[Samba] Read only configuration.

[Whelan, Gerard]

Hi Dale,

   Thanks for your reply.  Unfortunately that still doesn't work.  The
existing files are read only now as per your recommendations. I can
still create files and then delete them in the hardware share.  There
must be some way to share out a directory with write permissions and
then have read only permissions on a subfolder of that?   

I have set the permissions as rw for owner, which is what they will need
to be, then group and other is read only.  Yet I can still create and
delete files even though I am connecting as a guest, and the fact that
Samba should respect the read only permissions set on the OS side?  If
you need anymore information please let me know.  

Thanks.

Kind regards,

Gerard

-----Original Message-----
From: Dale Schroeder [mailto:dale at BriannasSaladDressing.com] 
Sent: Tuesday, June 09, 2009 7:29 PM
To: Whelan, Gerard
Cc: Samba
Subject: Re: [Samba] Read only configuration.

Gerard,

Since Samba honors the underlying permissions of the file system, 
control that with the POSIX permissions of the subfolder.
Assuming there are only files in /u02/pub/expenses/hardware, then:
    chmod 755 /u02/pub/expenses/hardware
    chmod 644 /u02/pub/expenses/hardware/*

Modify accordingly to fit what actually exists in your file system.

http://www.cyberciti.biz/tips/how-do-i-set-permissions-to-samba-shares.h
tml

Dale


Whelan, Gerard wrote:
> Hi,
>
> I currently I have a Samba share configured as follows:
>
> [pub_fileshare]
> comment = Public fileshare
> path = /u02/pub
> guest ok = Yes
> writeable = Yes
>
> There is a subfolder under /u02/pub called /u02/pub/expenses/hardware
> that I need to make read only. How do I do this? I am new to using
> Samba. 
>
> I configured the share /u02/pub/expenses/hardware using the
> configuration below. This works as it is shared as read only. 
>
> [hardware]
> comment = Hardware share
> path = /u02/pub/expenses/hardware
> read only = Yes
> guest ok = Yes
>
> User can still access the folder through
> \\servername\pub\expenses\hardware with write permissions. How do I
make
> it read only? 
>  
> Thanks for your help.
>  
>  
>
>  
> Gerard Whelan
> Unix System Administrator
> ICON Clinical Research 
>
> Tel: + 353 (1) 291 2137
> Email: Gerard.Whelan at iconplc.com
> Web: www.iconclinical.com 
>
>  
>
> ICON plc made the following annotations.
>
------------------------------------------------------------------------
------
> This e-mail transmission may contain confidential or legally
privileged information
> that is intended only for the individual or entity named in the e-mail
address. If you
> are not the intended recipient, you are hereby notified that any
disclosure, copying,
> distribution, or reliance upon the contents of this e-mail is strictly
prohibited. If
> you have received this e-mail transmission in error, please reply to
the sender, so that
> ICON plc can arrange for proper delivery, and then please delete the
message.
> Thank You,
> ICON plc
> South County Business Park
> Leopardstown
> Dublin 18
> Ireland
> Registered number: 145835
>
>
>   
ICON plc made the following annotations.
------------------------------------------------------------------------------
This e-mail transmission may contain confidential or legally privileged information
that is intended only for the individual or entity named in the e-mail address. If you
are not the intended recipient, you are hereby notified that any disclosure, copying,
distribution, or reliance upon the contents of this e-mail is strictly prohibited. If
you have received this e-mail transmission in error, please reply to the sender, so that
ICON plc can arrange for proper delivery, and then please delete the message.
Thank You,
ICON plc
South County Business Park
Leopardstown
Dublin 18
Ireland
Registered number: 145835