samba - Dec 1999 - file-permition samba vrs novell !

hi there ! 
I want to change a novell-netware server to a samba server, and 
there i have a big problem with the file-permitions ! 
we use a big database-system. the clients  searches for the 
programs and for the data's on the same drive, so i must have one 
share with different rights (rwx ... for data and rx for programs)
the directory structure is the following:
vol1\
      \flex31d ........ programs
      \pps ....... datas

... the problem is, that if a windows-client uses the explorer, he can 
in an easy-way delete move ... all the databse ! 

in the novell i deleted the file-scan permition for the vol1\pps .. so 
each client could see an empty subdirectory of pps, but the 
database could touch all the files in it. 

i samba i tried the following:
       \vol1\flex31d         r-xr-x--- root ppsuser 
       \vol1\flex31d\file1  r-xr-x--- root ppsuser

       \vol1\pps        rwxrw---- root ppsuser
       \vol1\pps\fileb rwxrwx--- root ppsuser

..... in this example, i can't touch the file fileb as a memeber of the 
ppsuser group ?!

.... TOM mailto:tm@felder.co.at
         2nd mailto:t.margreiter@utanet.at
         http://www.felder.co.at

Hi Tom,
Looks like what is happening is that by setting up rwxrw---- permissions on pps 
directory, (which gives root the ability to cd into this directory but NO ONE 
ELSE - that is the result of removing the 'x' bit from group and other)
you
have inhibited SAMBA from cd'ing INTO this directory in order to access the 
file 'fileb'.  You would be able to 'see' the file in a
directory listing,
because you have 'read' access to the directory as a member of group
ppsuser,
but you wouldn't actually be able to cd INTO the directory as member of the 
group ppsuser because group ppsuser does not have 'x' right.
Make sense?
Don