Power

 View Only
Back to discussions
Expand all | Collapse all

samba share access restriction for user and group level

  • 1.  samba share access restriction for user and group level

    Posted Thu July 21, 2022 02:23 PM
    Hi, 
    I configured samba 4.14 in AIX 7.2.5 servers with AD joined. Now all the users have access to that samba share. Need to put some sort of access restriction, so that only certain group or gid member can only have access to samba share. How to achieve it? Do I need add some line in 'global' section in smb.conf file? If that is the case then what would be that line or option? 
    Below is my smb.conf file entries...
    ====================================================

    [global]
    security = ADS
    workgroup = WORKGRP-NAME
    realm = REALM-NAME
    log file = /var/log/samba/samba.log
    log level = 3
    dos filemode = yes


    passdb backend = tdbsam:/var/lib/samba/private/passdb.tdb


    template shell = /bin/bash
    template homedir = /home/%U

    socket options = TCP_NODELAY SO_KEEPALIVE TCP_KEEPIDLE=240 TCP_KEEPCNT=4 TCP_KEEPINTVL=15


    idmap config * : backend = tdb
    idmap config * : range = 3000-7999


    idmap config HDMC : backend = rid



    idmap config HDMC : range = 10000-9999999

    idmap config HDMC : unix_nss_info = yes

    idmap config HDMC : unix_primary_group = yes


    winbind use default domain = Yes

    winbind refresh tickets = Yes



    [ETL]
    path = /ETL
    read only = no
    vfs objects = aixacl2

    [Landing]
    path = /Landing
    read only = no
    vfs objects = aixacl2
    ===========================================


    Please let me know.
    Thanks,
    HD Team

    ------------------------------
    Harley AIX
    ------------------------------


Related Content