Hi,
I am a samba new user. When a share for user has one permission, it is OK. When
a share for user has permission combination, there is something different in my
thought.
In Linux user system, a user can belong to multiple groups. For example:
The user (uf) belongs to multiple groups (g_full and g_read)
[root at node-107-174 /]# id 1017
uid=1017(uf) gid=1017(g_full) groups=1017(g_full),1018(g_read)
my samba config file content:
[global]
workgroup = SAMBA
security = user
passdb backend = tdbsam
[dsf]
path = /dsf
read list = @g_read
valid users = @g_full @g_read
admin users = @g_full
according to https://www.samba.org/samba/docs/using_samba/ch09.html
1. the user uf in groups g_read and g_full,means it has read only and root
permission, I think the user uf will has root permission,
but actually, the user uf only has read only permission, can not write.
In a word, when the user in read list and admin users, the user only has read
only permission. [I think the user will has root permission, but something
different]
In my thought,permission conflict priority:
invalid users > admin users > write list > read lists
But this situation is not ok.
2. Another situation, When the user in read list, write list, and admin users,
the user has root permission. [This situation is ok]
Auxiliary information:
[root at node-107-174 /]# uname -a
Linux node-107-174 3.10.0-327.el7.x86_64 #1 SMP Thu Nov 19 22:10:57 UTC 2015
x86_64 x86_64 x86_64 GNU/Linux
[root at node-107-174 /]# rpm -qa | grep samba
samba-client-libs-4.5.1-1.el7.centos.x86_64
samba-common-tools-4.5.1-1.el7.centos.x86_64
samba-common-4.5.1-1.el7.centos.noarch
samba-libs-4.5.1-1.el7.centos.x86_64
samba-4.5.1-1.el7.centos.x86_64
samba-common-libs-4.5.1-1.el7.centos.x86_64
Look forward to your reply,Thank you very much.
Lang Liu