[ Date Index ] [ Thread Index ] [ <= Previous by date / thread ] [ Next by date / thread => ]
On 23/09/11 19:53, Gordon Henderson wrote:
OK. LDAP server.. http://www.howtoforge.com/linux_ldap_authentication appears to make it relatively easy to use LDAP under Linux, but what about samba.. http://wiki.samba.org/index.php/Samba_&_LDAP OK, it's a possibility... The crucial thing is that it honours unix group permissions though...
When you specify the shares in the smb.conf you can specify the create mask, directory mask and force groups.
This is what I've done myself, which means when either my wife or I copy pictures and stuff on to the server we have RW permissions (and RWX on directories) as we're both in the group the files are owned by, and the kids only get read access so they don't accidentally delete anything.
I use the options:
valid users = @some_group
force group = somegroup
create mask = 0664
directory mask = 0775
on each share entry.
I'm also re-reading all the samba stuff again. An added complication would appear to be that not all the servers are on the same LAN.
Multiple network cards in the servers? :-)
Ah well. Looks like some light reading this weekend!
:-)
Essentially what's happened is that a little R&D co. I support need to take on more staff and contractors - and 99% of these will be using their own laptops in office &| working from home so the nice tidy little Linux setup has been somewhat disrupted!
Ahh yeah I had something similar when I was supporting the small local radio stations, they just let presenters bring their laptops in, no checking on if any of the stuff was legal or had up to date anti-virus/security updates.
I guess you can always specify a more strict policy for them connecting their machines. :-)
Rob -- The Mailing List for the Devon & Cornwall LUG http://mailman.dclug.org.uk/listinfo/list FAQ: http://www.dcglug.org.uk/listfaq