Okay, I installed the 2.2.5 RPM. I used testparm to get a complete
listing of my smb.conf, and have attached it. All client machines are
Win 2k, I believe they are all at service pack 3, but I know for certain
the one I was just testing on is. I can log in as my domain account, my
profile is downloaded. I go to My Network Places, I see the Add icon,
and the Entire Network icon. I expect to see a list of machines in the
domain, is there some configuration I'm missing, on either client or
server? I go to the Public share, I can create files/folders. I
right-click, go to Properties, select the Security tab, and am unable to
change the settings. For example, if I change the permissions allowed to
the owning group and hit apply, the changes just undo themselves. If I
try to add a user/group, when I hit apply, I get an error dialog that says
"Unable to save permission changes on <folder/file name>."
"Access is denied."
It would appear, from the NT Properties/Security dialog, that the owner
has full control, and the group/everyone have no access. I would have
thought I, through the create [directory] mask setting, given rwx
permission to the group. That is how I have set the unix permissions on
the samba server (by hand, after the files/folders were created). I read
somewhere to setgid on folders so that subfolders and files will have
the same group. I log off, my profile is synched back up with the samba
server.
So I can't change file/folder permissions and I can't browse the domain
without going to Entire Network->Microsoft Windows Network->Unboundtech.
Is it necessary for the netlogon share to be browseable?
Bradley W. Langhorst wrote:
> 2.2.1 is very old and has lots of bugs...
> upgrade to 2.2.6 when that comes out this week
> (or if you cant wait use 2.2.5)
>
> On Wed, 2002-10-02 at 11:37, Justin Georgeson wrote:
>
>>Does anyone have any suggestions here? I've read plenty of documentation
>>and can't figure this out (HOWTOs and man pages). I'm apparently also
>>having a problem with profiles synching back up the server. Users are
>>apparently looisng work. This is bad. I *know* this product can work for
>>me, but I'm not having much luck. Please help.
>
>
>>>[export0]
>>> path = /export0
>>> write list = @unboundtech
>>> read only = No
>>
> this should be yes - otherwise everybody can write.
>
>
>>> create mask = 0775
>>> directory mask = 0775
>>
>
> have you enable acls on the server's filesystem? It sounds like that is
> what you want...
>
> brad
>
--
Justin Georgeson
UnBound Technologies, Inc.
http://www.unboundtech.com
Main 713.329.9330
Fax 713.460.4051
Mobile 512.789.1962
5295 Hollister Road
Houston, TX 77040
Real Applications using Real Wireless Intelligence(tm)
Load smb config files from /etc/samba/smb.conf
Processing section "[netlogon]"
Processing section "[profiles]"
Processing section "[Public]"
Loaded services file OK.
Press enter to see a dump of your service definitions
# Global parameters
[global]
coding system =
client code page = 850
code page directory = /etc/codepages
workgroup = UNBOUNDTECH
netbios name = MOLEHILL
netbios aliases =
netbios scope =
server string = Domain Controller
interfaces = lo 192.168.1.0/24
bind interfaces only = Yes
security = USER
encrypt passwords = Yes
update encrypted = No
allow trusted domains = Yes
hosts equiv =
min passwd length = 5
map to guest = Never
null passwords = No
obey pam restrictions = No
password server =
smb passwd file = /etc/samba/smbpasswd
root directory =
pam password change = No
passwd program = /usr/bin/passwd
passwd chat = *new*password* %n\n *new*password* %n\n *changed*
passwd chat debug = No
username map =
password level = 0
username level = 0
unix password sync = No
restrict anonymous = No
lanman auth = Yes
use rhosts = No
admin log = No
log level = 0
syslog = 1
syslog only = No
log file = /var/log/samba/log.%m
max log size = 50
timestamp logs = Yes
debug hires timestamp = No
debug pid = No
debug uid = No
protocol = NT1
large readwrite = No
max protocol = NT1
min protocol = CORE
read bmpx = No
read raw = Yes
write raw = Yes
nt smb support = Yes
nt pipe support = Yes
nt status support = Yes
announce version = 4.5
announce as = NT
max mux = 50
max xmit = 65535
name resolve order = lmhosts host wins bcast
