Hi,
I'd like to set a share as writable for a specific users' group, and
only
readable for another, so I did the following:
[global]
netbios name ? ? ?= SEDELDAP
workgroup = LDAP
security = user
passdb backend = ldapsam:ldap://localhost/
obey pam restrictions = no
ldap admin dn = cn=admin,dc=MyHost,dc=com
ldap suffix = dc=MyHost,dc=com
ldap group suffix = ou=Group
ldap user suffix = ou=People
ldap machine suffix = ou=Computers
ldap idmap suffix = ou=Users
ldap ssl = off
domain logons = yes
follow symlinks = yes
wide links = yes
unix extensions = no
map to guest = Bad User
guest account = guest.samba
[LABORATORIO_SMB]
comment = Cartella privata Laboratorio
path = /mnt/samba/lab_smb
browsable = yes
available = yes
valid users = @laboratorio @estero
write list = @laboratorio
read list = @estero
writable = yes
printable = no
force group = laboratorio
However, the @estero group cannot access the share at all
(NT_STATUS_ACCESS_DENIED). What am I doing wrong?
Thanks,
Luca
> However, the @estero group cannot access the share at all > (NT_STATUS_ACCESS_DENIED). What am I doing wrong?Most likely the filesystem permissions prevent users in @estero from executing or reading the /home/samba/lab_smb folder and/or the files in it. Cheers Alex
On Wednesday 09 April 2008, Luca Ferrari wrote:> [LABORATORIO_SMB] > ? ? ? ? comment ? ? ? ? ? = Cartella privata Laboratorio > ? ? ? ? path ? ? ? ? ? ? ?= /mnt/samba/lab_smb > ? ? ? ? browsable ? ? ? ? = yes > ? ? ? ? available ? ? ? ? = yes > ? ? ? ? valid users ? ? ? = @laboratorio @estero > ? ? ? ? write list ? ? ? ?= @laboratorio > ? ? ? ? read list ? ? ? ? = @estero > ? ? ? ? writable ? ? ? ? ?= yes > ? ? ? ? printable ? ? ? ? = no > ? ? ? ? force group ? ? ? = laboratorioTry: [LABORATORIO_SMB] comment = Cartella privata Laboratorio path = /mnt/samba/lab_smb browsable = yes valid users = @laboratorio, @estero write list = @laboratorio read only = yes -- Chris