hey list, we are currently migrating our users from novell to samba. now we have one problem: in novell we could give e.g. user1 access to users2 home share so he could modify, delete or add files on this share. in samba we defined a global homes share that is mapped on logon. so how can we give user1 the needed rights? here is the definition of the homes share in smb.conf: [homes] comment = user share browseable = no writeable = yes write list = %U create mask = 0600 directory mask = 0700 force user = %U force group = Administrators oplocks = true do we need to add a special share and group? thanks for help and best regards ____________________________________________________________________________________ Don't pick lemons. See all the new 2007 cars at Yahoo! Autos. http://autos.yahoo.com/new_cars.html
exactly, you need to create a special share for permet user2 to acces to home of user1 (or reverse). but I'm not sure that is possible if you want to specify that only user2 can acces to user1'home and not user3. Maybe you must implement ACL... ----------------------------------- St?phane PURNELLE stephane.purnelle@corman.be Service Informatique Corman S.A. Tel : 00 32 087/342467 samba-bounces+stephane.purnelle=corman.be@lists.samba.org a ?crit sur 23/01/2007 10:57:11 :> hey list, > > we are currently migrating our users from novell to samba. now we > have one problem: in novell we could give e.g. user1 access to > users2 home share so he could modify, delete or add files on this > share. in samba we defined a global homes share that is mapped on > logon. so how can we give user1 the needed rights? > here is the definition of the homes share in smb.conf: > > [homes] > comment = user share > browseable = no > writeable = yes > write list = %U > create mask = 0600 > directory mask = 0700 > force user = %U > force group = Administrators > oplocks = true > > do we need to add a special share and group? > > thanks for help and best regards > > > > > > > > >____________________________________________________________________________________> Don't pick lemons. > See all the new 2007 cars at Yahoo! Autos. > http://autos.yahoo.com/new_cars.html > -- > To unsubscribe from this list go to the following URL and read the > instructions: https://lists.samba.org/mailman/listinfo/samba
thanks for your help. i just did a setfacl on the users home directory and i could access it. really nice :) thanks again for the help best regards ----- Original Message ---- From: Maur?cio Szabo <mauricio.szabo@gmail.com> To: Sascha <tdy_shadow@yahoo.com> Sent: Tuesday, January 23, 2007 12:27:32 PM Subject: Re: [Samba] access users homes share You can add user1 to a group that user2 is currently in, and set permissions of the user2 home share to be "group-readable". For example, user2 is a member of the group "foo", so you can add user1 to "foo" group, add user2's home share to "foo" group, and finally do a chmod g+wxr to user2's home folder. On 1/23/07, Sascha <tdy_shadow@yahoo.com> wrote: hey list, we are currently migrating our users from novell to samba. now we have one problem: in novell we could give e.g. user1 access to users2 home share so he could modify, delete or add files on this share. in samba we defined a global homes share that is mapped on logon. so how can we give user1 the needed rights? here is the definition of the homes share in smb.conf: [homes] comment = user share browseable = no writeable = yes write list = %U create mask = 0600 directory mask = 0700 force user = %U force group = Administrators oplocks = true do we need to add a special share and group? thanks for help and best regards ____________________________________________________________________________________ Don't pick lemons. See all the new 2007 cars at Yahoo! Autos. http://autos.yahoo.com/new_cars.html -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba Air conditioners and Computers are the same - they both crash when you open Windows. ____________________________________________________________________________________ 8:00? 8:25? 8:40? Find a flick in no time with the Yahoo! Search movie showtime shortcut. http://tools.search.yahoo.com/shortcuts/#news
now theres another problem: when i access a share and create a file the user will be forced to %U and not to the user who owns the homes share. when i set force user =%S then everyone can connect to the share. is there a chance that when i give user1 the rights to connect to user2 homes share (via setfacl) and user1 creates a file that this file will be chown to user2. i dont want to create a special share or groups because when i do it that way i would have 50 extra shares in my smb.conf. thanks for your help again and best regards ----- Original Message ---- From: Sascha <tdy_shadow@yahoo.com> To: samba@lists.samba.org Sent: Tuesday, January 23, 2007 12:39:20 PM Subject: Re: [Samba] access users homes share thanks for your help. i just did a setfacl on the users home directory and i could access it. really nice :) thanks again for the help best regards ----- Original Message ---- From: Maur?cio Szabo <mauricio.szabo@gmail.com> To: Sascha <tdy_shadow@yahoo.com> Sent: Tuesday, January 23, 2007 12:27:32 PM Subject: Re: [Samba] access users homes share You can add user1 to a group that user2 is currently in, and set permissions of the user2 home share to be "group-readable". For example, user2 is a member of the group "foo", so you can add user1 to "foo" group, add user2's home share to "foo" group, and finally do a chmod g+wxr to user2's home folder. On 1/23/07, Sascha <tdy_shadow@yahoo.com> wrote: hey list, we are currently migrating our users from novell to samba. now we have one problem: in novell we could give e.g. user1 access to users2 home share so he could modify, delete or add files on this share. in samba we defined a global homes share that is mapped on logon. so how can we give user1 the needed rights? here is the definition of the homes share in smb.conf: [homes] comment = user share browseable = no writeable = yes write list = %U create mask = 0600 directory mask = 0700 force user = %U force group = Administrators oplocks = true do we need to add a special share and group? thanks for help and best regards ____________________________________________________________________________________ Don't pick lemons. See all the new 2007 cars at Yahoo! Autos. http://autos.yahoo.com/new_cars.html -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba Air conditioners and Computers are the same - they both crash when you open Windows. ____________________________________________________________________________________ 8:00? 8:25? 8:40? Find a flick in no time with the Yahoo! Search movie showtime shortcut. http://tools.search.yahoo.com/shortcuts/#news -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba ____________________________________________________________________________________ Looking for earth-friendly autos? Browse Top Cars by "Green Rating" at Yahoo! Autos' Green Center. http://autos.yahoo.com/green_center/
do u mean sticky bit or suid ? that does not work. i looking for a way to let samba do the chmod. something with force user. i currently use force user = %U but that wont work because with that option the user who connects to the share will get the permission. ----- Original Message ---- From: M Azer <azermina@gmail.com> To: Sascha <tdy_shadow@yahoo.com> Cc: samba@lists.samba.org Sent: Tuesday, January 23, 2007 3:36:48 PM Subject: Re: [Samba] access users homes share I hope this is what you are looking for. basically you need to set the sticky bit for the owner - I assume that the user1 home folder is owned by user1. chmod u+s "user1 home folder" this way any file/folder gets created will be owed by user1. http://www.zzee.com/solutions/chmod-help.shtml On 1/23/07, Sascha < tdy_shadow@yahoo.com> wrote:now theres another problem: when i access a share and create a file the user will be forced to %U and not to the user who owns the homes share. when i set force user =%S then everyone can connect to the share. is there a chance that when i give user1 the rights to connect to user2 homes share (via setfacl) and user1 creates a file that this file will be chown to user2. i dont want to create a special share or groups because when i do it that way i would have 50 extra shares in my smb.conf. thanks for your help again and best regards ----- Original Message ---- From: Sascha <tdy_shadow@yahoo.com> To: samba@lists.samba.org Sent: Tuesday, January 23, 2007 12:39:20 PM Subject: Re: [Samba] access users homes share thanks for your help. i just did a setfacl on the users home directory and i could access it. really nice :) thanks again for the help best regards ----- Original Message ---- From: Maur?cio Szabo <mauricio.szabo@gmail.com> To: Sascha < tdy_shadow@yahoo.com> Sent: Tuesday, January 23, 2007 12:27:32 PM Subject: Re: [Samba] access users homes share You can add user1 to a group that user2 is currently in, and set permissions of the user2 home share to be "group-readable". For example, user2 is a member of the group "foo", so you can add user1 to "foo" group, add user2's home share to "foo" group, and finally do a chmod g+wxr to user2's home folder. On 1/23/07, Sascha <tdy_shadow@yahoo.com> wrote: hey list, we are currently migrating our users from novell to samba. now we have one problem: in novell we could give e.g. user1 access to users2 home share so he could modify, delete or add files on this share. in samba we defined a global homes share that is mapped on logon. so how can we give user1 the needed rights? here is the definition of the homes share in smb.conf: [homes] comment = user share browseable = no writeable = yes write list = %U create mask = 0600 directory mask = 0700 force user = %U force group = Administrators oplocks = true do we need to add a special share and group? thanks for help and best regards ____________________________________________________________________________________ Don't pick lemons. See all the new 2007 cars at Yahoo! Autos. http://autos.yahoo.com/new_cars.html -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba Air conditioners and Computers are the same - they both crash when you open Windows. ____________________________________________________________________________________ 8:00? 8:25? 8:40? Find a flick in no time with the Yahoo! Search movie showtime shortcut. http://tools.search.yahoo.com/shortcuts/#news -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba ____________________________________________________________________________________ Looking for earth-friendly autos? Browse Top Cars by "Green Rating" at Yahoo! Autos' Green Center. http://autos.yahoo.com/green_center/ -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba -- "Unless you try to do something beyond what you have already mastered, you will never grow." Ronald E. Osborn ____________________________________________________________________________________ Now that's room service! Choose from over 150,000 hotels in 45,000 destinations on Yahoo! Travel to find your fit. http://farechase.yahoo.com/promo-generic-14795097
