[Samba] RE: problems with inherit permissions (Armin Baumgaertner)

David Evans-Roberts d.evans-roberts at hrwallingford.co.uk
Fri Jan 10 09:10:02 GMT 2003


Armin wrote:

> Hello,
>  
> i'm using samba 2.0.7 with solaris 7
>  
> i would like to use the 'inherit permissions' - option.
>  
> smb.conf
>  
> [test]
>     comment = TEST
>     path = /test
>     writeable = Yes
>     inherit permissions = Yes
>  
>  
> UNIX-FS:
>  
> mkdir /test
> chmod 777 /test
> chmod g+s /test
>  
> ls -ld /test
> drwxrwsrwx  .....  test
>  
>  
> If i create a new directory /test/xxx from unix-prompt, the new
> directory has the setgid-Bit too
>  
> ls -ld /test/xxx
> drwxrwsrwx   ......  xxx
>  
> But if i create a directory using my samba-share, i don't get the
> setgid-Bit
>  
> drwxrwxrwx  .... new_with_samba
>  
> The truss of the smbd shows
>  
> 23713:  mkdir("new_with_samba", 042777)            = 0
> 23713:  chmod("new_with_samba", 042777)            = 0
>  
>  
> So it seems ok but the new directory doesn't have the setgid-Bit.
>  
> Can anybody help me ??
>  
> Thanks
> Armin
>  
Armin

We have exactly the same problem with 2.0.7.  However machines running 2.2.5
work fine.  I think this was a new feature for 2.0.7.  I would suggest that
you upgrade to the latest version 2.2.7a as there are some potential
security issues with 2.2.5.  I have yet to test this on the machine we have
just upgraded to 2.2.7a, but I expect it will continue to work.

Regards

David Evans-Roberts



-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-
HR Wallingford  uses  Faxes and  Emails for  confidential and
legally  privileged  business communications.  They do not of
themselves  create legal  commitments.  Disclosure to parties
other than addressees  requires our specific consent.  We are
not  liable for  unauthorised  disclosures nor  reliance upon
them.  If you  have  received  this  message  in error please
advise   us  immediately  and  destroy   all  copies  of  it.
-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-




More information about the samba mailing list