distribution: RH, Fedora, Suse, AIX
Posts: 736

Original Poster
Rep: Reputation: 31
Ok, so I think what you're saying is, I should use hosts allow for the subnets where large groups of users are sitting, and use individual IPs for users who are on different subnets. I think we're pretty much static IPs, and if so, I guess that would work.

But you're saying without doing it this way, the only other solution is to use usernames and passwords for everyone?
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
permissions not recognizing group or assigned users to group blckspder Linux - Server 1 07-28-2008 10:32 AM
Samba Mystery: Users with Group permissions get denied based on Other. Emiro Linux - General 8 07-07-2008 10:25 AM
Samba domain member server (DMS) group permissions in network with a Samba PDC srosa Linux - Networking 0 05-01-2006 05:55 PM
Samba User / Group Access Permissions Different Between Linux and Win jeyroz Linux - Software 8 01-29-2006 11:26 AM
Permissions/group access when using Samba Nylix Mandriva 8 05-05-2004 03:39 PM

LinuxQuestions.org > Forums > Linux Forums > Linux - Software

All times are GMT -5. The time now is 03:58 PM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration