Message-ID: <4A38F856.6030709@cygwin.com>
Date: Wed, 17 Jun 2009 10:06:14 -0400
From: "Larry Hall (Cygwin)" <reply-to-list-only-lh AT cygwin DOT com>
Reply-To: cygwin AT cygwin DOT com
User-Agent: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.8.1.21) Gecko/20090320 Remi/2.0.0.21-1.fc8.remi Lightning/0.9 Thunderbird/2.0.0.21 Mnenhy/0.7.5.0
MIME-Version: 1.0
To: cygwin AT cygwin DOT com
Subject: Re: SSH SAMBA
References: <6CC1F30947381149A9DA2FA21F51A6D83FADDE96 AT WW001E1ERLMM21 DOT ww001 DOT siemens DOT net>
In-Reply-To: <6CC1F30947381149A9DA2FA21F51A6D83FADDE96@WW001E1ERLMM21.ww001.siemens.net>
Content-Type: text/plain; charset=UTF-8; format=flowed
Content-Transfer-Encoding: 7bit
Mailing-List: contact cygwin-help AT cygwin DOT com; run by ezmlm
Sender: cygwin-owner AT cygwin DOT com
Mail-Followup-To: cygwin AT cygwin DOT com

Holikar, Sachin (ext) wrote:
> Hello,
>  
> Our requirement was to enable our users to be able to connect to Windows XP machine via SSH access. Once connected they should be able to go into their home directory. Their respective home directory should be Samba mounted onto WinXP machine so that users can simply "cd" to their respective drive letter (onto which their home dir is mounted.) and work.
> We could manage to cnfigure cygwin and ssh ... so that when users logs in ..they get a cygwin bash shell.We have configured ssh as Administrator and cygwin is installed in the same profile. In order to do samba mount , we made a user map his home directory onto a windows drive as Z: and other users home dir onto drive Y:. Both got shared. And when both users logged in via ssh, they could see the shared drives ie. Z and Y. 
> Now the problem is , Not only both the users are able to go into drives Y and Z but they can write in these shares as well. Means one user can write into other users home directory. which is simply not acceptable!!.
> How do we rectify this issue? Kindly suggest.

File-system security is provided by Windows, not OpenSSH.  Since the details
of your installation and the specific permissions of the file-systems and
files in question aren't included above, I can only assume that you haven't
set these permissions to achieve your stated goals.  So I'd recommend
checking that and making changes at that level as needed.

-- 
Larry Hall                              http://www.rfk.com
RFK Partners, Inc.                      (508) 893-9779 - RFK Office
216 Dalton Rd.                          (508) 893-9889 - FAX
Holliston, MA 01746

_____________________________________________________________________

A: Yes.
 > Q: Are you sure?
 >> A: Because it reverses the logical flow of conversation.
 >>> Q: Why is top posting annoying in email?

--
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple
Problem reports:       http://cygwin.com/problems.html
Documentation:         http://cygwin.com/docs.html
FAQ:                   http://cygwin.com/faq/