force create mode, force directory security mode ...........

[Isaac Egglestone]

Well you'll be happy to know I sorted out the complete chaos myself after
going through the smb.conf man page over 1000 times I noticed a couple of
parms I missed, my final conf for this particular share was this:
[incoming]
        comment = <removed>
        path = /weblogs
        force user = webalizer
        force group = webalizer
        writeable = Yes

        create mask = 770
        force create mode = 0770
        force directory mode = 0770
        directory mask = 770
        directory security mask = 0000
        directory security mode = 777
        force directory security mode = 770
        valid users = <removed>

To me its seems a bit much to have to set every single one of them to get
the desired result.




-----Original Message-----
From: Isaac Egglestone [mailto:iegglestone at abebooks.com]
Sent: Wednesday, January 23, 2002 6:01 PM
To: samba at lists.samba.org
Subject: force create mode, force directory security mode ...........


        create mask = 0770
        force create mode = 0770
        force directory mode = 0770
        directory security mask = 000
        directory security mode = 777

Okay this is really getting to me.

Can someone explain how I would force directory and files to always be:
rwxrwx--- ,no matter what the user does from the other end. (besides using
direct telnet/ssh access of course.)

The above smb.conf file modes teem on rediculous to me, but I'm sure its
just because I'm not as keen as I should be on unix modes. (That there are
so many of them)

You'd think after reading the docs that if you use force create mode 770
this would make sure all files are rwxrwx--- ..well so did I until I tried
it.
So I looked further and found all these above config settings that one can
use.

If someone is up for it I'd like a lamens version of the explination of each
of these....

Reading the smb.conf man page seems to tell me that some do the oposite of
others or even almost the same thing but in a slightly different way,  the
security mode parameters seem to be for making sure no one can modify the
ACL lists using the NT properties dialog box or other acl tools. All I want
to do is to force rwxrwx--- on everything under this one share.

Since I'm not subscribed to the list it would be nice if you cc'd it to me
thanks.