yes, but whats the better way ;( maybe the solution for that is tooo simple so that we cant find it :) am i the only person who has this problem ? ----- Original Message ---- From: Maur?cio Szabo <mauricio.szabo@gmail.com> To: Sascha <tdy_shadow@yahoo.com> Sent: Tuesday, January 23, 2007 5:05:46 PM Subject: Re: [Samba] access users homes share Well, you can write "force create mask = 0777" in the user's home share. "user1" and "user2" will both have control of the files in the folder, and no other user will have control because they can't enter on user1 or user2 home share. Besides, I think there must be a better way of doing this :-) On 1/23/07, Sascha <tdy_shadow@yahoo.com> wrote:do u mean sticky bit or suid ? that does not work. i looking for a way to let samba do the chmod. something with force user. i currently use force user = %U but that wont work because with that option the user who connects to the share will get the permission.----- Original Message ---- From: M Azer <azermina@gmail.com> To: Sascha <tdy_shadow@yahoo.com> Cc: samba@lists.samba.org Sent: Tuesday, January 23, 2007 3:36:48 PM Subject: Re: [Samba] access users homes share I hope this is what you are looking for. basically you need to set the sticky bit for the owner - I assume that the user1 home folder is owned by user1. chmod u+s "user1 home folder" this way any file/folder gets created will be owed by user1. http://www.zzee.com/solutions/chmod-help.shtml On 1/23/07, Sascha < tdy_shadow@yahoo.com> wrote:now theres another problem: when i access a share and create a file the user will be forced to %U and not to the user who owns the homes share. when i set force user =%S then everyone can connect to the share. is there a chance that when i give user1 the rights to connect to user2 homes share (via setfacl) and user1 creates a file that this file will be chown to user2. i dont want to create a special share or groups because when i do it that way i would have 50 extra shares in my smb.conf. thanks for your help again and best regards ----- Original Message ---- From: Sascha <tdy_shadow@yahoo.com> To: samba@lists.samba.org Sent: Tuesday, January 23, 2007 12:39:20 PM Subject: Re: [Samba] access users homes share thanks for your help. i just did a setfacl on the users home directory and i could access it. really nice :) thanks again for the help best regards ----- Original Message ---- From: Maur?cio Szabo <mauricio.szabo@gmail.com> To: Sascha < tdy_shadow@yahoo.com> Sent: Tuesday, January 23, 2007 12:27:32 PM Subject: Re: [Samba] access users homes share You can add user1 to a group that user2 is currently in, and set permissions of the user2 home share to be "group-readable". For example, user2 is a member of the group "foo", so you can add user1 to "foo" group, add user2's home share to "foo" group, and finally do a chmod g+wxr to user2's home folder. On 1/23/07, Sascha <tdy_shadow@yahoo.com> wrote: hey list, we are currently migrating our users from novell to samba. now we have one problem: in novell we could give e.g. user1 access to users2 home share so he could modify, delete or add files on this share. in samba we defined a global homes share that is mapped on logon. so how can we give user1 the needed rights? here is the definition of the homes share in smb.conf: [homes] comment = user share browseable = no writeable = yes write list = %U create mask = 0600 directory mask = 0700 force user = %U force group = Administrators oplocks = true do we need to add a special share and group? thanks for help and best regards ____________________________________________________________________________________ Don't pick lemons. See all the new 2007 cars at Yahoo! Autos. http://autos.yahoo.com/new_cars.html -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba Air conditioners and Computers are the same - they both crash when you open Windows. ____________________________________________________________________________________ 8:00? 8:25? 