[Samba] Serving MS Access Databases, with ACL
jayendren anand maduray
jayendren at hivsa.com
Thu Nov 1 13:06:52 GMT 2007
Hi Dale.
Thank you for this.
I will try some tests.
Can you elaborate on why you do not like ACLs?
Had some bad experiences?
God bless.
Dale Schroeder wrote:
> Jayendren,
>
> Rather than acls, my preference (and it's only a preference) would be
> to create a group for the database users. Add user1 and user2 to that
> group. Then ==>
>
> chown root.database_group /srv/samba/file-server/studies/databases
>
> For security, let the permissions of this directory be no greater than
> 775. (It looks like that is what you already have.) If you go with
> MySQL, you can customize the access levels on a user-by-user basis on
> global settings, database settings, table settings, etc. The security
> options list is quite extensive. If you prefer GUI administration of
> MySQL (I do), Navicat is the program of choice. http://www.navicat.com/
> It's not free, but is an affordable extension to a free database server.
>
> The only things I would say need changing in your smb.conf are:
> create mode = 0775
> veto oplock files = /*.mdb/*.MDB*/* #don't forget the trailing slash (/)
>
> Good luck to you, Nick, and Nico.
>
> Dale
>
> jayendren anand maduray wrote:
>> Hi Dale.
>>
>> Thanks for this, would you guys be able to send me a complete
>> example, that would allow read/write access for two users
>> (you can call them user1, and user2)
>>
>> Alternatively, you can comment on this one:
>> --
>> Creating the directories, and set permissions:
>>
>> #mkdir /srv/samba/file-server/studies/databases
>> #setfacl -R -m u:user1:rwx,u:user2:rwx
>> /srv/samba/file-server/studies/databases
>> #getfacl /srv/samba/file-server/studies/databases
>> # file:
>> # owner: root
>> # group: root
>> user::rwx
>> user:user1:rwx
>> user:user2:rwx
>> group::r-x
>> mask::rwx
>> other::r-x
>>
>>
>> The share entry in smb.conf:
>>
>> [databases]
>> path = /srv/samba/file-server/studies/databases
>> create mode = 0777
>> writeable = yes
>> browseable = yes
>> valid users = user1 user2 root
>> writelist = user1 user2 root
>> veto oplock files = /*.mdb/*.MDB
>> nt acl support = yes
>> nt pipe support = yes
>> nt status support = yes
>> inherit permissions = yes
>> inherit acls = yes
>>
>> #smbcontrol smbd reload-config
>> Global parameter acl compatibility found in service section!
>> --
>> Nick/Nico, we must look at moving access databases to SQL/MySQL
>> backends, soon.
>> (See message from Dale/David below)
>>
>> God bless.
>>
>> Dale Schroeder wrote:
>>> jayendren anand maduray wrote:
>>>> Hi All.
>>>> Greetings from South Africa.
>>>>
>>>> I have a Samba LDAP server (v 3.022) running on Ubuntu 6.10
>>>> Its serving about 200 users, with profiles, and domain logons.
>>>>
>>>> I want to start serving MS Access Databases on it, with the best
>>>> speed performance as possible.
>>>> At the moment, the back ends for these databases, are about 200+
>>>> MB, and will grow over the next few years.
>>>>
>>>> Basically, the share should serve about 4 users, with read/write
>>>> access.
>>>> I am using the XFS file system, with ACL support.
>>>>
>>>> Has anyone setup such shares in smb.conf?
>>>> I would really like to see an example.
>>>>
>>>> Lastly, I do not think I want to use oplocks.
>>> That's a wise choice. In the share, use:
>>>
>>> veto oplock files = /*.mdb/*.MDB/
>>>
>>> David's suggestion about splitting the databases into Access
>>> frontend and MySQL backend is also wise. It has been my experience
>>> that large Access databases corrupt quite easily. That no longer
>>> happens in the setup David mentioned.
>>>
>>> Dale
>>>>
>>>> Any help, will be greatly appreciated.
>>>>
>>>> God bless.
>>>>
>> *Ellison, David* david.ellison at atkinsglobal.com
>> <mailto:samba%40lists.samba.org?Subject=%5BSamba%5D%20Serving%20MS%20Access%20Databases%2C%20with%20ACL&In-Reply-To=47288B56.2010206%40hivsa.com>
>> /Wed Oct 31 15:03:52 GMT 2007/
>> Greetings,
>>
>> This is a little off topic, but may be usefull to you. If the DB is
>> going to grow much more than that, I would use a real SQL backend to the
>> database. The MS Access DB backend is ok, however starts to suffer when
>> they become huge, by the sounds of things they may. I am sure there are
>> people with 700mb, 900mb etc Access databases, but its best to split the
>> front end from the database and use a SQL database like MySQl for the
>> backend.
>>
>> Just food for thought :)
>>
>> Cheers.
>> Dave
>>
>> --
>> Jayendren Anand Maduray
>> Microsoft Certified Professional
>> Network Plus
>> Senior IT Administrator
>>
>> Perinatal HIV Research Unit
>> Wits Health Consortium
>> University of the Witwatersrand
>>
>> Alternate email address: jayendren at mweb.co.za
>> Fax Number: 0866857317
>>
>> ...There are 10 types of people,
>> those who understand binary
>> and those who do not...
>>
>> ------------------------------------------------------------------------
>>
>> No virus found in this incoming message.
>> Checked by AVG.
>> Version: 7.5.503 / Virus Database: 269.15.15/1101 - Release Date: 10/31/2007 10:06 AM
>>
--
Jayendren Anand Maduray
Microsoft Certified Professional
Network Plus
Senior IT Administrator
Perinatal HIV Research Unit
Wits Health Consortium
University of the Witwatersrand
Alternate email address: jayendren at mweb.co.za
Fax Number: 0866857317
...There are 10 types of people,
those who understand binary
and those who do not...
More information about the samba
mailing list