From: Christian Perrier on
Quoting Weiser, Johann (johann.weiser(a)siemens.com):
> There is this really fancy sentence in the smb.conf man page: "It is
> possible to use smbd in a hybrid mode where it is offers both user and
> share level security under different NetBIOS aliases."
>
> There are a number of question here in this mailing list around this
> sentence and the answers are usually to use "map to guest" parameter.
> However this parameter does not work e.g. with "SECURITY = server".
>
> Therefore I would be really interested in a solution as described with
> this sentence above with different NetBIOS aliases. Does such a solution
> really exist, or should this sentence be removed from the man page?

This can be done roughly the following way:



smb.conf:

[global]
netbios aliases = foo bar
include = /etc/samba/%L.conf


/etc/samba/foo.conf:
security=share
..../...

/etc/samba/bar.conf
security=user
..../...



The server will appear twice in the network neighbourhood. When
clients connect to "foo", the server will be in share mode. When
clients connect to "bar", the server will be in user mode.

To my experience (but that was long ago), there may be some drawbacks
as there is still one samba server running and sharing its data files
between the two "personalities".

--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/listinfo/samba
From: Gerald (Jerry) Carter on
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Weiser, Johann wrote:
> There is this really fancy sentence in the smb.conf man page: "It is
> possible to use smbd in a hybrid mode where it is offers both user and
> share level security under different NetBIOS aliases."
>
> There are a number of question here in this mailing list around this
> sentence and the answers are usually to use "map to guest" parameter.
> However this parameter does not work e.g. with "SECURITY = server".
>
> Therefore I would be really interested in a solution as described with
> this sentence above with different NetBIOS aliases. Does such a solution
> really exist, or should this sentence be removed from the man page?

Configuring Samba virtual servers using netbios aliases or
interface IP specific configurations has been around for
a really long time. I'd be really surprised if map to guest
doesn't work with security = server but then again, I think
security = server is a really horrid idea anyways.....






cheers, jerry
- --
=====================================================================
Samba ------- http://www.samba.org
Likewise Software --------- http://www.likewisesoftware.com
"What man is a man who does not make the world better?" --Balian
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.6 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFIDIexIR7qMdg1EfYRAr0JAKCgP13J169Irj3s/vyLKaXpj+6PlACfWK6R
rs2f8/7RLQRe69N6dcQd0Rs=
=xOlZ
-----END PGP SIGNATURE-----
--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/listinfo/samba