samba - Apr 2010 - Samba permissions problem, winbind auth, ldap nss

Greetings list,

I'm having a problem setting file permissions for users connecting to my
samba file server.  CentOS 5.4, samba-3.0.33-3.15.el5_4.1.

I have authentication configured to use winbind, and name services
configured to use LDAP.

I've configured valid users in smb.conf to contain DOMAIN\username for the
users I want to be able to connect.

They can browse the share just fine, and they have group ownership, mode
775.

What I'm confused about is that they can create a new file or directory, but
they cannot delete or rename a file or directory - even one they've created.

If I create a test file, give it a mode of 777, they cannot rename or delete
(or edit) that file.

Also - I have read only = no in smb.conf for that share.

Any suggestions on what I am missing would be most appreciated.

Thanks,

Eddy
--------------------

Sorry folks - false alarm.  A bit of searching in the archives showed me
that I needed:

admin users = DOMAIN\username

Fixed the problem.

Carry on...


---------- Forwarded message ----------
From: Eddy Sturg <tride2009 at gmail.com>
Date: Wed, Apr 7, 2010 at 10:40 AM
Subject: Samba permissions problem, winbind auth, ldap nss
To: samba at lists.samba.org


Greetings list,

I'm having a problem setting file permissions for users connecting to my
samba file server.  CentOS 5.4, samba-3.0.33-3.15.el5_4.1.

I have authentication configured to use winbind, and name services
configured to use LDAP.

I've configured valid users in smb.conf to contain DOMAIN\username for the
users I want to be able to connect.

They can browse the share just fine, and they have group ownership, mode
775.

What I'm confused about is that they can create a new file or directory, but
they cannot delete or rename a file or directory - even one they've created.

If I create a test file, give it a mode of 777, they cannot rename or delete
(or edit) that file.

Also - I have read only = no in smb.conf for that share.

Any suggestions on what I am missing would be most appreciated.

Thanks,

Eddy
--------------------