ARCHIV

Zdravim, nainstaloval jsem si linux suse 10.2 a použivam ho jako server. Ke správě používám webmin nejnovější verzi a v sambě se snažim nastavit prava jednotlivim uzivatelum, ale ve vsech sdilenych adresarich chci nastavit pristup jen pro urcite uzivatele coz se mi nejak nedari. Nemohu se zbavit "read only for all known users" i kdyz zakazu pristup uplne vsem uzivatelum a v nastaveni "guest access" mam nastaveno "nic". nesetkal se s tim nekdo?

sambě se snažim nastavit prava jednotlivim uzivatelum, ale ve vsech sdilenych adresarich chci nastavit pristup jen pro urcite uzivatele coz se mi nejak nedari.

Neni nutne nastavovat to v sambe, mozna vam bude stacit seznamit se s nastavenim prav na patricnych adresarich a pripadne take s ACL.

tady je konfigurak vytazenej ze samby...poradte kde je chyba...


# Samba config file created using SWAT
# from 0.0.0.0 (0.0.0.0)
# Date: 2007/05/28 14:59:19

[global]
dos charset = 1250
workgroup = xxx
netbios name = xxx
server string = server
map to guest = Bad User
printcap name = cups
logon path = \\%L\profiles\.msprofile
logon drive = P:
logon home = \\%L\%U\.9xprofile
wins server = eth0:192.168.2.250
ldap ssl = no
usershare allow guests = no
create mask = 0770
force create mode = 0770
directory mask = 0770
force directory mode = 0770
cups options = raw
include = /etc/samba/dhcp.conf

[homes]
comment = Home Directories
valid users = %S, %D%w%S
read only = No
inherit acls = Yes
browseable = No
available = No

[profiles]
comment = Network Profiles Service
path = %H
read only = No
create mask = 0600
directory mask = 0700
store dos attributes = Yes
browseable = No
available = No

[users]
comment = All users
path = /home
read only = No
inherit acls = Yes
veto files = /aquota.user/groups/shares/
browseable = No
available = No

[groups]
comment = All groups
path = /home/groups
read only = No
inherit acls = Yes
browseable = No
available = No

[printers]
comment = All Printers
path = /var/tmp
create mask = 0600
printable = Yes
browseable = No

[print$]
comment = Printer Drivers
path = /var/lib/samba/drivers
write list = @ntadmin, root
force group = ntadmin
create mask = 0664
directory mask = 0775


[vedeni]
delete readonly = yes
user = @vedeni
path = /data/vedeni
write list = @vedeni
only user = yes
force group = vedeni


[domov]
path = /data/domov
read only = No

[domacnosti]
delete readonly = yes
path = /data/domacnosti
write list = @domacnosti
force group = domacnosti
browsable = yes


[xxx]
force user = xxx
delete readonly = yes
user = @administrace
path = /data/xxx
only user = yes
write list = xxx,@administrace

[yyy]
path = /data/yyy
write list = yyy,@administrace

[rrr]
path = /data/rrr
write list = rrr,@administrace

[administrace]
delete readonly = yes
user = @administrace
path = /data/administrace
only user = yes
write list = @administrace
force group = administrace

[hlavni_budova]
delete readonly = yes
user = @hlavni_budova
only user = yes
write list = @hlavni_budova
path = /data/hlavni_budova






[bbb]
path = /data/bbb

[hhh]
delete readonly = yes
path = /data/hhh
force user = hhh

[ttt]
path = /data/ttt

[mmm]
path = /data/mmm

[lll]
path = /data/lll

[ddd]
path = /data/ddd

[ppp]
path = /data/ppp

[databaze]
delete readonly = yes
writeable = yes
user = administrace,@hlavni_budova
path = /databaze
write list = administrace,@hlavni_budova

[vvv]
force user = vvv
path = /data/vvv
write list = vvv,@administrace
-------------------------------------------------------
tak napriklad slozka/data/administrace by spravne mela byt pristupna jen uzivatelum uvedenym ve skupine administrace, ale samba mi ukazuje:read/write to @administrace, read only for other known users...a toho se nemuzu zbavit...nechci aby do teto slozky meli pristup hosti vubec, ale nikde se to v sambe neda vypnout, muzete mi nekdo poradit?

pravne mela byt pristupna jen uzivatelum uvedenym ve skupine administrace, ale samba mi ukazuje:read/write to @administrace, read only for other known users...a toho se nemuzu zbavit...nechci aby do teto slozky meli pristup hosti vubec, ale nikde se to v sambe neda vypnout, muzete mi nekdo poradit?

A proc si to nechcete osetrit pravy na patricnem adresari?

path = /data/administrace

FYI: tohle odporuje FHS (Filesystem Hierarchy Standard).

Zkousel jsem to tak...vytvoril jsem adresar xxx, nastavil jsem vlastnika YYY a skupinu administrace...pak jsem nastavil pristupova prava 0770, tedy RWX pro YYY A RWX pro administrace, problem byl v tom, ze se do adresare XXX dostali i jiní uzivatele, kterym samba z nejakeho duvodu a nejakym me nepochopitelnym zpusobem pridelila pravo cist, coz nelze. Takze jsem zkusil nastavit adresari XXX prava 0777, tedy vsichni vsechno a ted se snazim prinutit sambu aby ten pristup pro hosty zakazala, ale nenasel sem zatim zpusob jak...

problem byl v tom, ze se do adresare XXX dostali i jiní uzivatele, kterym samba z nejakeho duvodu a nejakym me nepochopitelnym zpusobem pridelila pravo cist, coz nelze

?
To nedava smysl, jste si jisty, ze neslo o kontext, kde byl vlastni yyy nebo uzivatele patrici do skupiny administrace?