How hidden files/folders users which not have got permission - cifs

Added by kania gandzowski about 1 year ago

hi

I try to turn on Access-based Enumeration because I want hide folders which users not permission (ntfs) .

I have Nexentastor 3.1 whith Active Directory

I tried change files smb.conf global tab but not work hide unreadable = yes hide unwriteable files = yes


Replies

RE: How hidden files/folders users which not have got permission - cifs - Added by Linda Kateley about 1 year ago

so first the smb.conf file is used for the samba server and won't be read for the cifs server. Our cifs server is run in kernel and from a smf service.

we don't currently have an option to make all hidden files hidden. but

you can tag files as hidden manually with chmod +ScH. or you can make the hidden on the windows side.

RE: How hidden files/folders users which not have got permission - cifs - Added by anthony germano 11 months ago

I was looking to do the same, and this is the only reference I could find to Access Based Enumeration on the site.

I was able to get this to work, but it required using the zfs command from the unix command line as root, and the settings can get overridden if changes are made to the share via the web interface.

I'm very new to zfs and solaris, but here's what I have gathered so far...

Each zfs share has a sharesmb property. By default it is set to off. When you enable cifs it changes to on. If you change the default name of the share it becomes name=<share name>.

You can see the value of this property from nmc by typing:

    zfs get sharesmb <folder name>

  -or-

    setup folder <folder name> property show sharesmb

These appear to invoke the same command.

I don't know if any other configuration settings affect this property.

To turn on Access Based Enumeration, this property must contain abe=true in the value.

I tried setting this via the nmc setup command, but access was denied.

I found the following command to work when run as root from the unix command line:

    zfs set sharesmb=abe=true <folder name>

If you have set a non-default share name the following will work:

    zfs set sharesmb=name=<share name>,abe=true <folder name>

I think it would be extremely useful (and simple) to add this feature as a checkbox in nmv on the same screen where you can edit the cifs share name.

RE: How hidden files/folders users which not have got permission - cifs - Added by anthony germano 11 months ago

After messing around with it a little more, I found a much easier way to set this.

In the nmv text box where you name the cifs share, just append ",abe=true" to the end of the name.

I still think this should be broken out as a seperate checkbox. The text box for the name probably also needs to parse it out so it doesn't display.