[Samba] Samba 3.5.6 + chmod g+s not working on some clients

[gregorcy]

Hi,

I have a problem, I upgraded to samba 3.5.6 recently and since then when
someone copies a directory to a folder that has been set with chmod g+s
*some* of the clients do not keep the setting.  For example Windows 7
x64 will work but both Mac 10.6.5 * 10.6.6 do not work when coping files
into folders.


> /home/CHEMENG/student1/public_html
> humboldt public_html # ls -la
> drwxr-sr-x  2 student1 apache         33 Jan 12 10:28 Windows7
> drwxr-xr-x  2 student1 apache         63 Jan 12 10:04 testperms-10.6.5
> drwxr-xr-x  2 student1 apache         63 Jan 12 10:04 testperms-10.6.6

> humboldt public_html # cd testperms-10.6.5
> humboldt testperms-10.6.5 # ls -la
> -rw-r--r-- 1 student1 domain users    0 Jan 12 09:27 testfileBG-1.txt

> humboldt public_html # cd Windows7/
> humboldt Windows7 # ls -la
> -rwxr--r-- 1 student1 apache  0 Jan 12 10:28 testwindows7.txt


So what the above is showing:

- Copy a file to public_html mac 10.6.* = works
- Copy a file to public_html windows 7 = works
- Create folder on mac 10.6.* copy to public_html = does not work
- Create file on mac 10.6.* copy to above copied folder = does not work
- Create a folder on windows 7 copy to public_html = works
- Create file on windows 7, copy to above copied folder = works

Works/Does not works is defined by does the chmod g+s command work, so
in my case is "apache" the group on all newly created files/folders and
is the "s" bit set on the group.

This is my smb.conf:

> [global]
>         workgroup                       = CHEMENG
>         netbios name                    = humboldt
>         realm                           = CHEMENG.UTAH.EDU
>         server string                   = CHE humboldt file server
>         security                        = ADS
>         preferred master                = no
>         client use spnego               = yes
>         server signing                  = auto
>         encrypt passwords               = yes
>         nt acl support                  = yes
>         acl map full control            = yes
>         socket options                  = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
>         template shell                  = /bin/false
>         password server                 = *
>         log level                       = 6
>         log file                        = /var/log/samba/%m
>         max log size                    = 100
>         preferred master                = No
>         dns proxy                       = No
>         strict allocate                 = yes
>         wins server                     = 192.168.1.100 192.168.1.101
>         winbind cache time              = 30
>         winbind nested groups           = yes
>         allow trusted domains           = no
>         winbind offline logon           = yes
>         idmap backend                   = tdb
>         idmap uid                       = 500-100000000
>         idmap gid                       = 500-100000000
>         idmap config CHEMENG : backend  = rid
>         idmap config CHEMENG : range    = 500-50000000
>         idmap config USERS: backend     = rid
>         idmap config USERS: range       = 50000001-100000000
>         winbind use default domain      = Yes
>         winbind separator               = +
>         winbind enum users              = yes
>         winbind enum groups             = yes
>         winbind use default domain      = yes
>         obey pam restrictions           = yes
>         template homedir                = /home/%D/%U
>         unix extensions                 = no


Any help would be appreciated I am not really sure where to look.


Thanks,

--
Brian Gregorcy
IT Manager
University of Utah
Department of Chemical Engineering