[Date Prev][Date Next] [Chronological] [Thread] [Top]

RE: Controlling access to shares, using Samba 2.2.8a and OpenLDAP 2.0.27



It depends if you are using LDAP as a passwd/group backend for your unix system. The permissions you set on the share will be related to the unix permissions. If you are using LDAP as the unix backend then, yes just add the users into LDAP. If you are using another backend then set the permissions in that db.
 
Cheers
 
Kris

	-----Original Message----- 
	From: Jason Williams [mailto:jwilliams@courtesymortgage.com] 
	Sent: Tue 27/05/2003 17:09 
	To: openldap-software@OpenLDAP.org 
	Cc: 
	Subject: Controlling access to shares, using Samba 2.2.8a and OpenLDAP 2.0.27
	
	

	Good morning everyone!
	
	I have a question about controlling access to shares using Samba as a PDC
	with LDAP on the backend, holding all the data for users, computers etc...
	
	Basically, our PDC is going to hold all of our applications as well as data
	that our users will be using. For instance, we have a program called Point
	that is has a network installation. On the network drive, it holds all the
	information, data, templates etc. Thus, each client that uses point has the
	program setup to point to the server to find the appropriate locations. For
	example, on a NT server:
	
	c:\point\data
	c:\point\templates
	
	and so forth.
	
	My question is, if I create a specific share on my PDC, let's call it
	/home/point, obviously I will need to make sure that my users will have the
	necessary permissions to be able to access the data and read, write and
	execute (or whatever permissions I see fit that they need).
	
	BUT, im using LDAP, which throws a little into the mix. My question is, do
	I add the groups in LDAP, then add the users to that group that will be
	apart of that group? Then I need to edit the share in smb.conf and make
	sure that the group and users have the correct permissions?
	
	I understand how to set this up in Samba alone, but being that im using
	LDAP, it throws more questions into the mix.
	
	Thanks everyone.
	
	Jason