Mark,<br><br>You should find a section for each of your windows shares in smb.conf - there will be line [sharename] and it is in that section that you will need to add a "valid users =" line with the name of the group that can mount the share i.e "valid users = @validgroup, @validgroup2, username1, username2".<br>
<br>I don't have a 10.5 server up right here to check but that is certainly the case on my 10.4 box.<br><br>// Tony<br><br><div class="gmail_quote">On Tue, Apr 21, 2009 at 3:15 PM, Mark Szota <span dir="ltr"><<a href="mailto:mark.szota@infotech.monash.edu.au">mark.szota@infotech.monash.edu.au</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;">Hi folks<br>
<br>
I am setting up a couple of share points via Samba using Leopard Server, what I want to know is if I can add a Samba "valid users" attribute to some configuration file so that I can restrict shares to a partiuclar user? As it stands I have all my shares setup, and have the ACL's modified so that only the username I want can read & write to them. However other Samba users (who I want to access other SMB shares) can actually log in to a share, but then get a mount error because they don't have enough permissions to do anything. I have set the POSIX and ACL permissions this way to stop them from accessing or modifying anything. I have also set Service ACL's so that users I want can access the Samba service. This seems to be the best result I can get so far.<br>
<br>
What I would like is for them to not even be able to authenticate to an SMB share they should not have access to (rather than just getting a mount error), which from memory is what the "valid users" attribute will allow me to do. Do I need to do some voodoo magic with ACL's or POSIX permissions, or is there a way I can do what I want via GUI tools or at the command line? Or worse yet, have I missed something completely obvious ? :)<br>
<br>
The /etc/smb.conf file seems to be just a fairly generic template, there are no share-specific settings in it, so I assume they are stored in some other file, but I do not know where..<br>
<br>
Hope that makes sense!<br>
<br>
Cheers<br>
Mark<br>
<br>
<br>
-- <br>
Mark Szota<br>
<br>
Campus IT Co-ordinator<br>
Berwick School of IT<br>
Monash University<br>
Clyde Road, Berwick, Victoria, Australia, 3806<br>
<br>
Tel: +61 3 9904 7122<br>
email: <a href="mailto:Mark.Szota@infotech.monash.edu.au" target="_blank">Mark.Szota@infotech.monash.edu.au</a><br>
<br>
<br>
_______________________________________________<br>
unimactech mailing list<br>
<a href="mailto:unimactech@auc.edu.au" target="_blank">unimactech@auc.edu.au</a><br>
<a href="http://www.auc.edu.au/mailman/listinfo/unimactech" target="_blank">http://www.auc.edu.au/mailman/listinfo/unimactech</a><br>
</blockquote></div><br><br clear="all"><br>-- <br>(\___/)<br>(='.'=)<br>(")_(")<br><br>This is Bunny. Help Bunny by Copying and pasting Bunny into your web page or email sig to help him gain world domination.<br>