[Samba] question about groups

[Dale Schroeder]

On 8/3/2011 6:19 AM, Andrea Lanza wrote:
> At last I succeded in trying your solution...
>
> Perfect !
Excellent!
>
> No need to do anything other apart what you said.
>
>
> 	create mask = 2770
Do you intend for all files to have the execute bit set?  If not, then
     create mask = 2660
     force create mode = 2660
> 	directory mask = 2770
>        force directory mode = 2770
> 	inherit acls = Yes
>
>
> when listing the dir in linux I can read:
>
> rwxrws---
>
> I think that "s" means the inheritance of group-acl flagged on...
That is correct.

Dale
>
> Thank you very much again,
>
> Andrea
>
>
>
>> -----Messaggio originale-----
>> Da: Dale Schroeder [mailto:dale at BriannasSaladDressing.com]
>> Inviato: venerdì 29 luglio 2011 19:31
>> A: Andrea Lanza
>> Cc: 'samba at lists.samba.org'
>> Oggetto: Re: [Samba] question about groups
>>
>> Andrea,
>>
>> How about doing 'chmod 2770 /path/to/share' and also on all existing
>> subfolders of /path/to/share.
>> In the share definition, you could also add
>>
>>       directory mask = 2770
>>       force directory mode = 2770
>>
>> Dale
>>
>> On 07/29/2011 6:03 AM, Andrea Lanza wrote:
>>> Hi all,
>>> I have a (simple?) question about groups.
>>>
>>> this is my scenario:
>>>
>>> Windows Active directory domain
>>>
>>> Samba file server ADS integrated
>>>
>>> 2 shares on this last server (share1, share2)
>>>
>>> 2 groups on the AD (group1 and group2)
>>>
>>> First share is only fully available to group1: this is easily done
>>>
>>> second share is fully available to group2
>>> ---
>>>
>>> Then I have some users belonging to both group1 and group2;
>>> anyway group1 is the principal group.
>>>
>>> when a user of this kind create a folder or a file on the share2, the
>> file is created
>>> as "userxxx" and "group1", so beiing unaccessible to user on the
>> group2.
>>> (permission:770, so if one user is in group2 cannot access this file
>> belonging to group1)
>>> I tried several combination of "inherit acl", "possible user" and so
>> on, but no hope to make it works.
>>> How can I achieve this result ?
>>>
>>> And sorry if it was already answered elsewhere: I found a lot of
>> discussion (also very old, 2003 and so on)
>>> but no one helped me.
>>>
>>> I am running samba :
>>>
>>> 3.5.xxx on opensuse 11.4
>>>
>>> thanks in advance,
>>> Andrea
>>>
>>>
>> --
>> This message has been scanned for viruses and
>> dangerous content by MailScanner, and is
>> believed to be clean.
>