[Samba] domain user part of unix group problem

[kissg]

I'm not sure about it, but probably your user should be a member of the
squid group, as its primary group. But that way, Windows wouldn't let the
user to log in to the system...

Another option could be to leave the original permissions alone and copy the
log file to a Samba share (for example, your home directory or a share which
is only accessible to the members of the Domain Admins group). Create a cron
job which does this every minute, or every 5 minutes.. as often as you like
(but not too often, because as you may know, log files like growing huge in
size).

-rw-rw----  1 <username> <Domain Admins>  17M Jul 23 02:59 access.log

Well, it's just an idea, I'm not an expert, but would like to help.

Regards
Gergely Kiss

2008/7/23 Elvar <elvar at elvar.org>:

> Hello,
>
> I'm trying to allow a specific windows user to be able to access a samba
> share which points to the /var/log/squid directory on my squid proxy server
> and read the access.log files there. The permissions on the access.log file
> are below...
>
> -rw-r-----  1 squid squid  17M Jul 23 02:59 access.log
>
> Now, I've tried adding the name of the domain users account to the unix
> group "squid" but I'm still getting access denied errors. If I chmod 644 the
> access.log then the windows user can read the file fine but I'm trying to
> avoid 644 and stick to 640.
>
> If I 'chown squid:"Domain Admins" access.log' then the user can also access
> it that way but again, I'd prefer to keep it squid:squid. How is it that I
> can successfully make the domain user read the access.log file successfully
> as a member of the unix group "squid" with the permissions listed above?
>
> Winbind is functioning properly and all of the standard tests succeed such
> as "wbinfo -g, wbinfo -u" etc.
>
>
> Kind regards,
> Elvar
>
> --
> To unsubscribe from this list go to the following URL and read the
> instructions:  https://lists.samba.org/mailman/listinfo/samba
>