[Bug 1064] samba configuration needs to be corrected for domain logons
http://bugs.skolelinux.org/show_bug.cgi?id=1064
Ralf <rgx@gmx.de> changed:
What |Removed |Added
----------------------------------------------------------------------------
CC| |rgx@gmx.de
--- Comment #21 from Ralf <rgx@gmx.de> 2009-10-30 21:54:35 ---
Hi Jürgen, hey Ronny, hello all & thanks for having found a feasible and
sensible solution - just renaming profile to .profile, and providing further
sample settings.
I agree very much on your latest comments, but would like to add some comments
(and possible also provide further samples):
Until yesterday, our shares were located in /skole/tjener/home0/Transfer, thus
avoiding the need for another data partition. Capitalisation made it easier to
spot out the transfer directory within hundreds of users (there is also
Programme for portable apps etc.). Another solution might have been to use
leading dots for those folders. There is no further NFS exports needed and no
extra LV.
Much of the intelligence of samba clients is IMO located in login.bat. Here it
can be decided which shares are used - depending on user names (teachers a
special "name space" or host names). Recently our policy was changed, so that
directories with sensitive data are actually located on the root filesystem of
tjener and get its own (non-browsable) share that will only be mounted if
%computername% is not a computer in one of our labs. Very special case
(security by obscurity) - but maybe this sample of netlogin.bat can be a
candidate for your sample stuff. There is also some samples for logging logins
etc.
I also met samples where login.bat or even smb.log was intersected into modules
that would load depending on the name of your machine or rights for specific
files (indicating your group membership).
But, then, we cannot provide the entire variety of samba tweaks, and should
stick to few samples of actual settings being used by Skolelinux schools...
--
Configure bugmail: http://bugs.skolelinux.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.
You are watching all bug changes.
Reply to: