[Samba] Removed params 'force security mode' etc. What to use instead?

Brian H. Nelson bhnelson at ysu.edu
Wed Jul 3 12:56:12 MDT 2013

Hello list,

I noticed that the fix for bug 9190 (inc in samba 4.0) resulted in the 
removal of the following config parameters:

security mask
force security mode
directory mask
force directory security mode

I have a couple questions regarding this, and haven't really seen any 
good info on it, so...

1) Why were they removed? There doesn't seems to be any explanation in 
the bug notes or release notes. Maybe I'm missing something? (not 
judging, just confused)

2) What can be used instead? I don't see any comparable settings in 
samba to obtain the same effect (preventing clients from removing 
certain security bits from existing files, ie group permissions)

I have a situation currently where it looks like I will need to 
implement the above 'force' settings in my samba 3.x environment to deal 
with some misbehaving OS X clients that insist on stripping group 
permissions from files in certain situations. I'd rather not start using 
settings that I know are removed in future versions, but I'm not sure of 
a better way. Can anyone recommend the best way to deal with this?


More information about the samba mailing list