samba - Jan 2004 - Permissions and authorities

Hello,

We've just migrated from Netware to Samba and have only 1 problem that's
affecting our users.

When a user creates a new document in a directory the owner and group or
both set to root. The directories are owned by a specific user and there is
also a group associated with the directory.

I was expecting that any new documents created would have the same user and
owner as the directory within which they are being created.

What am I doing wrong here?

Thanks


Glenn

Le ven 30/01/2004 ? 11:37, Glenn Robinson a ?crit :
> I was expecting that any new documents created would have the same user
and
> owner as the directory within which they are being created.
Nope, they are created with the identity of the user on the box,
fe. uid = dmorel
gid = users

you can map users to different identities, but you'd probably rather not
to if you're starting. What your story suggests is you mapped your users
to the root account which is quite bad. Describe your setup a little
more.
> What am I doing wrong here?
Probably not reading the manual thoroughly enough :-)

D.Morel
-- 
***********************************************
david.morel@amakuru.net
OpenPGP public key: http://www.amakuru.net/dmorel.asc
28192ef126bc871757cb7d97f4a44536



Glenn
----- Original Message ----- 
From: "David Morel" <david.morel@amakuru.net>
To: "Glenn Robinson" <glenn@flying-fields.co.uk>
Sent: Friday, January 30, 2004 10:49 AM
Subject: Re: [Samba] Permissions and authorities

I'm aware that I can do things like mapping Windows user
'Administrator' to
Linux user 'root' in the smbusers file but I haven't touched this
file.

I have a folder called apps which is owned by user root with a group of
root. I have the following share attributes in my smb.conf:

[apps]
    comment = Applications
    writeable = yes
    path = /apps
    write list = root, cuffm
    create mode =  0666
    directory mode = 0777
    guest ok = no

I've had to set rw for users in create mode so that everyone can get access
to new files created in this share.

Glenn

Le ven 30/01/2004 ? 11:37, Glenn Robinson a ?crit :
> I was expecting that any new documents created would have the same user
and
> owner as the directory within which they are being created.
Nope, they are created with the identity of the user on the box,
fe. uid = dmorel
gid = users

you can map users to different identities, but you'd probably rather not
to if you're starting. What your story suggests is you mapped your users
to the root account which is quite bad. Describe your setup a little
more.
> What am I doing wrong here?
Probably not reading the manual thoroughly enough :-)

D.Morel
-- 
***********************************************
david.morel@amakuru.net
OpenPGP public key: http://www.amakuru.net/dmorel.asc
28192ef126bc871757cb7d97f4a44536



Glenn
----- Original Message ----- 
From: "David Morel" <david.morel@amakuru.net>
To: "Glenn Robinson" <glenn@flying-fields.co.uk>
Sent: Friday, January 30, 2004 10:49 AM
Subject: Re: [Samba] Permissions and authorities

I'm aware that I can do things like mapping Windows user
'Administrator' to
Linux user 'root' in the smbusers file but I haven't touched this
file.

I have a folder called apps which is owned by user root with a group of
root. I have the following share attributes in my smb.conf:

[apps]
    comment = Applications
    writeable = yes
    path = /apps
    write list = root, cuffm
    create mode =  0666
    directory mode = 0777
    guest ok = no

I've had to set rw for users in create mode so that everyone can get access
to new files created in this share.

Glenn
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


This section looks ok. Can you post your full smb.conf ?
-- 
***********************************************
david.morel@amakuru.net
OpenPGP public key: http://www.amakuru.net/dmorel.asc
28192ef126bc871757cb7d97f4a44536

Here is the smb.conf file:


# Samba config file created using SWAT

# from localhost (127.0.0.1)

# Date: 2004/01/28 16:14:57

# Global parameters

[global]

workgroup = xxxxxxxxxx

netbios name = SAMBA

server string = Samba PDC

interfaces = 123.456.789.012

encrypt passwords = Yes

log level = 1

syslog = 0

time server = Yes

unix extensions = Yes

socket options = SO_KEEPALIVE IPTOS_LOWDELAY TCP_NODELAY

printcap name = lpstat

add user script = /usr/sbin/useradd -d /dev/null -g 100 -s /bin/false %u

logon script = logon.bat

logon path = 

logon drive = g:

logon home = \\samba\%U

domain logons = Yes

os level = 255

preferred master = Yes

domain master = Yes

wins support = Yes

host msdfs = Yes

guest ok = Yes

printing = cups

veto files = /*.eml/*.nws/riched20.dll/*.{*}/

[netlogon]

path = /usr/local/samba/lib/netlogon

write list = root

[homes]

comment = %U

path = /home/borg/users/%U

read only = No

create mask = 0600

directory mask = 0775

map archive = No

browseable = No

[Data]

path = /home

read only = No

create mask = 0666

directory mask = 0775

guest ok = No

map archive = No

[apps]

comment = Applications

writeable = yes

path = /apps

write list = root,  cuffm

create mode = 0666

directory mode = 0777

guest ok = No

#valid users = @Public

[Printers]

comment = All Printers

path = /tmp

printable = Yes

browseable = No

[print$]

comment = Printer Drivers

path = /apps

write list = @ntadmin root

force group = ntadmin

create mask = 0664

[dfs]

path = /export/dfsroot

msdfs root = Yes






Glenn