P. 1
Samba

Samba

|Views: 167|Likes:
Publicado porNurul Istiqomah

More info:

Published by: Nurul Istiqomah on Dec 14, 2010
Direitos Autorais:Attribution Non-commercial

Availability:

Read on Scribd mobile: iPhone, iPad and Android.
download as PDF, TXT or read online from Scribd
See more
See less

02/21/2014

pdf

text

original

The default is no. If this is set to yes,only guest access is allowed,and all authenticated
access is converted to guest access.

hosts allow=

The default is none,allowing any host access if it submits an authentic user and pass-
word for the share. If this is set to an IP address,a list of IP addresses,or an IP list with
exceptions,only the named hosts or subnets can access the share. Note that this restricts
access over and above user authentication. This is an excellent security enhancement on
an internal network never accessed from the outside. Here’s an example:

hosts allow = 192.168.100. EXCEPT 192.168.100.40

The preceding allows access from the 192.168.100subnet,except for the host at

192.168.100.40. This parameter has many other useful forms of syntax. Consult the

smb.confman page. Also note that this parameter can be used in conjunction with the

hosts deny=parameter for finer control of which hosts can access the share.

smb.confShare Parameters

CHAPTER20

577

20

s
m
b
.
c
o
n
f

S

H
A
R
E

P

A
R
A
M
E
T
E
R
S

23 8628 CH20 3/17/00 2:12 PM Page 577

The host restrictions can be tested with the special testparmsyntax:

$ testparm serverHostname IPtoTest

hosts deny=

The default is none,meaning that this parameter places no restrictions on access. It’s
used to pinpoint hosts or subnets not permitted to access the share. In any conflict with

hosts allow=,hosts allow=takes precedence. This is handy for eliminating an entire
subnet except for the one or two hosts listed in hosts allow=. Here’s an example:

hosts deny=192.168.200.

You're Reading a Free Preview

Descarregar
scribd
/*********** DO NOT ALTER ANYTHING BELOW THIS LINE ! ************/ var s_code=s.t();if(s_code)document.write(s_code)//-->