[Samba] share rights question

[steve]

On Tue, 2013-11-05 at 14:41 +0100, L.P.H. van Belle wrote:
> hai, 
>  
> I have a question, and im not seeing it.. 
> samba version 3.6.6 , ldap connected for auth, domain member. 
>  
> I have this share. 
> [db]
>         comment = DB Share
>         path = /db
>         browseable = yes
>         writeable = yes
>         wide links = yes
>         follow symlinks = yes
>         read list = @"DOMAIN\admingroup1"
>         write list = @"DOMAIN\admingroup1"
>         force user = dbowner
>         force group = dbgroup
>         create mode = 666
>         directory mode = 777
> 
> in smb.conf      security = domain
> all users of admgroup1 can write, thats ok. 
> Now im testing, and a user not member of admingroup1 is able to access and write in this share. 
>  
> I'm not seeing whats wrong. 
> i've read : http://www.samba.org/samba/docs/man/manpages-3/smb.conf.5.html 
> but still, i dont understand why the userX, not member of admingroup1 still can write in the share. 
>  
> any advices? 
>  
> Louis
>  

Hi
Try:
 create mode = 770

lose directory mode for the moment.
HTH
Steve