external/iiab
1
0
Fork 0
mirror of https://github.com/iiab/iiab.git synced 2025-02-15 04:32:11 +00:00
Code Issues Releases Wiki Activity

Merge pull request #2923 from holta/samba-update

Browse source 
Update roles/samba/README.rst and review IIAB's /etc/samba/smb.conf
This commit is contained in:
A Holt 2021-08-23 11:42:53 -04:00 committed by GitHub
commit 8920284599
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
1 changed files with 23 additions and 6 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

29
roles/samba/README.rst
View file

@ -1,8 +1,25 @@
Publicly Available Windows Storage
==================================
The school server will advertise a shared "public" folder available to all windows machines.
Samba README
============
Do you want your Internet-in-a-Box (IIAB) to act as a file server for your classroom or school?
If `Samba <https://www.samba.org/samba/docs/>`_ is installed and enabled as part of your IIAB's `/etc/iiab/local_vars.yml <https://wiki.iiab.io/go/FAQ#What_is_local_vars.yml_and_how_do_I_customize_it.3F>`_, your IIAB server can advertise a shared "public" folder, available to Windows PC's and laptops on your network.
Default Permissions
-------------------
The permissions are set as follows:
- Users may read and write to the "public" shared folder.
- The are forced to store their files as a user who has no ability to log on to the server.
- The user, with no ability to log on, has a password which is very difficult to guess "verylong%and$hard^to@guess"
- They are forced to store their files as a user who has no ability to log on to the server.
- The user, with no ability to log on, has a password which is very difficult to guess e.g. ``verylong%and$hard^to@guess``
Security
--------
**It's critical you understand Samba security,** so as not to endanger your students and community:
- `https://en.wikipedia.org/wiki/Samba_(software)#Security <https://en.wikipedia.org/wiki/Samba_(software)#Security>`_
- https://ubuntu.com/server/docs/samba-securing
Please review the default `/etc/samba/smb.conf <https://github.com/iiab/iiab/blob/master/roles/samba/templates/smb.conf.j2>`_ file, and revise it appropriately.
Please also review your overall `IIAB Security <http://wiki.laptop.org/go/IIAB/Security>`_.