Thread: Samba File server setup, write access only on request possible?

hi, still green don't hurt me

i'm setting file server , testing configs on old system before gets here. through trile , error got samba working user/pass. along ssh settup.
current setup has xubunto installed + samba , open_ssh. set have samba shares read unless user requests write access allowed on shares. eg. use putty ssh box there username/pass run kind of command. (which give username write access samba shares have access to)

if possible write access timeout lets 2-3days after requested. (only if possible)
doing plan on minimizing possibility of rouge compromised windows system given access media shares , running mass delete and/or corrupting/ infecting other files. (example)

awesome, in advance

okay, i'll bite.

here (somewhat similar). i've created 2 shares point same directory. 1 read-only share , other call admin share. here relevant sections samba config file (disclaimer: i'm running samba on openbsd server samba config file may differ version ubuntu uses - need test , adapt required).

[media]
comment = media files
path = /data/media
public = yes
writeable = no
printable = no

[_media]
comment = media files - admin
path = /data/media
valid users = @mediaadmins
public = no
writeable = yes
printable = no
force create mode = 0775
force directory mode = 2775
force group = mediaadmins

the first group, read-only virtue of directory/file permissions (see below) must have smb account on server access files (smbpasswd -a) , accesses media share.

second group, full access virtue of directory/file permissions (see below) must have smb account on server and belong mp3admins group , accesses _media share.

directory/file permissions:

code:

chmod -r 2775 /data/media  chown -r root:mediaadmins /data/media

...resulting in:

drwxrwsr-x 2 root mediaadmins 4096 2011-06-21 12:10 media/

now, answer question of logging in via ssh , making change, change add user mediaadmins group , access _media share.

automatically delete group membership after 2-3 days require advanced scripting. however, must say, if compromised wants delete data, 2-3 day thing won't matter. consider backing data.

Forum The Ubuntu Forum Community Ubuntu Official Flavours Support Networking & Wireless [xubuntu] Samba File server setup, write access only on request possible?

Ubuntu