[Samba] Weird, sudden 3.4 problem.

Don Krause dkrause at optivus.com
Thu Apr 11 13:31:31 MDT 2013


On Apr 11, 2013, at 12:23 PM, Jeremy Allison wrote:

> On Thu, Apr 11, 2013 at 12:18:46PM -0700, Don Krause wrote:
>> 
>> On Apr 11, 2013, at 12:08 PM, Jeremy Allison wrote:
>> 
>>> On Thu, Apr 11, 2013 at 12:01:02PM -0700, Don Krause wrote:
>>>> 
>>>> 
>>>> [homes]
>>>>      admin users = %S
>>> 
>>> Having admins users = %S seems strange. Is this what you want ?
>>> 
>>>      admin users (S)
>>> 
>>>          This is a list of users who will be granted administrative privileges on the share. This means that they will do all
>>>          file operations as the super-user (root).
>>> 
>>>          You should use this option very carefully, as any user in this list will be able to do anything they like on the
>>>          share, irrespective of file permissions.
>>> 
>>> 
>>> Jeremy.
>>> 
>> 
>> We had a similar problem when we migrated to Win 7 back in 2010. At that time, shares from [homes] were viewable, but
>> unwritable with "valid users = %S" so we switched to "admin users = %S" and all was well.
>> 
>> We only have this on the [homes] shares. And this is also the affected users u*ix home, they can do what ever they want anyway,
>> so it seemed a reasonable risk.
> 
> Well it means they're accessing everything as root.
> Are you *sure* that's a reasonable risk ? :-).
> 


Well, everything in their own home directory. They can log onto their u*ix account and do as they please to that directory anyway.

It's a small group of engineers, they've been doing things this way since the samba 2 days on SunOS as their homes, no issues so far.

It's not ideal, I'll admit. But it worked, until this morning.

What's odd, this:

[dkrause]
	read only = No
	path = /home/towelie/dkrause

works as expected.

this:

[homes]
	read only = No

(logged on as dkrause, and I still get /home/towelie/dkrause)

does not. In this second case, everything is viewable, openable, but not renamable. I can still create new folders and documents, but
cannot rename or save them. Except .txt files.

Thanks!
--
Don Krause                                                                   









More information about the samba mailing list