UCS 2.4 - Univention

4 Univention Directory Manager
78
This reference will be displayed on every client capable of MSDFS (e.g. Windows 2000 and XP) as a
regular directory.
Attention:
Only restricted user groups should have write access to root directories. Otherwise, it would be pos-
sible for users to redirect references to other shares, and intercept or manipulate files. In addition,
paths to the shares, as well as the references are to be spelt entirely in lower case.
If changes are made in the references, the concerned clients have to be restarted. Further informa-
tion on this issue can be found in the Samba documentation [9] in the chapter ’Hosting a Microsoft
Distributed File System Tree’.
Users with write access may modify permissions
According to the Unix file permission concept, only those users who own a file may change access
permissions. Samba has adopted this scheme. If this option is activated, all users with write permis-
sion to a file are allowed to change permissions, ACL entries, and file ownership rights. It has to be
noted that users of an owner group, who merely have read permission, are not authorised to carry
out any changes.
Hide unreadable files/directories
If this option is activated, all files which are nonreadable for the user due to their file permissions, will
be hidden.
’Samba permissions’ tab
Samba write access
Permits writing access to this share from Windows clients.
Force user
This username and its permissions and primary group is used for performing all the file operations
of all users. The username is only used once the user has established a connection to the Samba
share by using his real username and password. A common username is useful for using data in a
shared way, yet improper application might cause security problems.
Force group
A group which is to be used by all users connecting with this share, as their primary group. Thereby,
the permissions of this group automatically apply as the group permissions of all these users. A group
registered here has a higher priority than a group which was assigned as the primary group of a user
via the Force user entry field.
If a + sign is prefixed to the group name, then the group is assigned as a primary group solely to
those users which are already members of this group. All other users retain their primary groups.