I'm not sure about it, but probably your user should be a member of the
squid group, as its primary group. But that way, Windows wouldn't let the
user to log in to the system...
Another option could be to leave the original permissions alone and copy the
log file to a Samba share (for example, your home directory or a share which
is only accessible to the members of the Domain Admins group). Create a cron
job which does this every minute, or every 5 minutes.. as often as you like
(but not too often, because as you may know, log files like growing huge in
size).
-rw-rw---- 1 <username> <Domain Admins> 17M Jul 23 02:59
access.log
Well, it's just an idea, I'm not an expert, but would like to help.
Regards
Gergely Kiss
2008/7/23 Elvar <elvar@elvar.org>:
> Hello,
>
> I'm trying to allow a specific windows user to be able to access a
samba
> share which points to the /var/log/squid directory on my squid proxy server
> and read the access.log files there. The permissions on the access.log file
> are below...
>
> -rw-r----- 1 squid squid 17M Jul 23 02:59 access.log
>
> Now, I've tried adding the name of the domain users account to the unix
> group "squid" but I'm still getting access denied errors. If
I chmod 644 the
> access.log then the windows user can read the file fine but I'm trying
to
> avoid 644 and stick to 640.
>
> If I 'chown squid:"Domain Admins" access.log' then the
user can also access
> it that way but again, I'd prefer to keep it squid:squid. How is it
that I
> can successfully make the domain user read the access.log file successfully
> as a member of the unix group "squid" with the permissions listed
above?
>
> Winbind is functioning properly and all of the standard tests succeed such
> as "wbinfo -g, wbinfo -u" etc.
>
>
> Kind regards,
> Elvar
>
> --
> To unsubscribe from this list go to the following URL and read the
> instructions: https://lists.samba.org/mailman/listinfo/samba
>