Hello,
I occasionally need to remove the write permissions from directories inside a
share to prevent users from accidentally deleting files inside that directory.
My problem is that I neither can view nor can change the permissions of
directories on my shares.
Curiously enough viewing and changing permissions of files in the same shares
works without a problem.
Is there anything I misconfigured?
My smb.conf looks like this:
[global]
### Network ###
netbios name = Fileserver
server string = Fileserver (%h V:%v)
### ad member ###
workgroup = INTRANET
realm = INTRANET.MYCOMPANY.DE
security = ADS
kerberos method = secrets and keytab
### WINS ###
wins server = 192.168.0.197
name resolve order = wins host bcast
### logins without prepending INTRANET\ ###
map untrusted to domain = yes
### other settings ###
unix extensions = no
invalid users = root
### make exe files executable on windows without x bit ###
acl allow execute always = yes
### performance ###
deadtime = 10
use sendfile = yes
socket options = TCP_NODELAY IPTOS_LOWDELAY SO_KEEPALIVE
### prevent unwanted files ###
veto files =
/$RECYCLE.BIN/desktop.ini/Thumbs.db/.DS_Store/._.DS_Store/.apdisk/._.apdisk/.TemporaryItems/._.TemporaryItems/.Trashes/._.Trashes
delete veto files = yes
### SHARES ###
[Exchange]
path = /home/nobackup/exchange
guest ok = yes
read only = no
create mask = 660
directory mask = 770
force group = exchange-users
Greetings,
Felix
On 04/08/15 10:07, Felix Matouschek wrote:> Hello, > > I occasionally need to remove the write permissions from directories inside a share to prevent users from accidentally deleting files inside that directory. > > My problem is that I neither can view nor can change the permissions of directories on my shares. > Curiously enough viewing and changing permissions of files in the same shares works without a problem. > > Is there anything I misconfigured? > > My smb.conf looks like this: > > [global] > ### Network ### > netbios name = Fileserver > server string = Fileserver (%h V:%v) > > ### ad member ### > workgroup = INTRANET > realm = INTRANET.MYCOMPANY.DE > security = ADS > kerberos method = secrets and keytab > > ### WINS ### > wins server = 192.168.0.197 > name resolve order = wins host bcast > > ### logins without prepending INTRANET\ ### > map untrusted to domain = yes > > ### other settings ### > unix extensions = no > invalid users = root > > ### make exe files executable on windows without x bit ### > acl allow execute always = yes > > ### performance ### > deadtime = 10 > use sendfile = yes > socket options = TCP_NODELAY IPTOS_LOWDELAY SO_KEEPALIVE > > ### prevent unwanted files ### > veto files = /$RECYCLE.BIN/desktop.ini/Thumbs.db/.DS_Store/._.DS_Store/.apdisk/._.apdisk/.TemporaryItems/._.TemporaryItems/.Trashes/._.Trashes > delete veto files = yes > > ### SHARES ### > > [Exchange] > path = /home/nobackup/exchange > guest ok = yes > read only = no > create mask = 660 > directory mask = 770 > force group = exchange-users > > Greetings, > FelixHi, when you say ' I occasionally need to remove the write permissions', whom is the 'I', is this the Administrator ? Rowland
Hi Rowland, when saying 'I' I theoretically meant any user that has write access to the share. It should be possible to right click the directory in windows, the go to security tab and remove the write permissions on the directory. This behaviour already works with files, I'm trying to figure out how to make it also work for directories. Greetings, Felix -----Ursprüngliche Nachricht----- Von: samba [mailto:samba-bounces at lists.samba.org] Im Auftrag von Rowland Penny Gesendet: Dienstag, 4. August 2015 11:57 An: samba at lists.samba.org Betreff: Re: [Samba] Cannot change directory permissions On 04/08/15 10:07, Felix Matouschek wrote:> Hello, > > I occasionally need to remove the write permissions from directories inside a share to prevent users from accidentally deleting files inside that directory. > > My problem is that I neither can view nor can change the permissions of directories on my shares. > Curiously enough viewing and changing permissions of files in the same shares works without a problem. > > Is there anything I misconfigured? > > My smb.conf looks like this: > > [global] > ### Network ### > netbios name = Fileserver > server string = Fileserver (%h V:%v) > > ### ad member ### > workgroup = INTRANET > realm = INTRANET.MYCOMPANY.DE > security = ADS > kerberos method = secrets and keytab > > ### WINS ### > wins server = 192.168.0.197 > name resolve order = wins host bcast > > ### logins without prepending INTRANET\ ### > map untrusted to domain = yes > > ### other settings ### > unix extensions = no > invalid users = root > > ### make exe files executable on windows without x bit ### > acl allow execute always = yes > > ### performance ### > deadtime = 10 > use sendfile = yes > socket options = TCP_NODELAY IPTOS_LOWDELAY SO_KEEPALIVE > > ### prevent unwanted files ### > veto files = /$RECYCLE.BIN/desktop.ini/Thumbs.db/.DS_Store/._.DS_Store/.apdisk/._.apdisk/.TemporaryItems/._.TemporaryItems/.Trashes/._.Trashes > delete veto files = yes > > ### SHARES ### > > [Exchange] > path = /home/nobackup/exchange > guest ok = yes > read only = no > create mask = 660 > directory mask = 770 > force group = exchange-users > > Greetings, > FelixHi, when you say ' I occasionally need to remove the write permissions', whom is the 'I', is this the Administrator ? Rowland -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba