Here is the situation. I have setup a samba server to authenticate against Active Directory. I have created a group under my Linux server and created all the accounts that need to access the share and placed them in the Linux group on the samba server. I gave the group full rights to the samba share, but when a user from the group adds to the samba share a file or directory he or she now owns the file or new directory, and if another user tries to add to the file or create a file or another directory under the new created file or directory the user gets permission denied and I have to re-apply the permissions from the root of the samba share so the group owns everything again and not individual users. How can I setup the share so only the group owns it no matter what user in the group adds to the share the group maintains the permissions and not the individual users. Thank you, Juan
> How can I setup the share so only > the group owns it no > matter what user in the group adds to the share the > group maintains the > permissionsunder shares do; force group = Bri- __________________________________________________ Do you Yahoo!? Yahoo! Shopping - Send Flowers for Valentine's Day http://shopping.yahoo.com
Hi All,
I set up a samba server to talk to various wint NT
clients so they can access data off the serever. its a
Solaris 8 server.As you can see from the smb.conf
below I have Security = share but the only way to
access it is to make the share " wide open 777" and
that is not good.
Any advice ass to what I can change.
Thank You from newbie Ben
# Global parameters
[global]
coding system client code page = 850
code page directory /usr/local/samba/lib/codepages
workgroup = DAVE
netbios name = LANCELOT
netbios aliases netbios scope server string = Lancelot
Samba Server
interfaces bind interfaces only = No
security = SHARE
encrypt passwords = Yes
update encrypted = No
allow trusted domains = Yes
hosts equiv min passwd length = 5
map to guest = Never
null passwords = No
obey pam restrictions = No
password server = lancelot
smb passwd file /usr/local/samba/private/smbpasswd
root directory pam password change = No
passwd program = /usr/bin/passwd
passwd chat = *new*password* %n\n *new*password* %n\n
*changed*
passwd chat debug = No
username map password level = 0
username level = 0
unix password sync = No
restrict anonymous = Yes
lanman auth = Yes
use rhosts = No
admin log = No
log level = 0
syslog = 1
syslog only = No
log file = /var/log/samba.log
max log size = 50
timestamp logs = Yes
debug hires timestamp = No
debug pid = No
debug uid = No
protocol = NT1
large readwrite = Yes
max protocol = NT1
min protocol read bmpx = No
read raw = Yes
write raw = Yes
nt smb support = Yes
nt pipe support = Yes
nt status support = Yes
announce version = 4.9
announce as = NT
max mux = 50
max xmit = 16644
name resolve order = lmhosts host wins bcast
max ttl = 259200
max wins ttl = 518400
min wins ttl = 21600
time server = No
unix extensions = No
change notify timeout = 60
deadtime = 0
getwd cache = Yes
keepalive = 300
lpq cache time = 10
max smbd processes = 0
max disk size = 0
max open files = 10000
name cache timeout = 660
read size = 16384
socket options = TCP_NODELAY
stat cache size = 50
use mmap = Yes
total print jobs = 0
load printers = Yes
printcap name = lpstat
disable spoolss = No
enumports command addprinter command deleteprinter
command =
show add printer wizard = Yes
os2 driver map strip dot = No
mangling method = hash
character set mangled stack = 50
stat cache = Yes
domain admin group domain guest group machine password
timeout = 604800
add user script delete user script logon script
logon path = \\%N\%U\profile
logon drive logon home = \\%N\%U
domain logons = No
os level = 0
lm announce = Auto
lm interval = 60
preferred master = Auto
local master = No
domain master = No
browse list = Yes
enhanced browsing = Yes
dns proxy = Yes
wins proxy = No
wins server = 157.199.5.25
wins support = No
wins hook kernel oplocks = Yes
lock spin count = 3
lock spin time = 10
oplock break wait time = 0
add share command change share command delete share command
config file preload lock dir = /usr/local/samba/var/locks
pid directory = /usr/local/samba/var/locks
default service message command dfree command
valid chars remote announce remote browse sync socket
