configurar permissões no samba
Meu caros companheiros, estou com uma dificuldade tremenda em fazer com que as pessoas que tenha acesso a sua pasta devida + ou - assim
foi criado na raiz o diretórios chamado server
/server
dentro desta pasta foi criado uma pasta arquivos
/server/arquivos
e dentro desta pasta temos três pastas criadas de nome downloads, tutoriais,rpms
/server/arquivos/downloads
/server/arquivos/tutoriais
/server/arquivos/rpms
tudo certo até aqui
o que neste primeiro momento eu peço e estou com dificuldade
o usuario tem que acessar sem senha os seguintes diretórios
/server
/server/arquivos
daqui por diante vamos pedir a senha em cada pasta
/server/arquivos/downloads(pede senha e login)
/server/arquivos/tutoriais(pede senha e login)
/server/arquivos/rpms(pede senha e login)
pois bem, tive uma ajuda de um companheiro e ele pediu para criar-se em grupos, conforme ele falou eu fui fazendo.
criei os usuario no linux e criei os grupos e coloquei cada um em seu grupo criei tb o usuario samba.
mais quando eu testo ele não me pede a senha, por esclarecimentos postei o meu script para os profissionais competentes podesse me ajudar se esta correto o que tenho que fazer..+ou- isto..
Abaixo vc verá o meu script e se esta correto o que estou fazendo.
# This is the main Samba configuration file. You should read the
# smb.conf(5) manual page in order to understand the options listed
# here. Samba has a huge number of configurable options (perhaps too
# many!) most of which are not shown in this example
#
# Any line which starts with a ; (semi-colon) or a # (hash)
# is a comment and is ignored. In this example we will use a #
# for commentry and a ; for parts of the config file that you
# may wish to enable
#
# NOTE: Whenever you modify this file you should run the command "testparm"
# to check that you have not made any basic syntactic errors.
#
#======================= Global Settings =====================================
[global]
# workgroup = NT-Domain-Name or Workgroup-Name
workgroup = DATACONTROLWEB
netbios name = DATACONTROL
server string = Samba Server
; nt acl support = yes
; force directory mode = 0777
hosts allow = 192.168.0. 192.168.2. 127.
; keep alive = 20
; printcap name = /etc/printcap
load printers = yes
; printing = cups
; cups options = raw
; guest account = pcguest
Log file = /var/log/samba/%m.log
max log size = 50
; debug level = 1
security = user
; password server = <NT-Server-Name>
; password level = 8
; username level = 8
encrypt passwords = yes
update encrypted = yes
smb passwd file = /etc/samba/smbpasswd
; username map = /etc/samba/smbusers
; unix password sync = Yes
; passwd program = /usr/bin/passwd %u
; passwd chat = *New*UNIX*password* %n\n *ReType*new*UNIX*password* %n\n *passwd:*all*authentication*tokens*updated*success fully*
; username map = /etc/samba/smbusers
; include = /etc/samba/smb.conf.%m
socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
; interfaces = 192.168.12.2/24 192.168.13.2/24
; remote browse sync = 192.168.3.25 192.168.5.255
; remote announce = 192.168.1.255 192.168.2.44
local master = yes
os level = 32
domain master = yes
; security mask = 0777
; force create mode = 0777
; force security mode = 0777
; preferred master = yes
domain logons = yes
; logon script = %m.bat
; writeable = yes
; logon script = %U.bat
logon path = \\%L\Profiles\%U
; admin users = root,alexandro
; name resolve order = wins lmhosts bcast
; wins support = yes
; wins server = w.x.y.z
; wins proxy = no
dns proxy = no
; force directory security mask = 0777
; directory security mask = 0777
; time server = true
; announce as = NT Server
preferred master = yes
; directory mask = 0777
; obey pam restrictions = yes
; pam password change = yes
; preserve case = no
; short preserve case = no
; default case = lower
; case sensitive = no
#============================ Share Definitions ==============================
idmap uid = 16777216-33554431
idmap gid = 16777216-33554431
template shell = /bin/false
winbind use default domain = no
;[homes]
; comment = Home Directories
; read only = no
; browseable = no
; available = yes
; public = no
; writable = yes
; only user = no
; create mask = 0777
