|
|
Thanks for the reply..
I am reading
http://us1.samba.org/samba/docs/man/Samba-HOWTO-Collection/NetCommand.html
to know the advantages of mapping user groups and if it is of any use
to us.
I also tried executing the root preexec =
/etc/samba/scripts/autopoweruser.sh %U %m to add the user logging to
the Power Users group on the local workstation, but it didn't work, i
dont see it executing only.
On Wed, Aug 19, 2009 at 12:20 PM, Michael Heydon<michaelh@xxxxxxxxxxxxx> wrote:
> Avinash Rao wrote:
>>
>> Also, is there a way i can control the file permission on the clients
>> local harddrive from samba. For example, If a user A logs in to the
>> samba domain, he will not have any access to the local hard drive, can
>> we give permission from the samba, probably make that domain user a
>> part of power users on the client machine.
>>
>
> Not directly, I use cpau in the login scripts to escalate to a domain admin
> and as that user run a script which does things like add certain domain
> groups to the local admins group. Just remember group membership is worked
> out before the login scripts are run, so the user will have to log out and
> back in for any changes to take affect.
>
> It is a security risk (cpau doesn't encrypt the credentials, it uses some
> secret encoding) so it isn't suitable for everyone, but it works well for
> us.
>
> *Michael Heydon - IT Administrator *
> michaelh@xxxxxxxxxxxxx <mailto:michaelh@xxxxxxxxxxxxx>
>
>
--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/options/samba
|
|