[Samba] Re: file permission problem

[Justin Georgeson]

Does anyone have any suggestions here? I've read plenty of documentation 
and can't figure this out (HOWTOs and man pages). I'm apparently also 
having a problem with profiles synching back up the server. Users are 
apparently looisng work. This is bad. I *know* this product can work for 
me, but I'm not having much luck. Please help.

Justin Georgeson wrote:
> I have Samba 2.2.1a installed on RedHat 7.2, using RedHat's rev 4 RPMs 
> (samba-common, samba-client, samba, and samba-swat 2.2.1a-4). I have the 
> PDC part working. But there is one file share giving me problems. I have 
> a folder, /export0, which I want all the domain users to be able to use. 
> I have a group, unboundtech, which all the domain users are a member of. 
> The /export0 is owned by root:unboundtech, with mode 775. The folders 
> under this one which they can write to are the same (group is 
> unboundtech, mode is 775). Users can create files/folders, but they 
> can't change the permissions on them (for example, to let other people 
> modify them). In some cases, I also want to have folders in /export0 
> which are owned by another group which is a subset of the domain users. 
> I'm having the same problems here. I create a folder owned by the group 
> in question, and group writeable. Members of the group can write folders 
> to it (I haven't checked if non-group members can), but they can't 
> change the permissions.
> 
> Can services be subpaths of existing services? like
> [/some/folder]
>   .....
> 
> [/some/folder/beneath]
>   .....
> 
> That way I could maybe force a particular group ownership for different 
> sub trees.
> 
> 
> ------------------------------------------------------------------------
> 
> # Samba config file created using SWAT
> # from localhost.localdomain (127.0.0.1)
> # Date: 2002/10/01 10:04:25
> 
> # Global parameters
> [global]
> 	workgroup = UNBOUNDTECH
> 	netbios name = MOLEHILL
> 	server string = Domain controller
> 	interfaces = eth1 192.168.1.0/24 localhost
> 	bind interfaces only = Yes
> 	encrypt passwords = Yes
> 	passwd program = /usr/bin/passwd
> 	unix password sync = Yes
> 	log file = /var/log/samba/%m.log
> 	max log size = 0
> 	socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
> 	domain admin group = root sysadm @domainadmin
> 	add user script = /usr/sbin/useradd -d /dev/null -g 100 -s /bin/false -M %u
> 	logon path = \\%N\profiles\%U
> 	logon drive = Z:
> 	domain logons = Yes
> 	os level = 33
> 	preferred master = True
> 	domain master = True
> 	wins support = Yes
> 
> [profiles]
> 	comment = Windows Home Directories
> 	path = /home/profiles
> 	read only = No
> 	create mask = 0775
> 
> [export0]
> 	path = /export0
> 	write list = @unboundtech
> 	read only = No
> 	create mask = 0775
> 	directory mask = 0775
> 
> [netlogon]
> 	path = /usr/share/samba/netlogon
> 	write list = administrator
> 	browseable = No

-- 
Justin Georgeson
UnBound Technologies, Inc.
http://www.unboundtech.com
Main   713.329.9330
Fax    713.460.4051
Mobile 512.789.1962

5295 Hollister Road
Houston, TX 77040
Real Applications using Real Wireless Intelligence(tm)