search for: directory_mod

...answered about vfs object recycle on this list, it seems that it isn't working as excepted. Using Samba 4.4.5, compiled from sources Here is the conf for a share: [musique] path = /media/data/musique read only = No vfs objects = acl_xattr recycle recycle:directory_mode = 0770 recycle:subdir_mode = 0700 recycle:versions = Yes recycle:keeptree = Yes recycle:touch = Yes recycle:repository = .recycle full_audit:prefix = %U|%I|%S full_audit:success = connect disconnect mkdir rmdir open read write rename...

...list, > it seems that it isn't working as excepted. > > Using Samba 4.4.5, compiled from sources > > Here is the conf for a share: > [musique] > path = /media/data/musique > read only = No > vfs objects = acl_xattr recycle > recycle:directory_mode = 0770 > recycle:subdir_mode = 0700 > recycle:versions = Yes > recycle:keeptree = Yes > recycle:touch = Yes > recycle:repository = .recycle > full_audit:prefix = %U|%I|%S > full_audit:success = connect disconnect mkdir rm...

...have a share with the following conf: vfs objects = recycle mode = KEEP_DIRECTORIES|VERSIONS|TOUCH # config-file = /etc/samba/recycle.conf recycle:exclude = *.tmp|*.temp|*.o|*.obj|~$*|*.~??|*.log|*.trace|*.mp3|*.MP3|*.wma|*.WMA recycle:excludedir = /tmp|/temp|/cache recycle:directory_mode = 0777 recycle:keeptree = yes Some confs I got from the official samba docs at: http://www.samba.org/samba/docs/man/Samba3-HOWTO/VFS.html#id2644353 Others I got from forums around the internet, like the 'mode' and commented 'config-file' above. One question and one problem:...

...her::--- The problem here is the 'mask::r-x'. This steals the 'w' flag from default:group:somedom\\domain\040users:rwx Therefore a new deleted file from another user of the group Domain Users, can't be created in the recycle share. Every try to manipulate the mask with recycle:directory_mode = 0777 and recycle:subdir_mode = 0777 has no effect. We tried different inherit settings: inherit acls = Yes inherit owner = Yes inherit permissions = Yes Samba Version: 4.9.5-git.187.71edee57d5alp151.2.6.1-SUSE-oS15.0-x86_64 smb.conf [global] security = ADS workgroup = somedom...

I make a recycle bin as follow: config-file = /etc/samba/recycle.conf vfs object = recycle recycle:subdir_mode = 0770 recycle:keeptree = Yes recycle:repository = Recycle Bin recycle:versions = Yes recycle:directory_mode = 0770 But testparm shows: Unknown parameter encounter: "config-file" Ignoring unknown parameter "config-file" What could be the problem and the solution? Regards, David

...%U path = /mnt/vol0/HOME1/%U comment = Home Directories printable = no veto files = /.snapshot/.windows/.mac/.zfs/ writeable = yes browseable = yes recycle:repository = .recycle/%U recycle:keeptree = yes recycle:versions = yes recycle:touch = yes recycle:directory_mode = 0777 recycle:subdir_mode = 0700 shadow:snapdir = .zfs/snapshot shadow:sort = desc shadow:localtime = yes shadow:format = auto-%Y%m%d.%H%M-2w shadow:snapdirseverywhere = yes vfs objects = shadow_copy2 zfsacl hide dot files = yes guest ok = no nfs4:mode = sp...

Hello, we are using the vfs module recycle with the following config: vfs objects = recycle recycle: repository = .Papierkorb recycle:directory_mode = 0777 recycle:subdir_mode = 0777 recycle: keeptree = Yes recycle: exclude = *.tmp, *.temp, *.log, *.ldb recycle: exclude_dir = tmp recycle:versions = Yes Problem is that everybody can see deleted documents in the recycle bin. But if I set recycle:subdir_mode = 0770 then members of the group c...

I have a need to setup the recycle vfs object on our server. On my test server, I have all of the shares on a single drive and have put the following into each share: vfs_objects = recycle recycle:repository = [Actual Path and Partition that the share is located] recycle:directory_mode = 770 recycle:keeptree = Yes recycle:touch_mtime = Yes recycle:versions = Yes It works like a charm. All of the files when deleted from each share are dumped into the RecycleBin share, I have created a new share just for the RecycleBin that I have also mounted that I can perform a final delete o...

...th = /mnt/vol0/HOMES/%D/%U [CHARTEST] path = /mnt/vol0/CHARTEST printable = no veto files = /.snap/.windows/.zfs/ writeable = yes browseable = yes recycle:repository = .recycle/%U recycle:keeptree = yes recycle:versions = yes recycle:touch = yes recycle:directory_mode = 0777 recycle:subdir_mode = 0700 vfs objects = zfsacl streams_xattr aio_pthread hide dot files = yes guest ok = no nfs4:mode = special nfs4:acedup = merge nfs4:chown = yes zfsacl:acesort = dontcare [TESTME1] path = /mnt/vol0/TESTME1 printable = no...

