Hello, Samba 3.0.23d PDC on CentOS 4.4, smbpasswd backend, Windows XP clients. I recently took over the administration of a small LAN (~35 hosts). The shared drives had been implemented in a hurry and the configuration had never been revisited. Linux groups had been enabled for different shares, but this had never been enforced on the file server. I have implemented linux group quotas on the file system that contains our shared folders, but it has not worked according to my expectations. I changed the group ownership of each share and its contents according to the relevant role and appropriate access level, and set the group sticky on each share and its subfolders. I also added the default create modes for each share into smb.conf: force create mode = 0770 force directory mode = 0770 After this I enabled quotas on the filesystem for the specific group that owns each share. However, in Windows every folder shows with the same usage and quota regardless of the assigned quota, and that quota seems to be the quota assigned to the primary group that each user belongs to i.e. users. If I remove the quota on the users group then the full filesystem space is displayed in Windows Explorer for every share. If I add the option: force group = +sales to the sales share, for example, the correct quota for sales is visible in explorer, however any user can then access the sales folder regardless of the groups that they belong to. Is there a way I can enable group quotas that are displayed correctly in Explorer and also limit access to only the members of the appropriate groups for each share? Best regards, Simon Barrett ----------------------------------------------------------------- Find the home of your dreams with eircom net property Sign up for email alerts now http://www.eircom.net/propertyalerts
Hey, We have a similar setup here. I have all the users of a share in a secondary group together. chown whomever:sharegroup on the share directory chmod 2770 on the share directory Here is the relevant bit of my smb.conf [IT] comment = IT Test Share path = /home/it valid users = @it force group = it read only = No create mask = 0770 directory mask = 0770 strict allocate = Yes use sendfile = Yes preserve case = No hide special files = Yes hide unreadable = Yes browseable = No fstype = FAT wide links = No For maintainability I would recommend reading up on the copy option of smb.conf for shares. I have 20+ shares which are all setup identically and have but one place to make changes to all of them. As a side note for a shortcut I suspect you are looking for the valid users option of smb.conf. Pat On Mon, 2008-05-12 at 11:24 +0100, sgbarrett@eircom.net wrote:> Hello, > > Samba 3.0.23d PDC on CentOS 4.4, smbpasswd backend, Windows XP clients. > > I recently took over the administration of a small LAN (~35 hosts). The shared drives had been implemented in a hurry and the configuration had never been revisited. Linux groups had been enabled for different shares, but this had never been enforced on the file server. > > I have implemented linux group quotas on the file system that contains our shared folders, but it has not worked according to my expectations. > > I changed the group ownership of each share and its contents according to the relevant role and appropriate access level, and set the group sticky on each share and its subfolders. I also added the default create modes for each share into smb.conf: > > force create mode = 0770 > force directory mode = 0770 > > After this I enabled quotas on the filesystem for the specific group that owns each share. However, in Windows every folder shows with the same usage and quota regardless of the assigned quota, and that quota seems to be the quota assigned to the primary group that each user belongs to i.e. users. If I remove the quota on the users group then the full filesystem space is displayed in Windows Explorer for every share. > > If I add the option: > > force group = +sales > > to the sales share, for example, the correct quota for sales is visible in explorer, however any user can then access the sales folder regardless of the groups that they belong to. > > Is there a way I can enable group quotas that are displayed correctly in Explorer and also limit access to only the members of the appropriate groups for each share? > > Best regards, > > Simon Barrett > > > ----------------------------------------------------------------- > Find the home of your dreams with eircom net property > Sign up for email alerts now http://www.eircom.net/propertyalerts > >
Many thanks, the 'valid users' option is exactly what was missing. Regards, Simon Pat Riehecky <prieheck@iwu.edu> wrote: < < Hey, < < We have a similar setup here. I have all the users of a share in a < secondary group together. < < chown whomever:sharegroup on the share directory < chmod 2770 on the share directory < < Here is the relevant bit of my smb.conf < [IT] < comment = IT Test Share < path = /home/it < valid users = @it < force group = it < read only = No < create mask = 0770 < directory mask = 0770 < strict allocate = Yes < use sendfile = Yes < preserve case = No < hide special files = Yes < hide unreadable = Yes < browseable = No < fstype = FAT < wide links = No < < < For maintainability I would recommend reading up on the copy option of < smb.conf for shares. I have 20+ shares which are all setup identically < and have but one place to make changes to all of them. < < As a side note for a shortcut I suspect you are looking for the valid < users option of smb.conf. < < Pat < < On Mon, 2008-05-12 at 11:24 +0100, sgbarrett@eircom.net wrote: < > Hello, < > < > Samba 3.0.23d PDC on CentOS 4.4, smbpasswd backend, Windows XP clients. < > < > I recently took over the administration of a small LAN (~35 hosts). The shared drives had been implemented in a hurry and the configuration had never been revisited. Linux groups had been enabled for different shares, but this had never been enforced on the file server. < > < > I have implemented linux group quotas on the file system that contains our shared folders, but it has not worked according to my expectations. < > < > I changed the group ownership of each share and its contents according to the relevant role and appropriate access level, and set the group sticky on each share and its subfolders. I also added the default create modes for each share into smb.conf: < > < > force create mode = 0770 < > force directory mode = 0770 < > < > After this I enabled quotas on the filesystem for the specific group that owns each share. However, in Windows every folder shows with the same usage and quota regardless of the assigned quota, and that quota seems to be the quota assigned to the primary group that each user belongs to i.e. users. If I remove the quota on the users group then the full filesystem space is displayed in Windows Explorer for every share. < > < > If I add the option: < > < > force group = +sales < > < > to the sales share, for example, the correct quota for sales is visible in explorer, however any user can then access the sales folder regardless of the groups that they belong to. < > < > Is there a way I can enable group quotas that are displayed correctly in Explorer and also limit access to only the members of the appropriate groups for each share? < > < > Best regards, < > < > Simon Barrett < > < > < > ----------------------------------------------------------------- Find the home of your dreams with eircom net property Sign up for email alerts now http://www.eircom.net/propertyalerts