[Samba] Is Samba supposed to work like this?

Robert Heller heller at deepsoft.com
Thu Aug 19 06:46:55 MDT 2010

At Tue, 17 Aug 2010 10:01:03 -0500 Matt_Fries at cbca.com wrote:

> I have Samba 3.0.33-3.28.el5 running on a CentOS 5.5 server. The samba 
> server is added as a Member server of our Windows 2003 AD, and winbind is 
> working OK. 
> I have a question about the assigning of permissions via the Windows XP 
> file/folder properties dialog. 
> My background is mainly in Windows, but I do grasp the concept of UNIX 
> file permissions. When I attempt to modify the permissions on a folder 
> that is in the share folder, the behavior isn't the same as it would be as 
> if I were doing this on a Windows machine. If my user ID is not the UNIX 
> OWNER of the share folder, then any attempt I make to change permissions 
> gives me an access denied message. The permissions on the share are 775. 
> Once I am the owner of the share, When I attempt to add a Windows ACE to 
> the ACL, and give it full permissions, and click the Apply button, the 
> entry remains, but the checkboxes for the permissions have all been 
> cleared. I cannot get the permissions to "Stick". Also, the permissions in 
> the "security" tab are not always listed for a given Access Control Entry. 
> All the checkboxes are blank, except for the "Special Permissions" box. I 
> would think that If I granted ALL access to the ACE, then it should show 
> all the boxes as checked without me having to go into the advanced screen. 
> Is SAMBA supposed to be this different from how a Windows server would 
> react, or is there something just not configured right in samba? 
> Is there some sort of recommended "best practices" for configuring samba 
> so it DOES work like a windows server? 

I know virtually nothing about MS-Windows, but my guess is that it has
to do how permissions work inder UNIX vs how they work under MS-Windows.
Specificly how the underlying file system in question handles
permissions and/or ACLs.

It may also be related to how Samba is configured in terms of what
permissions / access levels is it granting clients.

> Follow us on twitter- Get the latest in industry updates, Health Care reform news, and other information at  http://twitter.com/CBCANews.
> NOTICE: The information contained in this electronic message, and any attachments accompanying this transmission, may be legally privileged and/or confidential and protected health information. This information is intended only for the use of the individual(s) and/or entity identified above. The authorized recipient of this information is prohibited from disclosing this information to any other party unless required to do so by law or regulation and is required to protect the information after its stated need has been fulfilled. 
> If you are not the intended recipient, or an employee or agent responsible to deliver it to the intended recipient, you are hereby notified that any disclosure, printing, copying, forwarding, or distributing of this information is strictly prohibited. 
> If you have received this communication in error, please notify the sender immediately, by telephone or return fax/email, to advise of wrongful receipt and confirm your understanding of this Notice. Thank You.

Robert Heller             -- Get the Deepwoods Software FireFox Toolbar!
Deepwoods Software        -- Linux Installation and Administration
http://www.deepsoft.com/  -- Web Hosting, with CGI and Database
heller at deepsoft.com       -- Contract Programming: C/C++, Tcl/Tk


More information about the samba mailing list