.../tmp > > It looks to me that the VFS changes have caused this. You are using a DC as a fileserver, this isn't recommended for? a start. On a DC , 'vfs objects = acl_xattr' is set by default, this means that 'inherit acls = yes' is set and you do not have a 'recycle:directory_mode' line, so you will be using the default '0700'. Put this all together and what you are getting is correct, don't ask me why it worked before, but not now. It looks like it was actually wrong before but correct now ;-) Rowland

...hanks for your answer Rowland, I fix this problem. I had not put writing permission to the "domain users". Http://i.imgur.com/oLXS0Kn.png In the image above I show the permissions of the recycle folder. They are correct? Do I need to have these 3 entries below in my smb.conf? recycle:directory_mode = 0700 recycle:subdir_mode = 0700 recycle:inherit_nt_acl = Yes On Tue, Jun 13, 2017 at 3:23 PM, Rowland Penny <rpenny at samba.org> wrote: > On Tue, 13 Jun 2017 14:56:33 -0300 > Elias Pereira via samba <samba at lists.samba.org> wrote: > > > Hello guys, > > >...

...= no browseable = no create mask = 0611 directory mask = 0711 vfs objects = acl_xattr full_audit recycle full_audit:success = connect opendir disconnect unlink mkdir rmdir open rename full_audit:failure = connect opendir disconnect unlink mkdir rmdir open rename recycle: directory_mode = 0700 recycle: inherit_nt_acl = Yes recycle: excludedir = /tmp|/var/tmp recycle: versions = Yes recycle: keeptree = Yes recycle: repository = RecycleBin [agnofi] comment = primer compartido path = /home/samba/shares/agnofi browseable = Yes read only = No f...

Hi, is it possible to hide/restrict access to the home drives of our samba users when accessing them directly via netbios address? I have set up the home folders in ADUC. They are all mapped to drive H: and users have full access to their drive. The problem is, that others users also have access (accept write) to other users folders when opening the domain shares via \\<netbios

...t vfs objects = acl_xattr recycle recycle:keeptree = yes in the corresponding share sections in smb.conf on the member server. The problem is that the subdirectories created in the repository seem to receive arbitrary permissions (UNIX permissions, UNIX ACLs and NT ACLs) regardless of the recycle:directory_mode and recycle:subdir_mode settings, whereas the files which are moved to the recycle repository keep their original permissions. Ideally, also the directories in the recycle repository would keep the original permissions. Is there a way to configure the vfs_recycle module so that also the directory...

...yes # inherit acls = Yes inherit permissions = Yes guest account = guest guest ok=yes writeable = Yes # Recycle vfs objects = acl_xattr, recycle, shadow_copy2, full_audit #vfs objects = recycle, shadow_copy2 recycle:facility = LOCAL1 recycle:priority = NOTICE recycle:maxsize = 0 recycle:directory_mode = 0774 recycle:subdir_mode = 0774 recycle:keeptree = true recycle:touch = true recycle:versions = true recycle:exclude = *.tmp, *.log, *.obj, ~*.*, *.bak, *.exe, *.bin recycle:exclude_dir = tmp, temp, cache create mask = 0774 directory mask = 0774 # SHADOW COPY / SNAPSHOT shadow:mountpoi...

...;admin" "@Administrator_Group" "root" browsable = Yes public = Yes force directory mode = 0777 directory mode = 0777 force create mode = 0777 create mask = 0777 inherit acls = Yes map acl inherit = Yes acl_xattr:ignore system acls = Yes recycle:repository = @recycle recycle:directory_mode = 0777 recycle:keeptree = yes recycle:versions = yes recycle:exclude_dir = .streams vfs objects = shadow_copy2 streams_depot catia fruit streams_xattr acl_xattr recycle streams_depot:delete_lost = yes shadow: format = %Y%m%d-%H%M%S shadow: sort = desc shadow: snapdir = .snapshot shadow: localtime...

...e is enabled, new created files on share folder (not > .deleted folder, not deleted files) permission to this folder are > limited by mask and owner is "root". Without VFS:recycle new created > files have owner "user" and rights are fine. I tried to put > recycle:directory_mode = 777 to smb.conf, but nothing changed. > > on XXX share > getfacl vvv.txt > # file: vvv.txt > # owner: root > # group: users > user::rw- > group::--- > group:users:rwx #effective:r-- > group:3000002:--- > mask::r-- > other::--- > > > on original share...

...~# getfacl /srv/work/.cestino/abarro getfacl: Removing leading '/' from absolute path names # file: srv/work/.cestino/abarro # owner: abarro # group: domain\040users user::rwx group::r-x other::r-x I've also tried to add to share definition: recycle:subdir_mode = 0700 recycle:directory_mode = 0700 (that the manpage say they are the default), but nothing changed. I've hit a bug? If i've not misconfigured something security implication of this behaviour are serious... Thanks. -- dott. Marco Gaiarin GNUPG Key ID: 240A3D66 Associazione ``La Nostra Famiglia...

...k = 770 [Accounting] browsable = yes writeable = yes create mode = 770 valid users = @accounting path = /samba/Accounting force directory mode = 02770 directory mode = 02770 force group = accounting # Recycling vfs objects = full_audit recycle recycle:repository = .recycle/%U recycle:directory_mode = 0770 recycle:versions = Yes recycle:inherit_nt_acl = Yes recycle:keeptree = Yes recycle:touch = yes etc.... On Thu, Mar 30, 2017 at 10:43 AM Luke Barone <lukebarone at gmail.com> wrote: > Post your smb.conf file so we have information to refer to > > On Mar 30, 2017 9:23 A...

Hi... I'm running Samba 2.2.8 with a 'homes' directive to auto mount homedirectories upon login. I'm using the create_mode and directory_mode of 600 and 700 so only owner has perms for created files. There is a group of about 40 accounts that need this instead set to read/write for them and read only for world (i.e. 604 and 705). Is there some way to do this based on the user logging in but still using the homes directory mappi...