RE: Samba Global

[Ow Mun Heng]

> -----Original Message-----
> From: Chris Botha [mailto:[e-mail]]
> Sent: Thursday, March 04, 2004 4:17 PM
> To: [e-mail]
> Subject: Re:Samba Global
>
> Ok this is my smb global file:
>
> [global]
>         workgroup = CCE
>         server string = Quest_Server
>         passwd program = /usr/bin/passwd %u
>         passwd chat = *New*UNIX*password* %n\n 
> *ReType*new*UNIX*password*
> %n\n *passwd:*all*authentication*tokens*updated*successfully*
>         unix password sync = Yes
>         log file = /var/log/samba/%m.log
>         max log size = 50
>         socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
>         dns proxy = No
>         hosts allow = 192.168.2., 192.168.3., 127.
>
> [homes]
>         comment = Home Directories
>         read only = No
>         browseable = No

on the homes section...

comment = %U's Home Directory
   browseable = no
   writable = yes
   valid users = %S  <-------
   create mode = 0665
   directory mode = 0775

I prefer to have the %S there to expand on the users. If not mistaken
this setting will enable the valid user to only see his own home directory.
and not the other users.

I may be wrong..
> Is this OK, any sugestions to improve security and user accecability.
>
> Regards
>
> Chris
>
> -- 
> fedora-list mailing list
> [e-mail]
> To unsubscribe: http://www.redhat.com/mailman/listinfo/fedora-list