LX0-104 · Question #620
What must be done to allow only users of the devel system group to access a share?
The correct answer is A. In the smb.conf file, set valid users = @devel. To allow only users of the 'devel' system group to access a Samba share, the valid users parameter in smb.conf should be set to @devel.
Question
Options
- AIn the smb.conf file, set valid users = @devel
- BIn the smb.conf file, set valid groups = @devel
- CIn the smb.conf file, set valid groups = devel
- Dchgrp the directory on the Samba server to the devel group, and then set the GID bit on the directory.
How the community answered
(14 responses)- A71% (10)
- B14% (2)
- C7% (1)
- D7% (1)
Why each option
To allow only users of the 'devel' system group to access a Samba share, the `valid users` parameter in `smb.conf` should be set to `@devel`.
The `valid users` parameter, when prefixed with an `@` symbol (e.g., `@devel`), specifies that only authenticated users who are members of the corresponding Unix group 'devel' are permitted to access the Samba share.
`valid groups` is not a standard `smb.conf` parameter used for controlling which Unix groups can access a share; `valid users = @groupname` is the correct parameter and syntax.
`valid groups = devel` is incorrect syntax and not a recognized `smb.conf` parameter for restricting access to a share based on group membership.
Changing Unix file system group ownership (`chgrp`) and setting the GID bit affects underlying file permissions but does not directly control which users can establish a connection to the Samba share itself; `smb.conf` parameters manage share access.
Concept tested: Samba share access control (group-based)
Source: https://www.samba.org/samba/docs/current/manpages/smb.conf.5.html
Topics
Community Discussion
No community discussion yet for this question.