Mailinglist Archive: opensuse-edu (332 mails)

[Matt Johnson <johnsonmlw@xxxxxxxxx>]

You need to add a share for the document root. Where
we need advice, is to know how to sort out security so
that only you can access the share read/write from a
windows machine. Considering you definately want to
have the web server on 'services' domain (I don't by
the way - and I too have RMNETNT domain - it doesn't
interfere at all, as long as the smb.conf is set up
correctly) you could make the webserver share level
security. (Other folk may disagree, and I'd bow to
their knowledge to be honest).

As far as I can see, you have two other choices. You
can try to implement winbind into this scenario. I
can't help you there. Or, use the NT domain server to
control the Samba shares, and put the webserver on the
RMNETNT domain. Then you switch the security=user to
security=domain (I think), and enable you shares, then
sort out the security of them from the NT box. I
/think/ that's right.

My setup: I have share level security on the Linux
webserver, and everything is on the RMNETNT domain. I
telnet in, make the folder 'writable' (chmod), then
edit the webpages from the machine I'm sitting at,
using Frontpage (damn, I'm gonna be sorry for this
aren't I). I telnet back in when I'm done, and switch
it back to read-only for everybody when I've finished.
Now, I think I'm about to be told that's dreadful, but
I feel better for getting it off my chest. Don't judge
me. Then I can connect from anywhere (occasionally) to
edit the webserver.

Other advice welcomed on any of these ideas. If you
want me to talk you through  how to set it up with
share security, I can. With the other ideas, I'm
stabbing in the dark.

--
Matt

--- tjones <tjones@xxxxxxxxxxxxxxxxxxxxxx> wrote:
> my smb.conf file :-
> 
> [global]
>    workgroup = services
>    guest account = nobody
>    keep alive = 30
>    os level = 2
>    security = user
> 
> ; Uncomment the following, if you want to use an
> existing
> ; NT-Server to authenticate users, but don't forget
> that
> ; you also have to create them locally!!!
> ;  security = server
> ;  password server = 192.168.1.10
> ;  encrypt passwords = yes
> 
>    printing = bsd
>    printcap name = /etc/printcap
>    load printers = yes
> 
>    socket options = TCP_NODELAY
> 
>    map to guest = Bad User
> 
> ; Uncomment this, if you want to integrate your
> server
> ; into an existing net e.g. with NT-WS to prevent
> nettraffic
> ;  local master = no
> 
> ; Please uncomment the following entry and replace
> the
> ; ip number and netmask with the correct numbers for
> ; your ethernet interface.
> ;   interfaces = 192.168.1.1/255.255.255.0
> 
> ; If you want Samba to act as a wins server, please
> set
> ; 'wins support = yes'
>    wins support = no
> 
> ; If you want Samba to use an existing wins server,
> ; please uncomment the following line and replace
> ; the dummy with the wins server's ip number.
> ;   wins server = 192.168.1.1
> 
> ; Do you wan't samba to act as a logon-server for
> ; your windows 95/98 clients, so uncomment the
> ; following:
> ;   logon script =%U.bat
> ;   domain logons = yes
> ;   domain master = yes
> ; [netlogon]
> ;   path = /netlogon
> 
> 
> [homes]
>    comment = Heimatverzeichnis
>    browseable = no
>    read only = no
>    create mode = 0750
> 
> ; The following share gives all users access to the
> Server's CD drive,
> ; assuming it is mounted under /cd. To enable this
> share, please remove
> ; the semicolons before the lines
> ;
> ; [cdrom]
> ;   comment = Linux CD-ROM
> ;   path = /cd
> ;   read only = yes
> ;   locking = no
> 
> [printers]
>    comment = All Printers
>    browseable = no
>    printable = yes
>    public = no
>    read only = yes
>    create mode = 0700
>    directory = /tmp
> 
> 
> Although in the future i would like to have NT
> autherise access rights, for
> the timebeing anything will do :-)
> ----- Original Message -----
> From: Matt Johnson <johnsonmlw@xxxxxxxxx>
> To: SuSe <suse-linux-uk-schools@xxxxxxxx>
> Sent: Tuesday, February 05, 2002 10:54 AM
> Subject: Re: [suse-linux-uk-schools] SAMBA config
> 
> 
> > Tim,
> >
> > Let's have a look at your smb.conf please.
> >
> > Cheers
> >
> > --
> > Matt
> >
> >
> > --- tjones <tjones@xxxxxxxxxxxxxxxxxxxxxx> wrote:
> > > i've been getting stuck into all the apache
> > > confiureations and am now quite
> > > happy with my set-up.
> > > but i'm trying to share out the document root
> > > directory that apache uses so
> > > i can do some quick editing from our RM NT
> network.
> > > the rest of /everything/ is on a workgroup
> called
> > > RMNETNT, ut i want to keep
> > > my webserver on a seperate one - called
> services.
> > > i've been fiddling around with samba for a day
> or so
> > > now but can't seem to
> > > get anythiung to show up under window's network
> > > neighbourhood\entire
> > > network.
> > > is this a sabma problem or is it a more linux
> > > setup-related??
> > >
> > > thx
> > >
> > > Tim Jones
> > > ICT Technicton
> > > Manor High School
> > >
> > >
> > > --
> > > To unsubscribe, e-mail:
> > > suse-linux-uk-schools-unsubscribe@xxxxxxxx
> > > For additional commands, e-mail:
> > > suse-linux-uk-schools-help@xxxxxxxx
> > >
> >
> >
> > __________________________________________________
> > Do You Yahoo!?
> > Great stuff seeking new owners in Yahoo! Auctions!
> > http://auctions.yahoo.com
> >
> > --
> > To unsubscribe, e-mail:
> suse-linux-uk-schools-unsubscribe@xxxxxxxx
> > For additional commands, e-mail:
> suse-linux-uk-schools-help@xxxxxxxx
> >
> 
> 
> -- 
> To unsubscribe, e-mail:
> suse-linux-uk-schools-unsubscribe@xxxxxxxx
> For additional commands, e-mail:
> suse-linux-uk-schools-help@xxxxxxxx
> 


__________________________________________________
Do You Yahoo!?
Send FREE Valentine eCards with Yahoo! Greetings!
http://greetings.yahoo.com