samba - Oct 2009 - Samba as fileserver on Active Directory domain

Hello,

We have a Gentoo box running Samba and is a member of the Active 
Directory domain. This Gentoo box will be a fileserver when everything 
is completed and setup as it should.  I want our users to login to their 
computer (Computers are all members of the same Active Directory domain) 
using Active Directory accounts/domain for authentication. I am using 
Winbind for Active Directory authentication/integration. I'm almost done 
except file permission issue.  All is working smoothly (ie. wbinfo, 
smbclient, getent, etc.). I can access/map the shared drive on the 
Gentoo box from any Windows computer, login to a machine without a 
problem using Active Directory accounts.  The Active Directory 
authentication with Winbind is working as it should.

For some odd reason, I can't figure out how to give permissions to all 
users the ability to make changes/add new folders on the shared drive. 
 I am getting access denied even when the users or group are valid users 
of the shared drive per smb.conf.  Below is my smb.conf shared 
configuration:

[shared]
        comment = shared
        path = /shared/drive
        read only = no
        inherit permissions = yes
        create mask = 755
        directory mask = 755
        valid users = @"MYDOMAIN+mygroup"
        browseable = yes
        writable = yes

Any help would be greatly appreciated.

-Ivan

Hello,

We have a Gentoo box running Samba and is a member of the Active 
Directory domain. This Gentoo box will be a fileserver when everything 
is completed and setup as it should.  I want our users to login to their 
computer (Computers are all members of the same Active Directory domain) 
using Active Directory accounts/domain for authentication. I am using 
Winbind for Active Directory authentication/integration. I'm almost done 
except file permission issue.  All is working smoothly (ie. wbinfo, 
smbclient, getent, etc.). I can access/map the shared drive on the 
Gentoo box from any Windows computer, login to a machine without a 
problem using Active Directory accounts.  The Active Directory 
authentication with Winbind is working as it should.

For some odd reason, I can't figure out how to give permissions to all 
users the ability to make changes/add new folders on the shared drive. 
 I am getting access denied even when the users or group are valid users 
of the shared drive per smb.conf.  Below is my smb.conf shared 
configuration:

[shared]
        comment = shared
        path = /shared/drive
        read only = no
        inherit permissions = yes
        create mask = 755
        directory mask = 755
        valid users = @"MYDOMAIN+mygroup"
        browseable = yes
        writable = yes

Any help would be greatly appreciated.

-Ivan

did you set /shared/drive to 777 permissions?

Adam Williams wrote:
> did you set /shared/drive to 777 permissions?
It was set to 755.

Well, try setting it to 777 to see if you have a rights problem or a setup
error..

Or use 775 for the shared location and do a chgrp "MYDOMAIN+mygroup"
on it..


Paul

On Fri, Oct 2, 2009 at 9:45 PM, Ivan Ordonez <iordonez at berkeley.edu>
wrote:
>
>
> Adam Williams wrote:
>
>> did you set /shared/drive to 777 permissions?
>>
>
> It was set to 755.
> --
> To unsubscribe from this list go to the following URL and read the
> instructions:  https://lists.samba.org/mailman/options/samba
>