samba - Jan 2017 - Samba shared folders: file permission bits issue

Dear Samba list,

I set up a samba server on debian. The samba version is 4.2.10, and the server
configuration is as follows:

    # Global parameters
    [global]
            server role = standalone server
            security = USER
            map to guest = Bad User
            obey pam restrictions = Yes
            syslog = 0
            log file = /var/log/samba/log.%m
            max log size = 1000
            dns proxy = No
            panic action = /usr/share/samba/panic-action %d
            idmap config * : backend = tdb

    [opensrc]
            comment = Opensource Directory
            path = /home/opensrc
            force user = opensrc
            read only = No
            create mask = 0644
            map archive = No

Everything works fine other than the file permission bits under Linux. Windows
client mounted the samba opensrc shared folder. When a file is created on the
Windows side, its permission is:

    # file: home/opensrc/newfile.txt
    # owner: opensrc
    # group: opensrc
    user::rw-
    group::r--
    other::r--

Yet, when the file is edited and saved from Windows side, then the file
permission becomes:

    # file: home/opensrc/newfile.txt
    # owner: opensrc
    # group: opensrc
    user::rw-
    user:opensrc:rw-
    group::r--
    group:opensrc:r--
    mask::rwx
    other::r--

Tried many different options but none works out nicely. Anyone can shed some
light on it? Thanks.

Gang Liang
Transient are conditioned things.

I think by default, Samba 4 tries to use the Windows ACLs.

You could try:

# Use Linux file permissions
nt acl support = no

in the global settings.  This should bring back the old Unix style
permissions.

On Tue, Jan 24, 2017 at 2:36 PM Gang Liang via samba <samba at
lists.samba.org>
wrote:
> Dear Samba list,
>
> I set up a samba server on debian. The samba version is 4.2.10, and the
> server configuration is as follows:
>
>     # Global parameters
>     [global]
>             server role = standalone server
>             security = USER
>             map to guest = Bad User
>             obey pam restrictions = Yes
>             syslog = 0
>             log file = /var/log/samba/log.%m
>             max log size = 1000
>             dns proxy = No
>             panic action = /usr/share/samba/panic-action %d
>             idmap config * : backend = tdb
>
>     [opensrc]
>             comment = Opensource Directory
>             path = /home/opensrc
>             force user = opensrc
>             read only = No
>             create mask = 0644
>             map archive = No
>
> Everything works fine other than the file permission bits under Linux.
> Windows client mounted the samba opensrc shared folder. When a file is
> created on the Windows side, its permission is:
>
>     # file: home/opensrc/newfile.txt
>     # owner: opensrc
>     # group: opensrc
>     user::rw-
>     group::r--
>     other::r--
>
> Yet, when the file is edited and saved from Windows side, then the file
> permission becomes:
>
>     # file: home/opensrc/newfile.txt
>     # owner: opensrc
>     # group: opensrc
>     user::rw-
>     user:opensrc:rw-
>     group::r--
>     group:opensrc:r--
>     mask::rwx
>     other::r--
>
> Tried many different options but none works out nicely. Anyone can shed
> some light on it? Thanks.
>
> Gang Liang
> Transient are conditioned things.
>
>
> --
> To unsubscribe from this list go to the following URL and read the
> instructions:  https://lists.samba.org/mailman/options/samba
>