I have a question about setting up Samba on a Linux (Debian sarge) file server for a small group of users. This server and all the users are behind a seemingly robust workgroup hardware firewall (firebox something or other).
All users can authenticate on a Windows domain, although many simply logon to their local XP machine and use the domain login for when they access domain resources such as the Exchange email server or the shares setup on the current Linux file server (Fedora). In smb.conf we currently use
security = domain
workgroup = "domain name"
password sever = "password server"
unix password sync = Yes
...
We have one public share and home shares for each user.
On this new server (in testing/learning phase) I can similarly setup Samba as a domain member server. If it makes sense, however, I would rather not require department users to have to authenticate via the domain to access the public share. Can I also simply bypass logins and identify specific ip addresses that have full access to specific shares? Would that have a modest level of security. The data on our server is hardly sensitive data; we are more interested in maintaining data integrity than strict security.
Any feedback? Thanks in advance.
-----------
BTW. After evaluating many Linux distrobutions, I settled on Debian for our file server. I backed myself into Debian after toying with Ubuntu, which I love as a personal use Linux distro. Debian seemed the prudent choice for a file server.
All users can authenticate on a Windows domain, although many simply logon to their local XP machine and use the domain login for when they access domain resources such as the Exchange email server or the shares setup on the current Linux file server (Fedora). In smb.conf we currently use
security = domain
workgroup = "domain name"
password sever = "password server"
unix password sync = Yes
...
We have one public share and home shares for each user.
On this new server (in testing/learning phase) I can similarly setup Samba as a domain member server. If it makes sense, however, I would rather not require department users to have to authenticate via the domain to access the public share. Can I also simply bypass logins and identify specific ip addresses that have full access to specific shares? Would that have a modest level of security. The data on our server is hardly sensitive data; we are more interested in maintaining data integrity than strict security.
Any feedback? Thanks in advance.
-----------
BTW. After evaluating many Linux distrobutions, I settled on Debian for our file server. I backed myself into Debian after toying with Ubuntu, which I love as a personal use Linux distro. Debian seemed the prudent choice for a file server.