I have a computer which is shared to domain users. They can login with their domain account. It is using ubuntu 12.04 64 bit, samba version: 2:3.6.3-2ubuntu2.10
I setup pam on /etc/pam.d/common-session
session required pam_mkhomedir.so skel=/etc/skel/ umask=0077
When users login with their domain account, their home directory will be created automatically on /home with permission.
ls -la /home drwx------ 19 user.test domain users 4096 Apr 28 10:20 user.test drwx------ 19 user2.test domain users 4096 Apr 28 10:20 user2.test
I set umask=0077 because I don't want domain user can read other user's home directory
Now we have problem with the usershare. If domain user create a shared folder in their desktop folder (/home/user.test/Desktop/test) and share it by right click on that folder choose "Sharing Options" with the checks ("Share this folder": On, "Allow others to create and delete files in this folder": On)
ls -la /home/user.test/Desktop drwxrwxrwx 2 user.test domain users 4096 May 6 14:21 test cat /var/lib/samba/usershares/test #VERSION 2 path=/home/user.test/Desktop/test comment= usershare_acl=S-1-1-0:F guest_ok=n sharename=test
The share name "test" is now available to access on the network, but only user "user.test" can access it, other users can't access it but if I
chmod 770 /home/user.test ls -la /home drwxrwx--- 19 user.test domain users 4096 Apr 28 10:20 user.test drwx------ 19 user2.test domain users 4096 Apr 28 10:20 user2.test
I am able to access the share "test" by other domain users ("user2.test") How can I bypass this without chmod user's home directory since this is insecurity? Thanks a lot!