Adam Kennedy
2003-Oct-22 20:05 UTC
[Samba] Possible to make samba ignore file permissions?
I'm stuck between a rock and a hard place. Is there a way to setup samba to pretty much ignore file permissions, but allow the write list of users to modify files in shares? The problem I have, is users need permission through samba to modify web pages, but they need to NOT have permission when they FTP in or through shell. -- Northern Indiana ESC Adam Kennedy - akennedy@niesc.k12.in.us Linux Specialist / Network Administrator Phone: (574) 254-0111 x113 Toll Free: 800-326-5642 Fax: (574) 254-0148
Troy.A Johnson
2003-Oct-22 20:19 UTC
[Samba] Possible to make samba ignore file permissions?
Adam, On the share you could make all files mode '644' and owned by user 'special'. Then use: force user = special force create mode = 644 force directory mode = 755 and maybe some other 'force' type parameters on that share. As long as special isn't in the writelist, things might work out for you. You could try something similar with 'force group'. Good luck, Troy P.S. - man smb.conf search for "force user" or "force group">>> "Adam Kennedy" <akennedy@niesc.k12.in.us> 10/22/03 03:05PM >>>I'm stuck between a rock and a hard place. Is there a way to setup samba to pretty much ignore file permissions, but allow the write list of users to modify files in shares? The problem I have, is users need permission through samba to modify web pages, but they need to NOT have permission when they FTP in or through shell. -- Northern Indiana ESC Adam Kennedy - akennedy@niesc.k12.in.us Linux Specialist / Network Administrator Phone: (574) 254-0111 x113 Toll Free: 800-326-5642 Fax: (574) 254-0148 -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Adam Kennedy ?rta: | I'm stuck between a rock and a hard place. | | Is there a way to setup samba to pretty much ignore file permissions, but | allow the write list of users to modify files in shares? | | The problem I have, is users need permission through samba to modify web | pages, but they need to NOT have permission when they FTP in or through shell. | | -- | Northern Indiana ESC | Adam Kennedy - akennedy@niesc.k12.in.us | Linux Specialist / Network Administrator | Phone: (574) 254-0111 x113 | Toll Free: 800-326-5642 | Fax: (574) 254-0148 | Sorry for saying that but I would suggest to try a non Samba aproach: If your webserver is apache you could try mod_dav which would allow your DAV enabled clients (MS Office 2000/XP, Win2k,XP, Liinux, etc.) to read/write the DAV enabled directories. As you would need to chown that directories to the user of your webserver, or if your filesystem suports give the rwx right by acl. In this way your users could write to the pages only through DAV and not via shell, ftp, etc. Good Luck! Geza Gemes -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.2 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQE/lusv/PxuIn+i1pIRAvhMAKCdAqTwV1VU/xzwkBAbIVBmt3VneACgt6pA yPodNnuqU2Tn9geVD4NqsO4=UyAh -----END PGP SIGNATURE-----