[Samba] Problems accessing Shares

Gianluca Culot gianlucaculot at dmsware.com
Fri Jun 15 14:25:50 GMT 2007

Hello List I
I'm experiencing SERIOUS problems accessing Shares.
I'm using Samba 3.0.25 on a FreeBSD Box
I'm using samba for sharing and user authentication
Everything seemed working perfectly
but when I tried to share some more directories, problems poped up
I can read shares ONLY if they have Read attribute for Other.
and I can manipulate files ONLY if they have Write attribute for Other 
to say it plain.... Ilooks like I have to set 777 mode on all shared dirs...
They ONLY other alternative is to chance the owner of the directory to my
user and "domain users" groups (which comes from AD)
here is an example
mail# /usr/local/www > ls -al
total 28
drwxr-xr-x  14 root           wheel          512 Jun 14 11:26 .
drwxr-xr-x  19 root           wheel          512 May  7 15:16 ..
drwxr-xr-x   2 root           wheel          512 May  7 14:29 DMScmf
drwxr-xr-x  12 root           wheel          512 Jun 11 16:50 Zope29
drwxr-xr-x   6 root           wheel          512 May  7 15:17 apache22
drwxr-xr-x   8 root           wheel          512 May  4 12:40 awstats
drwxr-xr-x   2 root           wheel          512 May  9 18:00 cgi-bin
drwxrwx---   2 gianlucaculot  domain users   512 Jun 12 17:57 docebo
drwxr-xr-x  13 root           wheel          512 May 10 16:44 downloads
drwxrwxrwx   3 root           wheel          512 Jun 14 11:26 ftpUploads
drwxrwxr-x   5 andrealaus     domain users  1024 Jun 13 18:18 lausblog
drwxr-x---  14 www            www            512 Jun  8 17:08 squirrelmail
drwxr-xr-x   2 root           wheel          512 Jun 11 10:57 test
drwxr-xr-x   3 root           wheel          512 Apr 27 16:04 www.dmsware.it

/usr/local/www is shared as websites    ( i.e. \\server\webistes ) 
I can read content of every dir with 755 (or 775) mode
I can do everyting on docebo
but I cannot access squirrelmail... even if I belong to the WWW group
here is the smb.conf
mail# /usr/local/www > cat /etc/smb.conf
# Samba config file created using SWAT
# from (
# Date: 2007/05/09 10:32:32
        workgroup = DMSWARE
        Wins support = yes
        dns proxy = yes
        name resolve order = host wins bcast
        local master = yes
        domain master = no
        preferred master = auto
        enhanced browsing = yes
        #encrypt password = yes         # YES = Default
        realm = DMSWARE.it
        server string = mail
        security = ADS
        password server = orion
        passdb backend = tdbsam
        passwd program = /usr/bin/passwd %u
        client use spnego = yes
        server signing = auto
        client signing = auto
        #passwd chat = *Enter\snew\sUNIX\spassword:* %n\n
*Retype\snew\sUNIX\spassword:* %n\n .
        #passwd chat debug = yes
        log file = /var/log/samba/log.%m
        add user script = /usr/sbin/pw useradd %u
        delete user script = /usr/sbin/pw userdel %u
        add group script = /usr/sbin/groupadd %g
        delete group script = /usr/sbin/pw groupdel %g
        template homedir = /home/%U
        template shell = /bin/csh
        winbind cache time = 3600
        winbind enum users = Yes
        winbind enum groups = Yes
        winbind use default domain = Yes
        winbind nss info = rfc2307
        idmap domains = DMSWARE
        idmap config DMSWARE:range = 10000-49999
        idmap config DMSWARE:base_rid = 0
        idmap config DMSWARE:backend = rid
        idmap uid = 10000-49999
        idmap gid = 10000-49999
        #  Networking configuration options
        hosts allow = 192.168.0. localhost
        #guest ok = yes
        #guest only = yes
        browseable = yes
        #read only = yes
        #force directory mode = 744
        public = yes
        available = yes
        browse list = yes
        #idmap backend = ad
        #idmap backend = idmap_rid:DMSWARE=10000-49999
        #idmap uid = 10000-49999
        #idmap gid = 10000-49999
   # 'unix password sync' serve per mantenere sincronizzate le password di
Samba e degli account Linux
   # Attenzione, vengono sincronizzate le password Linux rispetto le
password Samba,
   # questa procedura non funziona al contrario:
   # se si cambia con passwd una password Unix,
   # si dovrà cambiarla a mano con smbpasswd per tenere
   # sincronizzata la password Unix con la password Samba.
   #unix password sync = yes
   # set the loglevel
   log level = 2
        path = /usr/local/www/www.dmsware.it/downloads/downloads
        valid users = @DMSWARE\multimediaquality, @DMSWARE\multimediaspv,
@DMSWARE\softwarespv, DMSWARE\andrealaus
        read only = No
        create mask = 0777
        directory mask = 0777
        path = /usr/local/www/
        valid users = DMSWARE\gianlucaculot
        write list = DMSWARE\gianlucaculot, @DMSWARE\software,
        read only = No
        create mask = 0775
        directory mask = 0775
        path = /usr/local/share
        valid users = DMSWARE\gianlucaculot

        path = /home
        read only = No
        path = /usr/local/www/test
        valid users = @DMSWARE\multimediaspv, @DMSWARE\softwarespv,
        read only = No
        create mask = 0777
        directory mask = 0777
What then hell I'm doing wrong ?

Gianluca Culot
DMS Multimedia
Via delle Arti e dei Mestieri, 6
20050 Sulbiate (Mi) - Italy
Tel: +39 039 5968925
Fax: +39 039 3309813
<mailto:gianlucaculot at dmsware.com>
www.dmsware.com <http://www.dmsware.com/>

Ai sensi del D.Lgs. 196/2003 si precisa che le informazioni contenute in
questo messaggio sono riservate ed a uso esclusivo del destinatario. Qualora
il messaggio Le fosse pervenuto per errore, La invitiamo ad eliminarlo senza
copiarlo e a non inoltrarlo a terzi, dandocene gentilmente comunicazione. Il
mittente comunica che il presente messaggio ed ogni suo allegato, al momento
dell’invio, era esente da ogni tipo di virus, worm, trojan e/o ogni altri
tipo di codice software dannoso. Questo messaggio e i suoi allegati
potrebbero essere stati infettati durante la trasmissione. Leggendo il
messaggio e/o aprendo gli allegati, il Destinatario si prende la piena
responsabilità nei confronti di ogni azione protettiva o di rimedio per la
rimozione di virus ed altri difetti. DMS Multimedia non potrà essere
considerata responsabile per qualsivoglia danno o perdita derivata qualunque
modo da questo messaggio o dai suoi allegati.

The information in this electronic mail message, including any attachments,
is confidential and may be legally privileged. It is intended solely for the
addressee(s). Access to this Internet electronic mail message by anyone else
is unauthorised. If you are not the intended recipient, any disclosure,
copying, distribution or action taken or omitted to be taken in reliance on
it is prohibited and may be unlawful. The sender believes that this E-mail
and any attachments were free of any virus, worm, Trojan horse, and/or
malicious code when sent. This message and its attachments could have been
infected during transmission. By reading the message and opening the
attachments, the recipient accepts full responsibility for taking protective
and remedial action about viruses and other defects.DMS Multimedia is not
liable for any loss or damage arising in any way from this message or its


More information about the samba mailing list