[Samba] Directory Permissions?

Doug Sampson dougs at dawnsign.com
Wed Jun 23 14:40:16 MDT 2010


Hello,

Running Samba 3.3.10 on FreeBSD 7.3.

Cannot copy a folder with a subfolder and 10 files in the subfolder from
an OSX 10.6.4 client to a folder on the Samba server. What happens is
that the folder gets copied but not the subfolder and its files.


root at aries:/usr/local/etc# testparm
Load smb config files from /usr/local/etc/smb.conf
Processing section "[homes]"
Processing section "[macdata]"
Processing section "[SNAuthors]"
Loaded services file OK.
Server role: ROLE_DOMAIN_MEMBER
Press enter to see a dump of your service definitions

[global]
        workgroup = XXX
        security = DOMAIN
        password server = aquila amd90001
        log file = /var/log/samba/log.%m
        max log size = 50
        name resolve order = hosts wins dns lmhosts bcast
        socket options = TCP_NODELAY SO_KEEPALIVE SO_RCVBUF=4096
SO_SNDBUF=4096
        os level = 33
        local master = No
        dns proxy = No
        wins server = 192.168.xxx.x
        idmap uid = 15000-200000
        idmap gid = 15000-200000
        template homedir = /usr/home/%D/%U
        template shell = /bin/bash
        winbind separator = -
        winbind cache time = 10
        winbind enum users = Yes
        winbind enum groups = Yes
        admin users = XXX-doug, "@XXX-domain admin"
        hosts allow = 192.168.xxx., 192.168.xxx., 127.,

[homes]
        comment = Home Directories
        read only = No
        create mask = 0700
        directory mask = 0700
        browseable = No

[macdata]
        comment = Production Data
        path = /data
        valid users = @XXX-production, "@XXX-domain admins",
@XXX-marketing
        force group = @XXX-production
        read only = No
        create mask = 0777
        force create mode = 0777
        directory mask = 0777
        force directory mode = 0777
        delete veto files = Yes
        veto files = /lost+found/Network Trash
Folder/TheFindByContentFolder/TheVolumeSettingsFolder/._.DS_Store/
        hide files =
/_*/:*/.*/.AppleDB/.AppleDouble/.bin/.AppleDesktop/Temporary
Items/.DS_Store/

[SNAuthors]
        comment = Backup share for SN authors only
        path = /data/Users/SNAuthors
        valid users = @XXX-SNAuthors, @XXX-production, @production,
"@XXX-domain admins", @XXX-marketing
        force group = @XXX-snauthors
        read only = No
        create mask = 02775
        force create mode = 02775
        directory mask = 02770
        force directory mode = 02770
        delete veto files = Yes
        veto files = /lost+found/Network Trash
Folder/TheFindByContentFolder/TheVolumeSettingsFolder/._.DS_Store/
        hide files =
/_*/:*/.*/.AppleDB/.AppleDouble/.bin/.AppleDesktop/Temporary
Items/.DS_Store/
root at aries:/usr/local/etc#


The odd thing is that some of the parameters I inserted in the [macdata]
section do not show up in the testparm output. The actual content as
shown in the [macdata] section is as follows:

[macdata]
   comment = Production Data
   path = /data
   valid users = @XXX-production @"XXX-domain admins" @XXX-marketing
   force group = @XXX-production
   writable = yes
   printable = no
   create mask = 0777
   security mask = 0777
   force create mode = 0777
   force security mode = 0 
   directory mask = 0777
   directory security mask = 0777
   force directory mode = 0777
   force directory security mode = 0
   hide files =
/_*/:*/.*/.AppleDB/.AppleDouble/.bin/.AppleDesktop/Temporary
Items/.DS_Store/
   delete veto files = yes
   veto files = /lost+found/Network Trash
Folder/TheFindByContentFolder/TheVolumeSettingsFolder/._.DS_Store/


root at aries:/data/WorkinProgress/Alf/bragg/ForLaura# getfacl
BraggonBragg/
# file: BraggonBragg/
# owner: XXX-alfredo
# group: XXX-production
user::rwx
group::rwx
other::rwx
root at aries:/data/WorkinProgress/Alf/bragg/ForLaura# ll
total 14
-rwxrw-rw-  1 XXX-johnt    XXX-production  6148 Jun 22 17:42 .DS_Store
drwxrwsrwx  5 XXX-alfredo  XXX-production   512 Jun 23 11:29
BraggonBragg
root at aries:/data/WorkinProgress/Alf/bragg/ForLaura#

XXX-alfredo tries to copy a folder titled TEST_FOLDER from his desktop
on OSX 10.6.4 with the contents as follows:

edit-bay-10:TEST_FOLDER desktopadmin$ ls -al
total 16
drwxrwxrwx+  4 desktopadmin  staff   136 Jun 22 17:00 .
drwxrwxrwt  11 root          wheel   374 Jun 22 18:18 ..
-rw-r--r--@  1 desktopadmin  staff  6148 Jun 22 17:38 .DS_Store
drwxrwxrwx+  9 desktopadmin  staff   306 Jun 22 17:00 TEST_SUBFOLDER
<<<<<<<<<<<<<<<<<<<
edit-bay-10:TEST_FOLDER desktopadmin$ ls -al ./TEST_SUBFOLDER/
total 184232
drwxrwxrwx+ 9 desktopadmin  staff       306 Jun 22 17:00 .
drwxrwxrwx+ 4 desktopadmin  staff       136 Jun 22 17:00 ..
-rwxrwxrwx@ 1 desktopadmin  staff  41721576 Jun  1 12:40
dvd-cove_Final.tif
-rwxrwxr-x@ 1 desktopadmin  staff  51942460 May 24 16:08 dvd-cover4d.tif
-rwxrwxr-x  1 desktopadmin  staff    103419 May 20 09:04 photo[1].jpg
-rwxrwxr-x  1 desktopadmin  staff     91181 May 20 09:04 photo[2].jpg
-rwxrwxr-x  1 desktopadmin  staff     95947 May 20 09:04 photo[3].jpg
-rwxrwxr-x  1 desktopadmin  staff     98324 May 20 09:04 photo[4].jpg
-rwxrwxr-x  1 desktopadmin  staff    100020 May 20 09:04 photo[5].jpg
edit-bay-10:TEST_FOLDER desktopadmin$

After the copy is made,

root at aries:/data/WorkinProgress/Alf/bragg/ForLaura/BraggonBragg# ll
total 26
drwxrwxr-x  2 dougs        DSP-production   512 Jun 23 11:14
.AppleDouble
-rwxrw-rw-  1 DSP-johnt    DSP-production  6148 Jun 23 11:15 .DS_Store
drwxrwsrwx  2 DSP-alfredo  DSP-production   512 Jun 10 15:41 Final Menu
drwxrwsrwx  2 DSP-alfredo  DSP-production   512 Jun 22 15:59 OLD
drwxrwxrwx  2 DSP-johnt    DSP-production   512 Jun 22 17:00 TEST_FOLDER
root at aries:/data/WorkinProgress/Alf/bragg/ForLaura/BraggonBragg# ll
./TEST_FOLDER/
total 2
-rw-rw-rw-  1 DSP-johnt  DSP-production  0 Jun 23 13:34 .DS_Store
root at aries:/data/WorkinProgress/Alf/bragg/ForLaura/BraggonBragg#

Only TEST_FOLDER is made. TEST_SUBFOLDER isn't made. This isn't limited
to the folder in question- it happens all over the server.

Why? What am I doing wrong?

~Doug


More information about the samba mailing list