[Samba] rights to change ACL's

[Noel Kelly]

I think you will find that currently only the owner of a file/directory can
chnage the ACLs.  This becomes a problem of course because anyone that
creates a new file/dir is the owner and you cannot change the ACLs.

A workaround for this to act as root, who can of course do anything to a
file/dir.  Create an a new share which is only accessible by your Domain
Admins group (valid users = ) and use 'force user = root'.  This will mean
any operations will be done as root.

Dangerous but effective.

Noel

-----Original Message-----
From: Egidijus Antanaitis [mailto:e.antanaitis at lukoil.lt]
Sent: 14 June 2002 10:45
To: samba at lists.samba.org
Subject: [Samba] rights to change ACL's


Hi all,
    Installation: RH7.2, 2.4.18 kernel, XFS patch, samba-2.2.4 in windows
2000 domain environment. Authentification is done through winbind daemon. I
want only particular users (say, group "Domain Admins") have the ability to
change permissions (ACL's), not the owners of file/directory. Is it possible
to implement this?

Egidijus Antanaitis
System Engineer



-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

---
Incoming mail is certified Virus Free.
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.371 / Virus Database: 206 - Release Date: 13/06/2002
 

---
Outgoing mail is certified Virus Free.
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.371 / Virus Database: 206 - Release Date: 13/06/2002