; directory mask = 0777
[netlogon]
comment = Network Logon Service
path = /home/netlogon
; browseable = yes
; guest ok = yes
writable = no
; printable = no
; public = yes
share modes = no
; write list = root
# Un-comment the following to provide a specific roving profile share
# the default is to use the user's home directory
;[Profiles]
; path = /home/profiles
; browseable = no
; guest ok = yes
# NOTE: If you have a BSD-style print system there is no need to
# specifically define each individual printer
[printers]
comment = All Printers
path = /var/spool/samba
browseable = no
# Set public = yes to allow user 'guest account' to print
guest ok = no
writable = no
printable = yes
# This one is useful for people to share files
;[tmp]
; comment = Temporary file space
; path = /tmp
; read only = no
; public = yes
# A publicly accessible directory, but read only, except for people in
# the "staff" group
;[public]
; comment = Public Stuff
; path = /home/samba/publico
; browseable = yes
; writable = yes
; guest ok = yes
; public = yes
; read only = yes
; create mode = 0777
; create mask = 0777
; write list = @staff
# Other examples.
#
# A private printer, usable only by fred. Spool data will be placed in fred's
# home directory. Note that fred must have write access to the spool directory,
# wherever it is.
;[fredsprn]
; comment = Fred's Printer
; valid users = fred
; path = /homes/fred
; printer = freds_printer
; public = no
; writable = no
; printable = yes
# A private directory, usable only by fred. Note that fred requires write
# access to the directory.
;[fredsdir]
; comment = Fred's Service
; path = /usr/somewhere/private
; valid users = fred
; public = no
; writable = yes
; printable = no
# a service which has a different directory for each machine that connects
# this allows you to tailor configurations to incoming machines. You could
# also use the %u option to tailor it by user name.
# The %m gets replaced with the machine name that is connecting.
;[pchome]
; comment = PC Directories
; path = /usr/pc/%m
; public = no
; writable = yes
# A publicly accessible directory, read/write to all users. Note that all files
# created in the directory by users will be owned by the default user, so
# any user with access can delete any other user's files. Obviously this
# directory must be writable by the default user. Another user could of course
# be specified, in which case all files would be owned by that user instead.
;[public]
; path = /usr/somewhere/else/public
; public = yes
; only guest = yes
; writable = yes
; printable = no
# The following two entries demonstrate how to share a directory so that two
# users can place files there that will be owned by the specific users. In this
# setup, the directory should be writable by both users and should have the
# sticky bit set on it to prevent abuse. Obviously this could be extended to
# as many users as required.
;[myshare]
; comment = Mary's and Fred's stuff
; path = /usr/somewhere/shared
; valid users = mary fred
; public = no
; writable = yes
; printable = no
; create mask = 0765
;[server]
; comment = Compartilhamentos
; path = /server
; read only = no
; valid users = alexandro
; write list = alexandro
; admin user = root,alexandro
; directory mode = 0777
; guest ok = no
available = yes
; only user = yes
; browseable = yes
; public = yes
; writable = yes
; printable = no
; create mode = 0777
; create mask = 0777
[arquivos]
comment = Arquivos
path = /server/arquivos
read only = no
directory mode = 0777
browseable = yes
public = yes
create mode = 0777
create mask = 0777
[downloads]
comment = Downloads
path = /server/arquivos/downloads
read only = yes
valid users = @down
browseable = yes
public = no
force create mode = 0770
force directory mode = 0770
[rpms]
comment = rpms
path = /server/arquivos/rpms
read only = yes
valid users = @rpms,@root
browseable = yes
public = no
force create mode = 0770
force directory mode = 0770
[tutoriais]
comment = Tutoriais
path = /server/arquivos/tutoriais
read only = yes
valid users = @tutor
browseable = yes
public = no
force create mode = 0770
force directory mode = 0770
Espero poder contar com alguém....
Grato
