search for: permssions

I have a pretty well working RH7.3 Samba 2.2.5 from RPM set up. I have searched the archives and the man pages but can't find an answer to this issue although I have a sneaking suspicion it is there somewhere. I have 3 groups set up under linux. everyone, engr, and sales. I have 3 shares. One share is set up for the engr group, one for the sales group, and one for everyone that gets shared

So, trying to get profiles working. The GPO is there and functioning. However, the user isn't able to create the needed directory for *initial* setup of the profile. [It's possible if I hand-created the profile directory for the user, and granted them rights, it would work properly. But it is vastly easier to have the user create their own directory at first login. I'm sure that's

...oth user tarts and user testuser create some subfolders in public (via Thunderbird accounts) THE PROBLEM is that mbox folders that hold messages are created with permssion 600. My understanding, from the Dovecot wiki and other docs/postings is that the folders should be 660 given the /var/mail permssions of rwxrwsrwt and ~/mail permssions of rwxrws--- MY QUESTION is how do I correct the configuration and/or directory permissions so that mbox folders and .imap indices (especially public/ ones) are created with 660 permissions thus allowing users who belong to a common group (eg tarts) to access...

I'm using libvirt on Debian/stretch (testing) with vagrant and the vagrant-libvirt plugin. When I import a vagrant box (jessie64.box), the resulting file permssions let anyone in the "kvm" group read the img. But when I build upon that box, only root can read it: -rw------- 1 root root 20198785024 Sep 19 18:19 buildserver_default.img -rwxr--r-- 1 libvirt-qemu kvm 2148663296 Sep 5 22:55 jessie64_vagrant_box_image_0.img How can I control t...

trying to figure out the best way to accomplish this, running samba 3.x on a debian system in share level mode (workgroup) have a shared folder for all the staff that they have permssions to by membership of being in the "staff" group, this share has about 40-50 subfolders. now they have an intern starting and want to restict that intern to 5 of those folders which they'll access from an XP machine I could create a new share for each folder, but if they decide to...

...GOCSC.COM allow trusted domains = no In /var/log/messages I am seeing: Jan 26 17:38:01 magellan winbindd[11151]: [2006/01/26 17:38:01, 0] lib/util_sid.c:string_to_sid(285) Jan 26 17:38:01 magellan winbindd[11151]: string_to_sid: Sid S-0-0 is not in a valid format. When I try to save the permssions I get an "Access Denied" message. [root@magellan samba]# ls -l /var/test total 4 drwxr-xr-x 2 root Domain Users 4096 Jan 26 17:41 test getfacl: Removing leading '/' from absolute path names # file: var/test # owner: root # group: root user::rwx group::r-x other::r-x The user I...

Hi, I have an issue whereby when I create a new file it obeys the create mask defined for the share but when I copy a file from within the same directory the file is created without write permssions for the primary group. Ie: directory has permissions 770, existing file has permissions of 770, create mask is 0770. When I copy a file its permissions are 750. However when creating a new file permissions are correctly set to 770. I'm a bit stumped really, surely create mask should work rega...

...c/Applicatoin data/Blizzard Entertainment/Battle.net. Now it can create up to Cache and Download/TMP under Cache, but all the extra folders don't get created unless being run as root. And if they aren't created, you can't log in. Also, running Repair.exe says can't fix the folder permssions. However, I have read/write access to all folders. drwxr-xr-x 4 macnean macnean 4096 2010-11-14 17:15 .winewowtwo2/ same with where WoW is installed. Also, the fresh installer can't connect: fixme:font:CreateScalableFontResourceW (0,L"C:\\users\\Public\\Application Data\\Blizza...