8:40? Find a flick in no time with the Yahoo! Search movie showtime shortcut. http://tools.search.yahoo.com/shortcuts/#news -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba ____________________________________________________________________________________ Looking for earth-friendly autos? Browse Top Cars by "Green Rating" at Yahoo! Autos' Green Center. http://autos.yahoo.com/green_center/ -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba -- "Unless you try to do something beyond what you have already mastered, you will never grow." Ronald E. Osborn ____________________________________________________________________________________ Now that's room service! Choose from over 150,000 hotels in 45,000 destinations on Yahoo! Travel to find your fit. http://farechase.yahoo.com/promo-generic-14795097 -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba -- CAMPANHA C?U PARA TODOS - Pelo desperd?cio zero na ilumina??o noturna! http://www.revistamacrocosmo.com/ceuparatodos/ <----- Fa?a sua parte Air conditioners and Computers are the same - they both crash when you open Windows. ____________________________________________________________________________________ Be a PS3 game guru. Get your game face on with the latest PS3 news and previews at Yahoo! Games. http://videogames.yahoo.com/platform?platform=120121
thanks for your help, BUT ;) im looking for a basic solution. with this solution i have to add too many groups. if there is no other way to achieve that i would do it your way but maybe there is a lot easier way... ?!? ----- Original Message ---- From: Toby Bluhm <tkbsmb@midwestinstruments.com> To: samba@lists.samba.org Sent: Tuesday, January 23, 2007 6:44:54 PM Subject: Re: [Samba] access users homes share You want the users' share to initially be private? Users can selectively have another user or users access to their private share? If that's what you're looking for and samba is the PDC, I would: [homes] comment = user share browseable = no writeable = yes create mask = 0660 directory mask = 2770 oplocks = true Give all users their own private default group and change permissions. Example: user joe, default group is joe. Configure joe's directories: chown -R joe.joe /home/joe find /home/joe -type d -exec chmod 2770 {}\; find /home/joe -type f -exec chmod 660 {}\; If user joe wants to let user jim access his stuff, add jim to joe group. When joe is tired of jim stomping on his stuff: remove jim from joe's group find /home/joe -user jim -exec chown joe {} \; Sascha wrote:> yes, but whats the better way ;( > > maybe the solution for that is tooo simple so that we cant find it :) > > am i the only person who has this problem ? > > ----- Original Message ---- > From: Maur?cio Szabo <mauricio.szabo@gmail.com> > To: Sascha <tdy_shadow@yahoo.com> > Sent: Tuesday, January 23, 2007 5:05:46 PM > Subject: Re: [Samba] access users homes share > > Well, you can write "force create mask = 0777" in the user's home share. "user1" and "user2" will both have control of the files in the folder, and no other user will have control because they can't enter on user1 or user2 home share. > > > Besides, I think there must be a better way of doing this :-) > > On 1/23/07, Sascha <tdy_shadow@yahoo.com > >> wrote:do u mean sticky bit or suid ? that does not work. i looking for a way to let samba do the chmod. something with force user. i currently use force user = %U but that wont work because with that option the user who connects to the share will get the permission. >> > > > ----- Original Message ---- > From: M Azer <azermina@gmail.com> > To: Sascha <tdy_shadow@yahoo.com> > Cc: > samba@lists.samba.org > Sent: Tuesday, January 23, 2007 3:36:48 PM > Subject: Re: [Samba] access users homes share > > I hope this is what you are looking for. basically you need to set the sticky bit for the owner - I assume that the user1 home folder is owned by user1. > > chmod u+s "user1 home folder" > this way any file/folder gets created will be owed by user1. > > http://www.zzee.com/solutions/chmod-help.shtml > > > On 1/23/07, Sascha < > tdy_shadow@yahoo.com> wrote:now theres another problem: when i access a share and create a file the user will be forced to %U and not to the user who owns the homes share. when i set force user =%S then everyone can connect to the share. > > > is there a chance that when i give user1 the rights to connect to user2 homes share (via setfacl) and user1 creates a file that this file will be chown to user2. i dont want to create a special share or groups because when i do it that way i would have 50 extra shares in my > > smb.conf. > > thanks for your help again and best regards > > ----- Original Message ---- > From: Sascha <tdy_shadow@yahoo.com> > To: > > samba@lists.samba.org > Sent: Tuesday, January 23, 2007 12:39:20 PM > Subject: Re: [Samba] access users homes share > > thanks for your help. i just did a setfacl on the users home directory and i could access it. really nice :) > > > > thanks again for the help > > best regards > > ----- Original Message ---- > From: Maur?cio Szabo <mauricio.szabo@gmail.com> > To: Sascha < > > tdy_shadow@yahoo.com> > Sent: Tuesday, January 23, 2007 12:27:32 PM > Subject: Re: [Samba] access users homes share > > You can add user1 to a group that user2 is currently in, and set permissions of the user2 home share to be "group-readable". > > > > For example, user2 is a member of the group "foo", so you can add user1 to "foo" group, add user2's home share to "foo" group, and finally do a chmod g+wxr to user2's home folder. > > > > > On 1/23/07, Sascha <tdy_shadow@yahoo.com> wrote: > hey list, > > we are currently migrating our users from novell to samba. now we have one problem: in novell we could give > > e.g. user1 access to users2 home share so he could modify, delete or add files on this share. in samba we defined a global homes share that is mapped on logon. so how can we give user1 the needed rights? > > here is the definition of the homes share in > > smb.conf: > > [homes] > comment = user share > browseable = no > writeable = yes > write list = %U > create mask = 0600 > directory mask = 0700 > > force user = %U > > > force group = Administrators > oplocks = true > > do we need to add a special share and group? > > thanks for help and best regards > > > >-- -Toby -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba ____________________________________________________________________________________ Do you Yahoo!? Everyone is raving about the all-new Yahoo! Mail beta. http://new.mail.yahoo.com
yes, thats what ive tried. but if user2 creates a file in user1 home directory, user2 gets all permission and user1 cant modified or delete the file because of the force user option. [homes] comment = user share browseable = no writeable = yes write list = %U create mask = 0600 directory mask = 0700 force user = %U force group = Administrators oplocks = true best regards ----- Original Message ---- From: Jay Flory <jflory@aeiconsultants.com> To: Sascha <tdy_shadow@yahoo.com> Sent: Wednesday, January 24, 2007 3:56:51 PM Subject: Re: access users homes share Sascha Have you considered using defaults in your ACL list for the directories. For example the following two commands will ensure that user1 and user2 will have complete rights to all files created in the directory: setfacl -d -m u:user2:rwx directoryname setfacl -d -m u:user1:rwx directoryname You may wish to use the recursive (-r) option with the above if you wish the subdirectories to have the same defaults. And lastly you may need to add the following for the mask: setfacl -d -m m::rwx directoryname Thanks Jay ----- Original Message ----- From: "Sascha" <tdy_shadow@yahoo.com> Newsgroups: gmane.network.samba.general Sent: Tuesday, January 23, 2007 5:28 AM Subject: Re: access users homes share now theres another problem: when i access a share and create a file the user will be forced to %U and not to the user who owns the homes share. when i set force user =%S then everyone can connect to the share. is there a chance that when i give user1 the rights to connect to user2 homes share (via setfacl) and user1 creates a file that this file will be chown to user2. i dont want to create a special share or groups because when i do it that way i would have 50 extra shares in my smb.conf. thanks for your help again and best regards ----- Original Message ---- From: Sascha <tdy_shadow@yahoo.com> To: samba@lists.samba.org Sent: Tuesday, January 23, 2007 12:39:20 PM Subject: Re: [Samba] access users homes share thanks for your help. i just did a setfacl on the users home directory and i could access it. really nice :) thanks again for the help best regards ----- Original Message ---- From: Maur?cio Szabo <mauricio.szabo@gmail.com> To: Sascha <tdy_shadow@yahoo.com> Sent: Tuesday, January 23, 2007 12:27:32 PM Subject: Re: [Samba] access users homes share You can add user1 to a group that user2 is currently in, and set permissions of the user2 home share to be "group-readable". For example, user2 is a member of the group "foo", so you can add user1 to "foo" group, add user2's home share to "foo" group, and finally do a chmod g+wxr to user2's home folder. On 1/23/07, Sascha <tdy_shadow@yahoo.com> wrote: hey list, we are currently migrating our users from novell to samba. now we have one problem: in novell we could give e.g. user1 access to users2 home share so he could modify, delete or add files on this share. in samba we defined a global homes share that is mapped on logon. so how can we give user1 the needed rights? here is the definition of the homes share in smb.conf: [homes] comment = user share browseable = no writeable = yes write list = %U create mask = 0600 directory mask = 0700 force user = %U force group = Administrators oplocks = true do we need to add a special share and group? thanks for help and best regards ____________________________________________________________________________________ Don't pick lemons. See all the new 2007 cars at Yahoo! Autos. http://autos.yahoo.com/new_cars.html -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba Air conditioners and Computers are the same - they both crash when you open Windows. ____________________________________________________________________________________ 8:00? 8:25? 8:40? Find a flick in no time with the Yahoo! Search movie showtime shortcut. http://tools.search.yahoo.com/shortcuts/#news -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba ____________________________________________________________________________________ Looking for earth-friendly autos? Browse Top Cars by "Green Rating" at Yahoo! Autos' Green Center. http://autos.yahoo.com/green_center/ -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba ____________________________________________________________________________________ 8:00? 8:25? 8:40? Find a flick in no time with the Yahoo! Search movie showtime shortcut. http://tools.search.yahoo.com/shortcuts/#news