Re: [webmin-l] CIFS mounts, Backups, ramblings

[Jamie C. <jca...@we...>]

On 14/Dec/2005 13:25 Neal Morgan wrote ..
> Jamie:
> 
> Short questions: 
> 
> Any plans to augment the "Disk and Network FileSystems" module to
> include the additional mount.cifs options as documented here:
> http://www.samba.org/samba/docs/man/manpages-3/mount.cifs.8.html?  (I'm
> specifically interested in being able to give it a credentials file
> rather than listing user/password in clear text in my fstab file).

That is a good idea .. I will look into adding this in the next Webmin release.

> How about plans (or current undocumented facilities) in the "Filesystem
> Backup" module to override the command to use smbclient per its man
> page/examples:
> http://www.samba.org/samba/docs/man/manpages-3/smbclient.1.html
> 
> I'd like to be able to backup to a Win/2003 share without incurring the
> security penalties associated with always having the share mounted.
> E.g. let me use smbclient, or let me mount/backup/verify/umount in one
> evolution via the backup module.  I must be missing something here
> because if I use the pre/post commands in backup, it executes the post
> command prior to the verify step - causing the verify step to fail.

Running the post-backup command before verifying looks like the real bug..
I will fix this in the next version of Webmin, which will allow you to setup
mount/unmount commands as necessary.

> More Ramblings:
> 
> This started as one of those items I had parked at the bottom of my task
> list some time ago.  I couldn't get Samba/CIFS/Windows 2003 to play nice
> together when mounting a Windows share.  I parked it on my list and
> finally came back to it today.  Still, I cannot seem to manually execute
> the mount command successfully.  Through dumb luck, I stumbled on the
> network/filesystems page in Webmin and discovered it is smarter than I
> am (no big surprise there!) and can perform the mount (hurray!).
> 
> Problem is, once mounted everyone can write to it.  I'm not wild about
> that situation.  I know I can (and probably will) go manually edit the
> cron job and add an " && umount ..." to the command.  Likewise, the
> clear text password in fstab via the filesystem module leaves me
> uncomfortable.

You should be able to set the file permissions on the mount so that only
root can write to it. This can be done with the 'File permissions' and
'User files are owned by' fields for the mount in the Disk and Network
Filesystems module.

 - Jamie