Hello, I'm using Dovecot to provide an IMAP service to a small number of users and I'm seeing two recurring errors which look like they might be related. Environment: o FreeBSD 5.2.1 / Postfix 2.0.18 / Dovecot 0.99.10.4 o Maildir mailboxes Problem: On logging in all the folders under the users mailbox are empty. This has happened with both MS Outlook 2000 clients as well as

...alled samba 2.0.0 on our AIX 4.1 machine. It appears to be working fine in domain security mode. Except for one thing: No matter what the read permissions in Unix are, ANY user can read EVERY file in a share. Write permission is working properly. What the heck is going on here? I have the Unix permssions set to a-rwx (000) and it STILL lets everyone read all the files in the directory. It doesn't seem to matter who I log into the domain as, if they are a valid username under AIX, it lets them into the share, and then lets them read all the files. The permissions also work fine from within the...

...nc=\\altea \test,multiuser,uid=0,noforceuid,gid=0,noforcegid,addr=192.168.1.100,unix,posixpaths,serverino,acl,noperm,rsize=1048576,wsize=65536,actimeo=1) Note how the acl is ignored by cifs. Question: Does cifs honour acls set on ext4 filesystems with acl,usr_xattr? Must I use smb.conf to control permssions and acl? Thanks, Steve

...er, when I add another user to this file's ACL, things start to get screwy when I attempt to set the Read-only, Hidden and/or Archive attributes from the file's property sheet. I'll add the domain user "aps" to the file's ACL from a WinXP box and give him read and execute permssions (the default whenever you add a new user to a file's ACL from the 2k/XP security tab of a file's property sheet): [~]: getfacl New\ Text\ Document.txt # file: New Text Document.txt # owner: asincero # group: Domain Users user::rw- user:aps:r-x group::--- mask::rwx other::--- Now, I'll...

...x\someuser." However, permissions still work as I expect. From the Windows perspective, this seems to be a standalone workgroup machine that happen to have the same user id and password. Since the file permissions work this is OK most of the time. However, if I try to add or modify permssions under Windows I run into problems (symptoms depend on if and when winbind has been started.) 1. If winbind is not running, I can browser users or groups from the domain but the permissions don't hold. Presumably Samba doesn't match up "mydomain\someuser" with "unix\someu...

...up authentication is through NIS with local smbpasswd file Group is the primary group for user NO LDAP involved file permissions on the samba server appear to be working just fine The only problem is effective permissions at the directory level on the local workstation Example: directory has permssions assigned of full control to "Domain Users" A user tammy is in unix group CCC which is mapped to "Domain Users" net groupmap list : System Operators (S-1-5-32-549) -> -1 Replicators (S-1-5-32-552) -> -1 Guests (S-1-5-32-546) -> -1 Domain Admins (S-1-5-21-892218768-30456...

...>created unless you use something to do this. When you create a user in ADUC and allocate a drive letter to the share on the Profile tab, ADUC automatically tries to create the folder and set the correct permissions. Which presumably is why the share itself needs to be set up with the correct permssions to allow this to happen? > > >> >> Incidentally the log-winbind-idmap logfile is full of errors like this: >> >> [2016/03/28 00:24:31.265357, 1] ../source3/winbindd/idmap_ad.c:523(idmap_ad_sids_to_unixids) >> Could not get unix ID for SID S-1-5-21-477877664-...

On Sun, 27 Mar 2016 18:15:19 +0100, Rowland penny <rpenny at samba.org> wrote: >On 27/03/16 17:15, spindles7-2 at yahoo.co.uk wrote: >> I have set up a Samba Active Directory domain controller on a fresh >> install of Debian 8.3 (Jessie) using Samba 4.4.0 and everything works >> fine as far as I can tell. I had users' home folders with the H: >> drive letter

...top level share programs or any of the > other directories underneth the program directory. Is this possible with > samba? Any help or suggestions would be greatly appreciated Use file-permissions. Samba's read and write lists are an ugly hack, your much better setting read and write permssions in the OS for the files directly, and having the OS enforce the restrictions. Andrew Bartlett -- Andrew Bartlett abartlet@pcug.org.au abartlet@samba.org Return-Path: <abartlet@pcug.org.au> Delivered-To: samba@lists.samba.org Received: from dnscache.cbr.au.asiaonline.net (dnscache.cbr.au...