[Samba] Samba Permissions

[TAKAHASHI Motonobu]

From: "Baird, Josh" <jbaird at follett.com>
Date: Fri, 7 Dec 2012 20:58:22 +0000

> I thought I had this working correctly, but sometimes it randomly breaks.
> Here is an example of a share's configuration:
> 
> [testshare]
>   comment = Test Share
>   path = /test/testshare
>   writeable = yes
>   create mask = 770
>   directory mask = 770

You may want to add "force group = DOMAIN\testgroup".

> if the share's directory has the following permissions:
> 
> drwxrwx--- 2 root       DOMAIN\testgroup 4096 Dec  7 14:54 testshare
> 
> Then, anyone in the "DOMAIN\testgroup" should have read/write access to
> the share, correct?

Basically yes. In my env, those settings work correctly.

DOMAIN\testuser, a member of DOMAIN\testgroup can write to the share. The
owner group of written file is "DOMAIN\domain users", testuser's primary
group.

---
TAKAHASHI Motononu <monyo at monyo.com>