[Samba] Samba as fileserver on Active Directory domain

Ivan Ordonez iordonez at berkeley.edu
Thu Oct 1 10:14:24 MDT 2009


Hello,

We have a Gentoo box running Samba and is a member of the Active 
Directory domain. This Gentoo box will be a fileserver when everything 
is completed and setup as it should.  I want our users to login to their 
computer (Computers are all members of the same Active Directory domain) 
using Active Directory accounts/domain for authentication. I am using 
Winbind for Active Directory authentication/integration. I'm almost done 
except file permission issue.  All is working smoothly (ie. wbinfo, 
smbclient, getent, etc.). I can access/map the shared drive on the 
Gentoo box from any Windows computer, login to a machine without a 
problem using Active Directory accounts.  The Active Directory 
authentication with Winbind is working as it should.

For some odd reason, I can't figure out how to give permissions to all 
users the ability to make changes/add new folders on the shared drive. 
 I am getting access denied even when the users or group are valid users 
of the shared drive per smb.conf.  Below is my smb.conf shared 
configuration:

[shared]
        comment = shared
        path = /shared/drive
        read only = no
        inherit permissions = yes
        create mask = 755
        directory mask = 755
        valid users = @"MYDOMAIN+mygroup"
        browseable = yes
        writable = yes

Any help would be greatly appreciated.

-Ivan


More information about the samba mailing list