address = 0.0.0.0
homedir map time offset = 0
NIS homedir = No
source environment panic action hide local users = No
winbind uid winbind gid template homedir = /home/%D/%U
template shell = /bin/false
winbind separator = \
winbind cache time = 15
winbind enum users = Yes
winbind enum groups = Yes
winbind use default domain = No
comment path alternate permissions = No
username guest account = nobody
invalid users valid users admin users read list
printer admin force user force group read only = Yes
create mask = 0744
force create mode = 00
security mask = 0777
force security mode = 00
directory mask = 0755
force directory mode = 00
directory security mask = 0777
force directory security mode = 00
force unknown acl user = 00
inherit permissions = No
inherit acls = No
guest only = No
guest ok = No
only user = No
hosts allow = xxx.xxx (modified)
hosts deny status = Yes
nt acl support = Yes
profile acls = No
block size = 1024
max connections = 0
min print space = 0
strict allocate = No
strict sync = No
sync always = No
write cache size = 0
max print jobs = 1000
printable = No
postscript = No
printing = sysv
print command = lp -c -d%p %s; rm %s
lpq command = lpstat -o%p
lprm command = cancel %p-%j
lppause command = lp -i %p-%j -H hold
lpresume command = lp -i %p-%j -H resume
queuepause command = disable %p
queueresume command = enable %p
printer name use client driver = No
default devmode = No
printer driver printer driver file
/usr/local/samba/lib/printers.def
printer driver location default case = lower
case sensitive = No
preserve case = Yes
short preserve case = Yes
mangle case = No
mangling char = ~
hide dot files = Yes
hide unreadable = No
delete veto files = No
veto files hide files veto oplock files map
system = No
map hidden = No
map archive = Yes
mangled names = Yes
mangled map browseable = Yes
blocking locks = Yes
csc policy = manual
fake oplocks = No
locking = Yes
oplocks = Yes
level2 oplocks = Yes
oplock contention limit = 2
posix locking = Yes
strict locking = No
share modes = Yes
copy include exec preexec close = No
postexec root preexec root preexec close = No
root postexec available = Yes
volume fstype = NTFS
set directory = No
wide links = Yes
follow symlinks = Yes
dont descend magic script magic output delete
readonly = No
dos filemode = No
dos filetimes = No
dos filetime resolution = No
fake directory create times = No
vfs object vfs options [CDM]
path = /exports/CDM
read only = No
create mask = 0774
guest ok = Yes
__________________________________________________
Do you Yahoo!?
Yahoo! Web Hosting - establish your business online
http://webhosting.yahoo.com
Hi All, Files that I create from win are assigned user nobody how can I change that to a valid unix name .. Thanks --- Ben Bays <jamin744@yahoo.com> wrote:> Hi All, > I set up a samba server to talk to various wint NT > clients so they can access data off the serever. its > a > Solaris 8 server.As you can see from the smb.conf > below I have Security = share but the only way to > access it is to make the share " wide open 777" and > that is not good. > > > > Any advice ass to what I can change. > Thank You from newbie Ben > > # Global parameters > [global] > coding system > client code page = 850 > code page directory > /usr/local/samba/lib/codepages > workgroup = DAVE > netbios name = LANCELOT > netbios aliases > netbios scope > server string = Lancelot Samba Server > interfaces > bind interfaces only = No > security = SHARE > encrypt passwords = Yes > update encrypted = No > allow trusted domains = Yes > hosts equiv > min passwd length = 5 > map to guest = Never > null passwords = No > obey pam restrictions = No > password server = lancelot > smb passwd file > /usr/local/samba/private/smbpasswd > root directory > pam password change = No > passwd program = /usr/bin/passwd > > passwd chat = *new*password* %n\n *new*password* > %n\n > *changed* > passwd chat debug = No > username map > password level = 0 > username level = 0 > unix password sync = No > restrict anonymous = Yes > lanman auth = Yes > use rhosts = No > admin log = No > log level = 0 > syslog = 1 > syslog only = No > log file = /var/log/samba.log > max log size = 50 > timestamp logs = Yes > debug hires timestamp = No > debug pid = No > debug uid = No > protocol = NT1 > large readwrite = Yes > max protocol = NT1 > min protocol read bmpx = No > read raw = Yes > write raw = Yes > nt smb support = Yes > nt pipe support = Yes > nt status support = Yes > announce version = 4.9 > announce as = NT > max mux = 50 > max xmit = 16644 > name resolve order = lmhosts host wins bcast > max ttl = 259200 > max wins ttl = 518400 > min wins ttl = 21600 > time server = No > unix extensions = No > change notify timeout = 60 > deadtime = 0 > getwd cache = Yes > keepalive = 300 > lpq cache time = 10 > max smbd processes = 0 > max disk size = 0 > max open files = 10000 > name cache timeout = 660 > read size = 16384 > socket options = TCP_NODELAY > stat cache size = 50 > use mmap = Yes > total print jobs = 0 > load printers = Yes > printcap name = lpstat > disable spoolss = No > enumports command > addprinter command > deleteprinter command = > show add printer wizard = Yes > os2 driver map > strip dot = No > mangling method = hash > character set > mangled stack = 50 > stat cache = Yes > domain admin group > domain guest group > machine password timeout = 604800 > add user script > delete user script > logon script > logon path = \\%N\%U\profile > logon drive > logon home = \\%N\%U > domain logons = No > os level = 0 > lm announce = Auto > lm interval = 60 > preferred master = Auto > local master = No > domain master = No > browse list = Yes > enhanced browsing = Yes > dns proxy = Yes > wins proxy = No > wins server = 157.199.5.25 > wins support = No > wins hook > kernel oplocks = Yes > lock spin count = 3 > lock spin time = 10 > oplock break wait time = 0 > add share command > change share command > delete share command > config file > preload > lock dir = /usr/local/samba/var/locks > pid directory = /usr/local/samba/var/locks > default service > message command > dfree command > valid chars > remote announce > remote browse sync > socket address = 0.0.0.0 > homedir map > time offset = 0 > NIS homedir = No > source environment > panic action > hide local users = No > winbind uid > winbind gid > template homedir = /home/%D/%U > template shell = /bin/false > winbind separator = \ > winbind cache time = 15 > winbind enum users = Yes > winbind enum groups = Yes > winbind use default domain = No > comment > path > alternate permissions = No > username > guest account = nobody > invalid users > valid users > admin users > read list > printer admin > force user > force group > read only = Yes > create mask = 0744 > force create mode = 00 > security mask = 0777 > force security mode = 00 > directory mask = 0755 > force directory mode = 00 > directory security mask = 0777 > force directory security mode = 00 > force unknown acl user = 00 > inherit permissions = No > inherit acls = No > guest only = No > guest ok = No > only user = No > hosts allow = xxx.xxx (modified) > hosts deny > status = Yes > nt acl support = Yes > profile acls = No > block size = 1024 > max connections = 0 > min print space = 0 >=== message truncated == __________________________________________________ Do you Yahoo!? Yahoo! Web Hosting - establish your business online http://webhosting.yahoo.com
> Hi All, > Files that I create from win are assigned user nobody > how can I change that to a valid unix name .. ThanksOn most systems, nobody is a perfectly valid unix name Does $ id nobody return a uid/gid? Or does it say no such user? You probably want to do a man smb.conf, and from there type /SECURITY followed by enter. That'll get you to the part explaining SECURITY SHARE, which should be beneficial for you. ~ Daniel ----------------------------------------------------------------------- This message is the property of Time Inc. or its affiliates. It may be legally privileged and/or confidential and is intended only for the use of the addressee(s). No addressee should forward, print, copy, or otherwise reproduce this message in any manner that would allow it to be viewed by any individual not originally listed as a recipient. If the reader of this message is not the intended recipient, you are hereby notified that any unauthorized disclosure, dissemination, distribution, copying or the taking of any action in reliance on the information herein is strictly prohibited. If you have received this communication in error, please immediately notify the sender and delete this message. Thank you.
