[Samba] requesting help setting share permissions

[Mike Eggleston]

On Thu, 10 May 2012, Dale Schroeder might have said:

> On 05/10/2012 11:21 AM, Mike Eggleston wrote:
> >Hi,
> >
> >I have a share I'm trying to lock down to a specific group and I'm not
> >hold my mouth right. I want this share available to a single group. I
> >want this share to have directory permissions 0770 when a directory is
> >created and file permissions 0660. I want the users accessing this share
> >to never be able to change these permissions. When a file or directory
> >is created, I want the group to be the controlling group and nothing else.
> >
> >I currently have:
> >
> >[sales]
> >         comment = Sales files
> >         path = /opt/group/sales
> >         valid users = @GRP\sales
> >         force group = sales
> >         read only = No
> >         create mask = 0660
> >         force create mode = 0660
> >         security mask = 0660
> >         directory mask = 0770
> >         force directory mode = 0770
> >         directory security mask = 0770
> >         msdfs root = Yes
> >
> >
> >What am I doing wrong? I'm testing by copying a file in windows over to
> >this share, then checking the resulting permissions in unix.
> >
> >Mike
> >
> >Fedora Core 5
> >Samba 3.3.3
> 
> Mike,
> 
> You never mentioned what your results were or how they were wrong,
> so I'm making a few assumptions.
> 
> chown your_user : your_group /opt/group/sales
> chmod 2770 /opt/group/sales
> 
> In your share, modify 1st two and add the 3rd directive:
> 
> directory mask = 2770
> force directory mode = 2770
> nt acl support = No      # makes the Security tab inaccessible in Windows.
> 
> This is my best guess of what you want.  See if this works for you.
> If not, please clarify.
> 
> Good luck.
> 
> Dale

Dale,

Duh!

When a file is placed in the share above the permissions come out 0666
and the group is not set to "sales". I want the permissions to be 0660
and the group to be "sales". That would be a good start.

I'll try your suggestion. Thanks.

Mike