It seems that a share mounted with cifs *shows* the correct file permissions, but treats every user on the system as the person who mounted the share. If I mount a share as a user with full access, and then try to create a file as a user who should have no access, it works. for example: # mount.cifs //192.168.150.101/test /tmp/test/ -o user=mrroach # ls -ld /tmp/test/testdir/ drwxrwxr-x 2 root root 0 2004-08-06 02:38 /tmp/test/testdir/ # su guest $ touch /tmp/test/testdir/should_give_an_error $ ls -l /tmp/test/testdir/should_give_an_error -rw-r--r-- 1 mrroach mrroach 0 2004-08-03 00:07 /tmp/test/testdir/should_give_an_error Is this working as intended? am I missing something? (Debian systems, Linux 2.6.7 on client, 2.6.6 on server, samba 3.0.5 on both) -Mark smb.conf: [global] workgroup = roach server string = %h server (Samba %v) dns proxy = yes unix extensions = yes log file = /var/log/samba/log.%m max log size = 1000 syslog = 0 panic action = /usr/share/samba/panic-action %d security = user encrypt passwords = true passdb backend = tdbsam guest obey pam restrictions = yes invalid users = root passwd program = /usr/bin/passwd %u passwd chat = *Enter\snew\sUNIX\spassword:* %n\n *Retype\snew\sUNIX \spassword:* %n\n . socket options = TCP_NODELAY [homes] comment = Home Directories browseable = no writable = yes create mask = 0775 directory mask = 0775 [test] path = /home/mrroach/test writable = yes [printers] comment = All Printers browseable = no path = /tmp printable = yes public = no writable = no create mode = 0700 [print$] comment = Printer Drivers path = /var/lib/samba/printers browseable = yes read only = yes guest ok = no