Koozali.org: home of the SME Server

Obsolete Releases => SME Server 7.x => Topic started by: bloodshoteye on February 12, 2008, 04:44:59 PM

Title: Selective Home Drive Access
Post by: bloodshoteye on February 12, 2008, 04:44:59 PM
Hi all,

I don't think this has been asked before.
I'm attempting to assist a school with user control. They need certain teachers to access student home drives to retrieve tasks (but not the entire collection of homes).
If I allow students write access to a share (ibay) then they can also read (substitute "cheat") and delete (with glee) other's work, surely.
Has anyone done this in Samba?
ACL's may work, but we are talking 500 odd students.

Further Info: Some time ago on a Ubuntu server, I added students and teachers to the same groups. Then created a browseable samba share, created a mapped drive on the teacher XP box and teachers had read access to all homes in allowed groups. Worked like a charm. So far I've had no success on SME.

This is quite urgent & I would really appreciate any comments or pointers.
Thanks,
Title: Re: Selective Home Drive Access
Post by: raem on February 12, 2008, 10:09:32 PM
ardugh

Please learn to do "Advanced searches" on the forums, and also learn to search the wiki as it will help you find existing answers.

If the teachers only wish to read the student files this howto will work OK. Note if they save stuff in the students home folders, then the files will have wrong permisssions (eg admin) and the students won't be able to read them.
http://distro.ibiblio.org/pub/linux/distributions/smeserver/contribs/rmitchell/smeserver/howto/User%20Home%20directories%20access%20by%20Administrator%20HOWTO%20for%20sme%20server.htm

There was a post in the forums a few months ago where this method was elaborated on
http://forums.contribs.org/index.php?topic=39006.0

That post also mentions the htaccess howto
http://wiki.contribs.org/Htaccess
which you could utilise to setup browseable web shares (instead of samba shares) as an alternative approach. That method is mentioned briefly in the above thread.
Title: Re: Selective Home Drive Access
Post by: bloodshoteye on February 13, 2008, 01:21:39 PM
Thanks, Ray
Quote
If the teachers only wish to read the student files this howto will work OK. Note if they save stuff in the students home folders, then the files will have wrong permissions (eg admin) and the students won't be able to read them.
http://distro.ibiblio.org/pub/linux/distributions/smeserver/contribs/rmitchell/smeserver/howto/User%20Home%20directories%20access%20by%20Administrator%20HOWTO%20for%20sme%20server.htm
I'm using this already - found it during a search... However, it's not what I need for teachers, to quote myself:
Quote
certain teachers to access student home drives to retrieve tasks (but not the entire collection of homes).

Regarding your second option, I think the school will have to implement your recommendation to a previous poster.
I must have missed this in my recent forum search - sorry for that (remember seeing this last year).
Quote
You could also create many copies of the template fragment (with a different name) for each user home folder you want to allow access for, but this may be unwieldly for a lot of students ie

50student1home-admin

[student1home]
comment = student1 home directory
path = /home/e-smith/files/users/student1/home
valid users = admin root teacher1
admin users = admin root teacher1
write list = admin root teacher1
browseable = yes
guest ok = no
public = no
read only = no
writable = yes
printable = no
create mode = 0660
force create mode = 0660
directory mode = 0770
force directory mode = 0770

Quote
That post also mentions the htaccess howto
http://wiki.contribs.org/Htaccess
Although a neat solution to a situation, I don't think this'll work here - the school needs local access via Samba.
I'm going to try your 2nd recommendation to my original post.

Thanks for your reply,