search for: fileshareadmin

Hi Davor, If the mapping of administrator to root is not ideal, I do like the idea of having a specific FileShareAdmin group. But, why chown and not simply chgrp? Thanks! Shane Robinson Chief Administrative Officer SimpeQ Care Inc. t. 604.988.3103 ext. 104 c. 604.506.3311 f. 604.988.3105 Please consider the environment before printing this email. -----Original Message----- From: samba-bounces at lists.samba.o...

...; 3 > If I remember correctly it doesn't matter what combinations you 'chmod' to. It changes to 755 as soon as you change ACLs from Windows. I suggest you add uid- and gidnumber to all users and groups and chown to a user:group (or perhaps group:group if possible). For example chown FileShareAdmin:FileShareAdminGroup and let the user account which operates the file share be a member of group FileShareAdminGroup. With this approach you get some degree of security if you also allow users to logon to the server with ssh for example. And of course home directories. Choice 3 and uid-/gidNumber a...

2015-03-04 21:35 GMT+01:00 Shane Robinson <srobinson at simpeq.ca>: > Hi Davor, > > If the mapping of administrator to root is not ideal, I do like the idea of > having a specific FileShareAdmin group. > > But, why chown and not simply chgrp? > If you consider 'root' as a BUILTIN\Administrator equivivalent it might work changing both Share and DACL "the Windows way". I'm not sure it's going to work as 'root' (on the local file/Samba server) canno...

...ber correctly it doesn't matter what combinations you > 'chmod' to. It changes to 755 as soon as you change ACLs from Windows. > I suggest you add uid- and gidnumber to all users and groups and chown > to a user:group (or perhaps group:group if possible). For example > chown FileShareAdmin:FileShareAdminGroup and let the user account > which operates the file share be a member of group > FileShareAdminGroup. With this approach you get some degree of > security if you also allow users to logon to the server with ssh for > example. And of course home directories. > >...

Hello again Rowland, list! Sorry for the delayed response, and top posting. To recap: I'd like to complete the member server wiki so that ACLs can be set from windows without taking undocumented steps. The three ways I've found to do this are: 1) map root to administrator. (LPH VanBelle's script uses this option.) 2) chmod 0775 then chgrp "<DOMAIN>\Domain Admins"