search for: factwork

...ding samba from 4.1.17 to 4.1.19 on OpenSuSE 13.2, any shares offered by this machine can nolonger be accessed, when these shares contain an entry "force group" which specifies a local unix group and when there exists a unix user with the same name. Here's an excerpt from smb.conf: [FactWork] comment = FactWork-Downloadportal path = /web/Fee/download/factwork valid users = @webadmin,fee\gabi, at fee\g_tb3,fee\administrator,fee\svtb3$ write list = @webadmin,fee\gabi, at fee\g_tb3,fee\administrator force group = webadmin create mask = 0664...

...0664 > # security mask = 0664 > force create mode = 0664 > # force security mode = 0664 > directory mask = 0775 > # directory security mask = 0775 > force directory mode = 0775 > # force directory security mode = 0775 > > writeable = Yes > guest ok = No > > [FactWork] > comment = FactWork-Downloadportal > path = /web/Fee/download/factwork > valid users = @webadmin,fee\gabi, at fee\g_tb3,fee\administrator,fee\svtb3$ > write list = @webadmin,fee\gabi, at fee\g_tb3,fee\administrator > > force group = webadmin > create mask = 0664 > #...

...64 >> # force security mode = 0664 >> directory mask = 0775 >> # directory security mask = 0775 >> force directory mode = 0775 >> # force directory security mode = 0775 >> >> writeable = Yes >> guest ok = No >> >> [FactWork] >> comment = FactWork-Downloadportal >> path = /web/Fee/download/factwork >> valid users = >> @webadmin,fee\gabi, at fee\g_tb3,fee\administrator,fee\svtb3$ >> write list = @webadmin,fee\gabi, at fee\g_tb3,fee\administrator >> >> force...

...= 0664 >>> directory mask = 0775 >>> # directory security mask = 0775 >>> force directory mode = 0775 >>> # force directory security mode = 0775 >>> >>> writeable = Yes >>> guest ok = No >>> >>> [FactWork] >>> comment = FactWork-Downloadportal >>> path = /web/Fee/download/factwork >>> valid users = >>> @webadmin,fee\gabi, at fee\g_tb3,fee\administrator,fee\svtb3$ >>> write list = @webadmin,fee\gabi, at fee\g_tb3,fee\administrator >>...

Hi, please have a look into the attached smb.conf. The only changes since 3.6.3 are commenting out all *security* settings and adding winbind expand groups = 1 The attached smbusers hasn't been changed yet. When I try to access share \\platon\root<file:///\\platon\root> as fee\administrator I get the following: platon:~ # smbclient -c dir -W fee -U administrator%secret

...ree commands fail. So for now, I'd like to make as few changes as possible to get that user mapping working again. It seems I haven't mentioned yet, if I disable that mapping in smbusers, I can access the shares as long as they grant access to an unmapped domain user (for example share FactWork, as I (fee\reinhard.ni) am a member of group fee\g_tb3). Bye. -- Reinhard Ni?l, TB3, -198

...or now, I'd like to make as few changes as possible to get that > user mapping working again. > > It seems I haven't mentioned yet, if I disable that mapping in > smbusers, I can access the shares as long as they grant access to an > unmapped domain user (for example share FactWork, as I > (fee\reinhard.ni) am a member of group fee\g_tb3). > I come back to my original idea, use ACLs. just one other thought, you really shouldn't use your registered domain for your AD domain. Rowland > Bye. > -- > Reinhard Ni?l, TB3, -198

Hi Rowland, Am 20.03.2015 um 10:33 schrieb Rowland Penny: >>> ---8<---8<---8<---8<---8<---8<--- smb.conf >>> ---8<---8<---8<---8<---8<---8<--- >>> >>> # smb.conf is the main Samba configuration file. You find a full >>> commented >>> # version at /usr/share/doc/packages/samba/examples/smb.conf.SUSE if the