[Samba] Can Map shares but cannot write

[Gaiseric Vandal]

Did you try  temporarily commenting out the "valid users" and "write 
list" lines.  That should make it writable by default.    If you are 
then able to write it suggests that samba is not correctly matching up 
the users' groups to the "valid users" and "write list" groups.   
Although if this were the case then you would probably have been denied 
write permissions.


Is /home/share/students an NFS/autofs mount?  What happens if you create 
a subdirectory (via unix) under students,  with group owner students, 
permissions 777.     Can users create files under that?     If you look 
at the advanced permissions of the directories or files in windows, do 
you see any "deny" ACE's that may be trumping the allow ACE's?   In 
unix, 770  means "user and group has full access, and no one else has 
rights unless they are the user or group.  However in Windows this may 
be getting interpreted as "deny everyone some rights even if they are 
explicited granted rights as the user or group."  ( I ran into this with 
Samba 3.0.x with Solaris 10 and ZFS ACL's.)








On 06/30/2010 09:21 AM, Michael Lyon wrote:
> Here is the scenario:
>
> AD-authentication is functioning fine.  I can query users and group info
> from wbinfo and getent just fine.
>
> The clients can map to the shares, but cannot write to the shares.  I have
> tried variations of chmod 777 on absolute paths to enable read/write access
> to no avail.
>
> The share is configured as such:
>
> [student]
>      comment = Test share
>      path = /home/share/students
>      public = yes
>      writeable = yes
>      browseable = yes
>      create mask = 0770
>      force create mode  = 0770
>      directory mask = 02770
>      force directory mode = 02770
>      directory security mask = 0775
>      admin users = DOMAIN\Administrator
>      valid users = @"students"
>      write list = @"students"
>      inherit permissions = yes
>      inherit acls = yes
>
> The error log reports:
> [2010/06/29 09:42:45,  2] smbd/open.c:2447(open_directory)
>    open_directory: unable to create New folder. Error was
> NT_STATUS_ACCESS_DENIED
> [2010/06/29 09:42:45,  2] smbd/open.c:2447(open_directory)
>    open_directory: unable to create New folder. Error was
> NT_STATUS_ACCESS_DENIED
> [2010/06/29 09:42:45,  2] smbd/open.c:2447(open_directory)
>    open_directory: unable to create New folder. Error was
> NT_STATUS_ACCESS_DENIED
> [2010/06/29 09:42:45,  2] smbd/open.c:2447(open_directory)
>    open_directory: unable to create New folder. Error was
> NT_STATUS_ACCESS_DENIED
> [2010/06/29 09:42:45,  2] smbd/open.c:2447(open_directory)
>    open_directory: unable to create New folder. Error was
> NT_STATUS_ACCESS_DENIED
>
> Mike
>