On 8/3/2011 6:19 AM, Andrea Lanza wrote:
At last I succeded in trying your solution...

Perfect !
Excellent!

No need to do anything other apart what you said.


        create mask = 2770
Do you intend for all files to have the execute bit set?  If not, then
    create mask = 2660
    force create mode = 2660
        directory mask = 2770
       force directory mode = 2770
        inherit acls = Yes


when listing the dir in linux I can read:

rwxrws---

I think that "s" means the inheritance of group-acl flagged on...
That is correct.

Dale

Thank you very much again,

Andrea



-----Messaggio originale-----
Da: Dale Schroeder [mailto:[email protected]]
Inviato: venerdì 29 luglio 2011 19:31
A: Andrea Lanza
Cc: '[email protected]'
Oggetto: Re: [Samba] question about groups

Andrea,

How about doing 'chmod 2770 /path/to/share' and also on all existing
subfolders of /path/to/share.
In the share definition, you could also add

      directory mask = 2770
      force directory mode = 2770

Dale

On 07/29/2011 6:03 AM, Andrea Lanza wrote:
Hi all,
I have a (simple?) question about groups.

this is my scenario:

Windows Active directory domain

Samba file server ADS integrated

2 shares on this last server (share1, share2)

2 groups on the AD (group1 and group2)

First share is only fully available to group1: this is easily done

second share is fully available to group2
---

Then I have some users belonging to both group1 and group2;
anyway group1 is the principal group.

when a user of this kind create a folder or a file on the share2, the
file is created
as "userxxx" and "group1", so beiing unaccessible to user on the
group2.
(permission:770, so if one user is in group2 cannot access this file
belonging to group1)
I tried several combination of "inherit acl", "possible user" and so
on, but no hope to make it works.
How can I achieve this result ?

And sorry if it was already answered elsewhere: I found a lot of
discussion (also very old, 2003 and so on)
but no one helped me.

I am running samba :

3.5.xxx on opensuse 11.4

thanks in advance,
Andrea


--
This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.


--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba

Reply via email to