Thank You ... that worked but I still have a problem with the file permission being 777 to access the mount points security = share. If I change this to user will that mean I have to create an account for everyone who uses it ans well as do smbpasswd? thanks for your help --- rvt@dds.nl wrote:> use 'force user = <username>', or 'force group > <groupname> > Also check the 'create mask' and 'directory mask' > parameters. > > Ries > > Citeren Ben Bays <jamin744@yahoo.com>: > > > Hi All, > > Files that I create from win are assigned user > nobody > > how can I change that to a valid unix name .. > Thanks > > > > --- Ben Bays <jamin744@yahoo.com> wrote: > > > Hi All, > > > I set up a samba server to talk to various wint > NT > > > clients so they can access data off the serever. > its > > > a > > > Solaris 8 server.As you can see from the > smb.conf > > > below I have Security = share but the only way > to > > > access it is to make the share " wide open 777" > and > > > that is not good. > > > > > > > > > > > > Any advice ass to what I can change. > > > Thank You from newbie Ben > > > > > > # Global parameters > > > [global] > > > coding system > > > client code page = 850 > > > code page directory > > > /usr/local/samba/lib/codepages > > > workgroup = DAVE > > > netbios name = LANCELOT > > > netbios aliases > > > netbios scope > > > server string = Lancelot Samba Server > > > interfaces > > > bind interfaces only = No > > > security = SHARE > > > encrypt passwords = Yes > > > update encrypted = No > > > allow trusted domains = Yes > > > hosts equiv > > > min passwd length = 5 > > > map to guest = Never > > > null passwords = No > > > obey pam restrictions = No > > > password server = lancelot > > > smb passwd file > > > /usr/local/samba/private/smbpasswd > > > root directory > > > pam password change = No > > > passwd program = /usr/bin/passwd > > > > > > passwd chat = *new*password* %n\n > *new*password* > > > %n\n > > > *changed* > > > passwd chat debug = No > > > username map > > > password level = 0 > > > username level = 0 > > > unix password sync = No > > > restrict anonymous = Yes > > > lanman auth = Yes > > > use rhosts = No > > > admin log = No > > > log level = 0 > > > syslog = 1 > > > syslog only = No > > > log file = /var/log/samba.log > > > max log size = 50 > > > timestamp logs = Yes > > > debug hires timestamp = No > > > debug pid = No > > > debug uid = No > > > protocol = NT1 > > > large readwrite = Yes > > > max protocol = NT1 > > > min protocol read bmpx = No > > > read raw = Yes > > > write raw = Yes > > > nt smb support = Yes > > > nt pipe support = Yes > > > nt status support = Yes > > > announce version = 4.9 > > > announce as = NT > > > max mux = 50 > > > max xmit = 16644 > > > name resolve order = lmhosts host wins > bcast > > > max ttl = 259200 > > > max wins ttl = 518400 > > > min wins ttl = 21600 > > > time server = No > > > unix extensions = No > > > change notify timeout = 60 > > > deadtime = 0 > > > getwd cache = Yes > > > keepalive = 300 > > > lpq cache time = 10 > > > max smbd processes = 0 > > > max disk size = 0 > > > max open files = 10000 > > > name cache timeout = 660 > > > read size = 16384 > > > socket options = TCP_NODELAY > > > stat cache size = 50 > > > use mmap = Yes > > > total print jobs = 0 > > > load printers = Yes > > > printcap name = lpstat > > > disable spoolss = No > > > enumports command > > > addprinter command > > > deleteprinter command = > > > show add printer wizard = Yes > > > os2 driver map > > > strip dot = No > > > mangling method = hash > > > character set > > > mangled stack = 50 > > > stat cache = Yes > > > domain admin group > > > domain guest group > > > machine password timeout = 604800 > > > add user script > > > delete user script > > > logon script > > > logon path = \\%N\%U\profile > > > logon drive > > > logon home = \\%N\%U > > > domain logons = No > > > os level = 0 > > > lm announce = Auto > > > lm interval = 60 > > > preferred master = Auto > > > local master = No > > > domain master = No > > > browse list = Yes > > > enhanced browsing = Yes > > > dns proxy = Yes > > > wins proxy = No > > > wins server = 157.199.5.25 > > > wins support = No > > > wins hook > > > kernel oplocks = Yes > > > lock spin count = 3 > > > lock spin time = 10 > > > oplock break wait time = 0 > > > add share command > > > change share command > > > delete share command > > > config file > > > preload > > > lock dir = /usr/local/samba/var/locks > > > pid directory > /usr/local/samba/var/locks > > > default service > > > message command > > > dfree command > > > valid chars > > > remote announce > > > remote browse sync > > > socket address = 0.0.0.0 > > > homedir map > > > time offset = 0 > > > NIS homedir = No > > > source environment > > > panic action > > > hide local users = No > > > winbind uid > > > winbind gid > > > template homedir = /home/%D/%U > > > template shell = /bin/false > > > winbind separator = \ > > > winbind cache time = 15 > > > winbind enum users = Yes > > > winbind enum groups = Yes > > > winbind use default domain = No > > > comment > > > path > > > alternate permissions = No > > > username > > > guest account = nobody > > > invalid users > > > valid users > > > admin users > > > read list > > > printer admin > > > force user >=== message truncated == __________________________________________________ Do you Yahoo!? Yahoo! Web Hosting - establish your business online http://webhosting.yahoo.com