Topic: user account access = group access

[Garret]

Currently when you create a user on SME it creates a user account for that person that they have access to after logging into their workstation with that acount name. Works great!!!

Problem . . . we have nosy admins and managers (four to be exact) that want to see what's going on in everybodies private account. So, I need to be able to make these users (the managers and such) have rights to the other users accounts. Am I stating this clear enough?

Any ideas?

Thanks

Garret

[Garret]

To clarify . . . the admin account is not a true "super user". It does not allow access to User accounts. I need to be able to assign perhaps four users as "super users" who would have access to ALL accounts.

[Rob]

To give admin access to users home directory

change the guest = no to guest = yes in the homes section of /etc/samba/smb.conf

you will need to set up a custom-template for this or it will be overwritten next time you add a user or ibay

change the permissions on the users home directory to allow group access i.e chmod 770 /home/e-smith/files/users/

Add admin to each users group in /etc/group

::admin

logon as admin and (on a win-box) run \servername\username and their home directory will appear

you will be able to read but not write. (despite having group permissions for that diectory - may be a smb.conf issue)

Every time you create a new user or ibay the groups file will be re-written and you will have to do all this again - unless you alter the scripts that create the group file

hope this gets you started

rob

[Trevor B]

Or tell them to bu...r off and leave their staff to do their work

Rob wrote:
>
>
> To give admin access to users home directory
>
> change the guest = no to guest = yes in the homes section of
> /etc/samba/smb.conf
>
> you will need to set up a custom-template for this or it will
> be overwritten next time you add a user or ibay
>
> change the permissions on the users home directory to allow
> group access i.e chmod 770 /home/e-smith/files/users/
>
> Add admin to each users group in /etc/group
>
> ::admin
>
> logon as admin and (on a win-box) run \servername\username
> and their home directory will appear
>
> you will be able to read but not write. (despite having group
> permissions for that diectory - may be a smb.conf issue)
>
> Every time you create a new user or ibay the groups file will
> be re-written and you will have to do all this again - unless
> you alter the scripts that create the group file
>
> hope this gets you started
>
> rob