[Samba] Acl and mask issue
Maxime Woznicki
maxime.woznicki at club-internet.fr
Wed Aug 10 11:01:19 GMT 2005
Hello all,
I've set up a samba 3.0.14a on debian with kernel 2.6.5 with ext3 and
acl support.
Samba is running as a simple PDC just to share efficiently and to manage
permissions on shares.
My problem is really simple : How to force file creation mode to
rwxr-x--- (0640) and directory creation mode to rwxr-x--- (0750) for all
users of the same group ?
I've set a lot of parameters to manage this but result is always the same :
files are created with rwxrwx--- permissions
directories are created with rwxrwxr-x permissions
Notice : Files and directories are created from an XP pro box
the root share :
# getfacl /share
user::rwx
group::r-x
other::r-x
default:user::rwx
default:group::r-x
default:other::r-x
From windows as Administrator, I created a dedicated directory for
group RD and give to it full control (with security panel):
# getfacl /share/RD
user::rwx
group::r-x
group:RD:rwx
mask::rwx
other::---
default:user::rwx
default:group::r-x
default:group:RD:rwx
default:mask::rwx
default:other::---
Then from windows as an RD member, if I create a file or a directory in
RD directory, the group flag "w" is set... I don't want it.
My configuration :
[share]
hide dot files = yes
writable = yes
path = /share
public = no
force create mask = 0640
force directory mask = 0750
directory security mask = 0775
security mask = 0774
valid users = %U
admin users = Administrator root
vfs object = recycle:recycle
recycle:repository = .deleted
recycle:keeptree = yes
recycle:touch = yes
recycle:versions = yes
nt acl support = yes
; inherit acls = yes (should I uncomment it ? I've tried but
doesn't change anything)
oplocks = no
level2 oplocks = no
locking = yes
blocking locks = yes
Thx for help, I'm becoming crazy.
Max
More information about the samba
mailing list