I'm new to this group so I hope that this is the right place to ask this question (if not, let me know): We are setting up several Samba servers and we've run into a problem with file permissions. We've have a few shared folders that we'd like for some GROUPS to have read/write access and other GROUPS to have only read access. I cannot figure out how to do this because Linux/Unix seems to have the limitation that a file can only be owned by one user and one group, and the permissions are only applicable to the owner (user and group). Is there a way to assign more than one group to a file, and make it so the different groups have different permissions (Like NDS and Microsoft do)? If not, how do people get around this? Thanks for any help. Jess Cannata Systems Administrator Advanced Research Computing Georgetown University _________________________________________________________________ MSN 8 helps eliminate e-mail viruses. Get 2 months FREE*. http://join.msn.com/?page=features/virus
Check out the smb.conf parameters 'read list=' & 'write list=' with which you can assign users and groups these permissions to shares. HTH Noel -----Original Message----- From: Jess Cannata [mailto:doubtful500@hotmail.com] Sent: 06 November 2002 14:28 To: samba@lists.samba.org Subject: [Samba] Multiple Groups Assigned to a File I'm new to this group so I hope that this is the right place to ask this question (if not, let me know): We are setting up several Samba servers and we've run into a problem with file permissions. We've have a few shared folders that we'd like for some GROUPS to have read/write access and other GROUPS to have only read access. I cannot figure out how to do this because Linux/Unix seems to have the limitation that a file can only be owned by one user and one group, and the permissions are only applicable to the owner (user and group). Is there a way to assign more than one group to a file, and make it so the different groups have different permissions (Like NDS and Microsoft do)? If not, how do people get around this? Thanks for any help. Jess Cannata Systems Administrator Advanced Research Computing Georgetown University _________________________________________________________________ MSN 8 helps eliminate e-mail viruses. Get 2 months FREE*. http://join.msn.com/?page=features/virus -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba --- Incoming mail is certified Virus Free. Checked by AVG anti-virus system (http://www.grisoft.com). Version: 6.0.404 / Virus Database: 228 - Release Date: 15/10/2002 --- Outgoing mail is certified Virus Free. Checked by AVG anti-virus system (http://www.grisoft.com). Version: 6.0.404 / Virus Database: 228 - Release Date: 15/10/2002
Should have added that if you want more sophisticated (and therefore more complex administration) permissions then you can use ACLs. However at the moment this requires that you compile your kernel with ACL support using patches or grab an ACL enabled kernel/filesystem like XFS from SGI. Noel -----Original Message----- From: Jess Cannata [mailto:doubtful500@hotmail.com] Sent: 06 November 2002 14:28 To: samba@lists.samba.org Subject: [Samba] Multiple Groups Assigned to a File I'm new to this group so I hope that this is the right place to ask this question (if not, let me know): We are setting up several Samba servers and we've run into a problem with file permissions. We've have a few shared folders that we'd like for some GROUPS to have read/write access and other GROUPS to have only read access. I cannot figure out how to do this because Linux/Unix seems to have the limitation that a file can only be owned by one user and one group, and the permissions are only applicable to the owner (user and group). Is there a way to assign more than one group to a file, and make it so the different groups have different permissions (Like NDS and Microsoft do)? If not, how do people get around this? Thanks for any help. Jess Cannata Systems Administrator Advanced Research Computing Georgetown University _________________________________________________________________ MSN 8 helps eliminate e-mail viruses. Get 2 months FREE*. http://join.msn.com/?page=features/virus -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba --- Incoming mail is certified Virus Free. Checked by AVG anti-virus system (http://www.grisoft.com). Version: 6.0.404 / Virus Database: 228 - Release Date: 15/10/2002 --- Outgoing mail is certified Virus Free. Checked by AVG anti-virus system (http://www.grisoft.com). Version: 6.0.404 / Virus Database: 228 - Release Date: 15/10/2002
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1> Message: 14 > From: Noel Kelly <nkelly@citrusnetworks.net> > To: 'Jess Cannata' <doubtful500@hotmail.com>, samba@lists.samba.org > Subject: RE: [Samba] Multiple Groups Assigned to a File > Date: Wed, 6 Nov 2002 15:07:33 -0000 > > >> -----Original Message----- >> From: Jess Cannata [mailto:doubtful500@hotmail.com] >> Sent: 06 November 2002 14:28 >> To: samba@lists.samba.org >> Subject: [Samba] Multiple Groups Assigned to a File >> >> >> I'm new to this group so I hope that this is the right place to ask this >> question (if not, let me know): >> >> We are setting up several Samba servers and we've run into a problemwith>> file permissions. We've have a few shared folders that we'd like forsome>> GROUPS to have read/write access and other GROUPS to have only readaccess.>> I cannot figure out how to do this because Linux/Unix seems to have the >> limitation that a file can only be owned by one user and one group,and the>> permissions are only applicable to the owner (user and group). Isthere a>> way to assign more than one group to a file, and make it so thedifferent>> groups have different permissions (Like NDS and Microsoft do)? Ifnot, how>> do people get around this? >> >> Thanks for any help.> Should have added that if you want more sophisticated (and therefore more > complex administration) permissions then you can use ACLs. However at the > moment this requires that you compile your kernel with ACL support using > patches or grab an ACL enabled kernel/filesystem like XFS from SGI. >ACLs don't require that you recompile your kernel, just choose your distro. ACLs (with support in samba) have worked out the box (on XFS) on Mandrake since 8.1, and 9.0 also supports ACLs on ext2/ext3. With 2.4.19 kernels and later however, you need to mount any FS which uses ACLs with the acl option before they will work, and this is not the default (since it breaks LSB-copmliance). I think SuSE also has ACL support, but I don't use it, so can't be sure. Regards, Buchan - -- |----------------Registered Linux User #182071-----------------| Buchan Milne Mechanical Engineer, Network Manager Cellphone * Work +27 82 472 2231 * +27 21 8828820x121 Stellenbosch Automotive Engineering http://www.cae.co.za GPG Key http://ranger.dnsalias.com/bgmilne.asc 1024D/60D204A7 2919 E232 5610 A038 87B1 72D6 AC92 BA50 60D2 04A7 -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.1 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQE9z4YKrJK6UGDSBKcRAg0gAJwKNEiqjEN1RDgONG/RzhSghdyKBQCgjBk/ nUWefO9nZ3IZ9DlcNA9agTM=IGfp -----END PGP SIGNATURE-----