max packet = 65535
max ttl = 259200
max wins ttl = 518400
min wins ttl = 21600
time server = No
unix extensions = No
change notify timeout = 60
deadtime = 0
getwd cache = Yes
keepalive = 300
lpq cache time = 10
max smbd processes = 0
max disk size = 0
max open files = 10000
read size = 16384
socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
stat cache size = 50
use mmap = Yes
total print jobs = 0
load printers = Yes
printcap name = /etc/printcap
disable spoolss = No
enumports command =
addprinter command =
deleteprinter command =
show add printer wizard = Yes
os2 driver map =
strip dot = No
mangling method = hash
character set =
mangled stack = 50
stat cache = Yes
domain admin group = @domainadmin
domain guest group =
machine password timeout = 604800
add user script = /usr/sbin/useradd -d /dev/null -g 100 -s /bin/false -M %u
delete user script =
logon script =
logon path = \\%N\profiles\%U
logon drive = Z:
logon home = \\%N\profiles\%U
domain logons = Yes
os level = 34
lm announce = Auto
lm interval = 60
preferred master = True
local master = Yes
domain master = True
browse list = Yes
enhanced browsing = No
dns proxy = No
wins proxy = No
wins server =
wins support = Yes
wins hook =
kernel oplocks = Yes
lock spin count = 3
lock spin time = 10
oplock break wait time = 0
add share command =
change share command =
delete share command =
config file =
preload =
lock dir = /var/cache/samba
pid directory = /var/run/samba
utmp directory =
wtmp directory =
utmp = No
default service =
message command =
dfree command =
valid chars =
remote announce =
remote browse sync =
socket address = 0.0.0.0
homedir map =
time offset = 0
NIS homedir = No
source environment =
panic action =
hide local users = No
host msdfs = No
winbind uid =
winbind gid =
template homedir = /home/%D/%U
template shell = /bin/false
winbind separator = \
winbind cache time = 15
winbind enum users = Yes
winbind enum groups = Yes
winbind use default domain = No
comment =
path =
alternate permissions = No
username =
guest account = nobody
invalid users =
valid users =
admin users =
read list =
write list =
printer admin =
force user =
force group =
read only = Yes
create mask = 0775
force create mode = 00
security mask = 0777
force security mode = 00
directory mask = 0775
force directory mode = 00
directory security mask = 0777
force directory security mode = 00
force unknown acl user = 00
inherit permissions = No
inherit acls = No
guest only = No
guest ok = No
only user = No
hosts allow =
hosts deny =
status = Yes
nt acl support = Yes
block size = 1024
max connections = 0
min print space = 0
strict allocate = No
strict sync = No
sync always = No
write cache size = 0
max print jobs = 1000
printable = No
postscript = No
printing = bsd
print command = lpr -r -P%p %s
lpq command = lpq -P%p
lprm command = lprm -P%p %j
lppause command =
lpresume command =
queuepause command =
queueresume command =
printer name =
use client driver = No
default devmode = No
printer driver =
printer driver file = /etc/samba/printers.def
printer driver location =
default case = lower
case sensitive = No
preserve case = Yes
short preserve case = Yes
mangle case = No
mangling char = ~
hide dot files = Yes
hide unreadable = No
delete veto files = No
veto files =
hide files =
veto oplock files =
map system = No
map hidden = No
map archive = Yes
mangled names = Yes
mangled map =
browseable = Yes
blocking locks = Yes
csc policy = manual
fake oplocks = No
locking = Yes
oplocks = Yes
level2 oplocks = Yes
oplock contention limit = 2
posix locking = Yes
strict locking = No
share modes = Yes
copy =
include =
exec =
preexec close = No
postexec =
root preexec =
root preexec close = No
root postexec =
available = Yes
volume =
fstype = NTFS
set directory = No
wide links = Yes
follow symlinks = Yes
dont descend =
magic script =
magic output =
delete readonly = No
dos filemode = No
dos filetimes = No
dos filetime resolution = No
fake directory create times = No
vfs object =
vfs options =
msdfs root = No
[netlogon]
path = /usr/share/samba/netlogon
write list = @domainadmin
[profiles]
path = /home/profiles
read only = No
inherit permissions = Yes
inherit acls = Yes
[Public]
path = /export0
read only = No
inherit permissions = Yes
inherit acls = Yes
