[Samba] SAMBA Problem - Users take ownership

Wed Apr 18 20:18:53 GMT 2007

smb.conf file:

[global]
        security = domain
        workgroup = AVMAX
        netbios name = atlas
        map to guest = Bad User

        encrypt passwords = yes
        password server = 10.2.32.1 10.2.0.4 10.4.0.3
        username level = 0
#password server = 10.2.0.3 10.2.0.4 10.2.32.1
        deadtime = 3
        local master = no
        domain master = no
        domain logons = no
        wins support = yes
        remote announce = 10.4.0.0/20 10.3.0.0/20
#winbind use default domain = yes
        winbind separator = +
        winbind cache time = 10
        idmap uid = 10000-20000
        idmap gid = 10000-20000
        winbind enum users = yes
        winbind enum groups = yes

        hosts allow = 10.0.0.0/20 10.2.0.0/20 10.2.32.0/20 10.2.16.0/20 10.3.0.0/16 10.128.0.0/16 10.4.0.0/16
        interfaces = 10.2.0.12 192.168.0.4
        log level = 2 winbind:5

[Planning]
   comment = Avmax Planning Group Share
   browseable = yes
   writable = yes
   read only = no
   create mode = 0770
   directory mode = 0770
   path = /usr/avmax_shares/Planning

[GFQ]
   comment = Great Falls QA
   browseable = yes
   writable = yes
   read  only = no
   create mask = 0765
   create mode = 0777
   directory mode = 0770
   force create mode = 000
   path = /usr/avmax_shares/GFQ

Those are two different types of shares. I am playing with the settings to see if I can make a difference to the share but so far no joy. Probably because I don't have a firm understanding of how those settings work.

Cheers,

Travis

----- Original Message -----
From: "Carlos Rivera-Jones" <carlos at sinu.com>
To: "Travis Bullock" <tbullock at avmax.ca>, "samba" <samba at lists.samba.org>
Sent: Wednesday, April 18, 2007 2:14:19 PM (GMT-0700) America/Denver
Subject: RE: [Samba] SAMBA Problem - Users take ownership

Smb.conf share settings?

carlos 

-----Original Message-----
From: samba-bounces+carlos=sinu.com at lists.samba.org
[mailto:samba-bounces+carlos=sinu.com at lists.samba.org] On Behalf Of
Travis Bullock
Sent: Wednesday, April 18, 2007 4:09 PM
To: samba
Subject: Re: [Samba] SAMBA Problem - Users take ownership

Can anyone help me with this? This is a serious problem and it is really
screwing me over.

Cheers,

Travis Bullock
Systems Administrator
Avmax Group Inc.

----- Original Message -----
From: "Travis Bullock" <tbullock at avmax.ca>
To: "samba" <samba at lists.samba.org>
Sent: Saturday, April 14, 2007 10:12:30 AM (GMT-0700) America/Denver
Subject: [Samba] SAMBA Problem - Users take ownership

Hi, 

I have a problem with my Samba/WinBIND implementation. In folders shared
by multiple people the last one to access and modify a file takes
ownership of the file and changes the permissions so other users cannot
make changes to the same file: 
[root at atlas PLANNING RECORDS]# cd REGIONAL\ 1\ AIRLINE\ DOCS/
[root at atlas REGIONAL 1 AIRLINE DOCS]# ls -al total 1232 
drwxrws---+ 8 root AVMAX+Domain Admins 4096 Apr 13 13:16 . 
drwxrws---+ 23 root AVMAX+Domain Admins 4096 Apr 3 08:14 .. 
drwxrws---+ 7 root AVMAX+Domain Admins 4096 Mar 20 13:01 AALI Reserves
drwxrws---+ 3 root AVMAX+Domain Admins 4096 Mar 20 13:02 Archived 
drwxrws---+ Documents for Reg. 1
-rwxrwx---+ 1 AVMAX+RMesheau AVMAX+Domain Admins 64512 Apr 13 12:56 LOG 
-rwxrwx---+ BOOK entry template.xls
drwxrws---+ 6 root AVMAX+Domain Admins 4096 Mar 30 16:20 Logpages 
drwxrws---+ Monthly Templates Reports etc
-rwxrwx---+ 1 AVMAX+ALee AVMAX+Domain Admins 552448 Apr 13 13:16 MOD SB 
-rwxrwx---+ Compliance Status ALEX.xls
-r--rwx---+ 1 AVMAX+ALee AVMAX+Domain Admins 552448 Apr 12 13:35 MOD SB 
-r--rwx---+ Compliance Status.xls
drwxrws---+ 2 root AVMAX+Domain Admins 4096 Mar 30 16:09 Monthly 
drwxrws---+ Workorder Templates
drwxrws---+ 3 root AVMAX+Domain Admins 4096 Apr 3 09:06 SIP + Audit 
drwxrws---+ Spreadsheets
drwxrws---+ 5 root AVMAX+Domain Admins 4096 Mar 20 13:04 Tally Sheets 
drwxrws---+ for Regional 1

I want all ownerships to remain root:AVMAX+Domain Admins with drwxrws---
set as the permissions. My ACL's look like this for a file: 

[root at atlas REGIONAL 1 AIRLINE DOCS]# getfacl MOD\ SB\ Compliance\
Status.xls # file: MOD SB Compliance Status.xls # owner: AVMAX+ALee #
group: AVMAX+Domain Admins
user::r--
user:root:rwx
group::rw-
group:AVMAX+Planning:rwx
mask::rwx
other::--- 

I think group:AVMAX+Planning:rwx is good but appears to be ineffective
once a user takes ownership of a file. 

And this for a directory: 

[root at atlas REGIONAL 1 AIRLINE DOCS]# getfacl Tally\ Sheets\ for\
Regional\ 1/ # file: Tally Sheets for Regional 1 # owner: root # group:
AVMAX+Domain Admins user::rwx group::rwx group:AVMAX+Planning:rwx
mask::rwx
other::---
default:user::rwx
default:group::rwx
default:group:AVMAX+Planning:rwx
default:mask::rwx
default:other::--- 

Any ideas as to why this is happening? 

Travis Bullock
Systems Administrator
Avmax Group Inc. 
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba