Restrict Samba users from logging on to server

[petmor]

I have created shares for my kids on my NAS and set up samba users so that they can only get to their own share but this required the creation of Fedora users also. These users now appear on the login window and I don't want the kids to be able to log onto the NAS.

How can I allow them to connect through samba to their shares but have no rights to log onto the server as a user?

thanks in advance.

[lightman47]

I've never tried it so can't say if it will work or even hose things, but I wonder if editing /etc/pam.d/gdm and COPYing the line that ends with "!= root" ... and inserting it directly underneath itself as many times as the users you want to lock out. Then change the ueserids for those new entries from "root" to their IDs.

Like I said - I've no experience in this matter ... was just a thought/wonder if.

[jpollard]

That won't prevent them from logging in as "other".

You can specify a different password backend for SAMBA which doesn't use the Linux passwords. The example should be in the /etc/samba/smb.conf. Using this, you set the passwords with "smbpasswd".

You should then be able to disable the user logins (I think that will remove them from the list) which will keep them from logging in by any method (ie. ssh/putty/console/GUI).

[beaker_]

Ummm... If I follow correctly, then we're talking about gdm.

Use system-config-users to change their login shell to "/sbin/no-login." GDM played nice with it in the past.


Late Edit: Nope... not anymore.

[petmor]

Thanks.

Disabling the account kinda worked. It still appears on the login screen but won't let them log in which is enough for me.