[Samba] SAMBA Problem - Users take ownership

[Travis Bullock]

Hi, 

I have a problem with my Samba/WinBIND implementation. In folders shared by multiple people the last one to access and modify a file takes ownership of the file and changes the permissions so other users cannot make changes to the same file: 
[root at atlas PLANNING RECORDS]# cd REGIONAL\ 1\ AIRLINE\ DOCS/ 
[root at atlas REGIONAL 1 AIRLINE DOCS]# ls -al 
total 1232 
drwxrws---+ 8 root AVMAX+Domain Admins 4096 Apr 13 13:16 . 
drwxrws---+ 23 root AVMAX+Domain Admins 4096 Apr 3 08:14 .. 
drwxrws---+ 7 root AVMAX+Domain Admins 4096 Mar 20 13:01 AALI Reserves 
drwxrws---+ 3 root AVMAX+Domain Admins 4096 Mar 20 13:02 Archived Documents for Reg. 1 
-rwxrwx---+ 1 AVMAX+RMesheau AVMAX+Domain Admins 64512 Apr 13 12:56 LOG BOOK entry template.xls 
drwxrws---+ 6 root AVMAX+Domain Admins 4096 Mar 30 16:20 Logpages Monthly Templates Reports etc 
-rwxrwx---+ 1 AVMAX+ALee AVMAX+Domain Admins 552448 Apr 13 13:16 MOD SB Compliance Status ALEX.xls 
-r--rwx---+ 1 AVMAX+ALee AVMAX+Domain Admins 552448 Apr 12 13:35 MOD SB Compliance Status.xls 
drwxrws---+ 2 root AVMAX+Domain Admins 4096 Mar 30 16:09 Monthly Workorder Templates 
drwxrws---+ 3 root AVMAX+Domain Admins 4096 Apr 3 09:06 SIP + Audit Spreadsheets 
drwxrws---+ 5 root AVMAX+Domain Admins 4096 Mar 20 13:04 Tally Sheets for Regional 1 

I want all ownerships to remain root:AVMAX+Domain Admins with drwxrws--- set as the permissions. My ACL's look like this for a file: 

[root at atlas REGIONAL 1 AIRLINE DOCS]# getfacl MOD\ SB\ Compliance\ Status.xls 
# file: MOD SB Compliance Status.xls 
# owner: AVMAX+ALee 
# group: AVMAX+Domain Admins 
user::r-- 
user:root:rwx 
group::rw- 
group:AVMAX+Planning:rwx 
mask::rwx 
other::--- 

I think group:AVMAX+Planning:rwx is good but appears to be ineffective once a user takes ownership of a file. 

And this for a directory: 

[root at atlas REGIONAL 1 AIRLINE DOCS]# getfacl Tally\ Sheets\ for\ Regional\ 1/ 
# file: Tally Sheets for Regional 1 
# owner: root 
# group: AVMAX+Domain Admins 
user::rwx 
group::rwx 
group:AVMAX+Planning:rwx 
mask::rwx 
other::--- 
default:user::rwx 
default:group::rwx 
default:group:AVMAX+Planning:rwx 
default:mask::rwx 
default:other::--- 

Any ideas as to why this is happening? 


Travis Bullock 
Systems Administrator 
Avmax Group Inc.