samba - Mar 2021 - permission issue?

Hallo

 

if user "a" create one file in this structure, the other user can

open this file, but arnt possible to overwrite. what i need to

change that all user can overwrite also file.

 

regards

Mauri

 

 

Samba AD Server Version 4.13.2

Samba Server with Share Version 4.9.5-Debian

 

     # For ACL support on domain member

     vfs objects = acl_xattr

     map acl inherit = Yes

     store dos attributes = Yes

 

[DATA]

        path = /shares/data

        writable = yes

        read only = no

        force create mode = 0600

        force directory mode = 0700

 

 

Domain User = all user that are allowed to write.

smbadmin    = domainadmin for Backup

 

"shares/data"

drwxrwxrwx   3 smbadmin domain users  4096 Mar 19 06:53  Bk-12

drwxrwxrwx   3 smbadmin domain users  4096 Mar 19 06:53  Bk-13

drwxrwxrwx   3 smbadmin domain users  4096 Mar 19 06:53  Bk-14

Update..... I see also if User "a" Create folder or Files the
permission
will by change to
	>drwxrwxrwx   3 "a" domain users  4096 Mar 19 06:53  sA-1
also here are the problem that other Users cant modifies this files or
folder.

Also on Windows Comuters I see that the Group "Domain Users" don't
have any
rights.
Please for any help iam happy
Regards
Mauri
>Hallo
>if user "a" create one file in this structure, the other user can
>open this file, but arnt possible to overwrite. what i need to
>change that all user can overwrite also file.
>regards
>Mauri
>
>
>Samba AD Server Version 4.13.2
>Samba Server with Share Version 4.9.5-Debian
>
>    # For ACL support on domain member
>     vfs objects = acl_xattr
>     map acl inherit = Yes
>     store dos attributes = Yes
>
> [DATA]
>        path = /shares/data
>        writable = yes
>        read only = no
>        force create mode = 0600
>        force directory mode = 0700
>
>
>Domain User = all user that are allowed to write.
>smbadmin    = domainadmin for Backup
>
>"shares/data"
>drwxrwxrwx   3 smbadmin domain users  4096 Mar 19 06:53  Bk-12
>drwxrwxrwx   3 smbadmin domain users  4096 Mar 19 06:53  Bk-13
>drwxrwxrwx   3 smbadmin domain users  4096 Mar 19 06:53  Bk-14
>

You dont want 
      force create mode = 0600
      force directory mode = 0700

You do want 
	"Creator Owner" 
	"Creator Group" 

i just found this site. Thats a really handy one..  

https://chmodcommand.com/



Greetz, 

Louis

> -----Oorspronkelijk bericht-----
> Van: samba [mailto:samba-bounces at lists.samba.org] Namens Maurizio Caloro
> via samba
> Verzonden: vrijdag 19 maart 2021 7:29
> Aan: samba at lists.samba.org
> Onderwerp: [Samba] permission issue?
> 
> Hallo
> 
> 
> 
> if user "a" create one file in this structure, the other user can
> 
> open this file, but arnt possible to overwrite. what i need to
> 
> change that all user can overwrite also file.
> 
> 
> 
> regards
> 
> Mauri
> 
> 
> 
> 
> 
> Samba AD Server Version 4.13.2
> 
> Samba Server with Share Version 4.9.5-Debian
> 
> 
> 
>      # For ACL support on domain member
> 
>      vfs objects = acl_xattr
> 
>      map acl inherit = Yes
> 
>      store dos attributes = Yes
> 
> 
> 
> [DATA]
> 
>         path = /shares/data
> 
>         writable = yes
> 
>         read only = no
> 
>         force create mode = 0600
> 
>         force directory mode = 0700
> 
> 
> 
> 
> 
> Domain User = all user that are allowed to write.
> 
> smbadmin    = domainadmin for Backup
> 
> 
> 
> "shares/data"
> 
> drwxrwxrwx   3 smbadmin domain users  4096 Mar 19 06:53  Bk-12
> 
> drwxrwxrwx   3 smbadmin domain users  4096 Mar 19 06:53  Bk-13
> 
> drwxrwxrwx   3 smbadmin domain users  4096 Mar 19 06:53  Bk-14
> 
> 
> 
> 
> 
> 
> 
> --
> To unsubscribe from this list go to the following URL and read the
> instructions:  https://lists.samba.org/mailman/options/samba

Mandi! Maurizio Caloro via samba
  In chel di` si favelave...
> if user "a" create one file in this structure, the other user can
> open this file, but arnt possible to overwrite. what i need to
> change that all user can overwrite also file.
what say 'getfacl' on file/folder?

-- 
dott. Marco Gaiarin				        GNUPG Key ID: 240A3D66
  Associazione ``La Nostra Famiglia''         
http://www.lanostrafamiglia.it/
  Polo FVG   -   Via della Bont?, 7 - 33078   -   San Vito al Tagliamento (PN)
  marco.gaiarin(at)lanostrafamiglia.it   t +39-0434-842711   f +39-0434-842797

		Dona il 5 PER MILLE a LA NOSTRA FAMIGLIA!
      http://www.lanostrafamiglia.it/index.php/it/sostienici/5x1000
	(cf 00307430132, categoria ONLUS oppure RICERCA SANITARIA)

On 19/03/2021 06:28, Maurizio Caloro via samba wrote:
> Hallo
>
> if user "a" create one file in this structure, the other user can
>
> open this file, but arnt possible to overwrite. what i need to
>
> change that all user can overwrite also file.
>
> regards
>
> Mauri
>
>
> Samba AD Server Version 4.13.2
>
> Samba Server with Share Version 4.9.5-Debian
>
>   
>
>       # For ACL support on domain member
>
>       vfs objects = acl_xattr
>
>       map acl inherit = Yes
>
>       store dos attributes = Yes
>
>   
>
> [DATA]
>
>          path = /shares/data
>
>          writable = yes
>
>          read only = no

You do not need both of those lines, if something is set 'read only = 
no' it is 'writable'
>
>          force create mode = 0600
>
>          force directory mode = 0700

Do not use those lines, set the permissions from Windows, see here:

https://wiki.samba.org/index.php/Setting_up_a_Share_Using_Windows_ACLs
>
>   
>
>   
>
> Domain User = all user that are allowed to write.
>
> smbadmin    = domainadmin for Backup
>
>   
>
> "shares/data"
>
> drwxrwxrwx   3 smbadmin domain users  4096 Mar 19 06:53  Bk-12
>
> drwxrwxrwx   3 smbadmin domain users  4096 Mar 19 06:53  Bk-13
>
> drwxrwxrwx   3 smbadmin domain users  4096 Mar 19 06:53  Bk-14

Those show that you are relying on Unix acl's (ugo), this isn't enough.

Rowland