samba - May 2021 - Some questions about sharing and permission.

Thank you.
I can't use "chown"??






On Friday, May 14, 2021, 05:15:50 PM GMT+4:30, Rowland penny via samba <samba
at lists.samba.org> wrote:





On 14/05/2021 13:27, Jason Long via samba wrote:
> Hello,
> According to
"https://wiki.samba.org/index.php/Setting_up_a_Share_Using_Windows_ACLs#Adding_a_Share"
tutorial, I added a directory and set a permission for it as below:
>
> # mkdir -p /home/share/
> # chown root:"login2" share/
> # chmod 0770 share/
> # chcon -t samba_share_t /home/share/
>
> Then, added below lines into "/usr/local/samba/etc/smb.conf"
file:
>
> [Share]
> path = /home/share
> writable = yes
> browsable = yes
> acl_xattr:ignore system acl = yes

Can I ask, if you are following the wikipage, why did you use 'writable 
= yes' instead of the 'read only = no' as shown on the page ?

Not that it makes any difference, they both mean the same ?

> The members of "login2" groups can read and write
"share" directory, but other can't. If I want other groups or
users have read permission, but not write permission, then what should I do?


Start a Windows client, navigate to the share and set the required 
permissions from there.

Rowland



-- 
To unsubscribe from this list go to the following URL and read the
instructions:? https://lists.samba.org/mailman/options/samba

On 14/05/2021 13:57, Jason Long wrote:
> Thank you.
> I can't use "chown"?

Yes and no, for a start I think you mean 'chmod' (chown changes 
ownership) and? 'acl_xattr:ignore system acl = yes' means exactly that, 
ignore the normal (ugo) acl's set by chmod.

I am fairly sure that I have said this at least once, forget the old way 
of doing things, you need to learn the AD way of doing things, 
especially if you are using a DC as a fileserver (which is not recommended).

Rowland