Re: [Samba] Inherit permissions question (Please help)
Hi Thomas, Thanks for your reply. Yea, it looks like ACLs aren't going to really help me with this issue. I think the best is just to get the Domain Admin to manually change the permissions after copying files to users' profile folders. This should hopefully not have to happen to often. Thank you so much for your time, input and assistance. It's greatly appreciated. Keep well. Kindest regards David Wilson ___ D c D a t a Tel +27 33 342 7003 Fax +27 33 345 4155 Cell +27 82 4147413 http://www.dcdata.co.za [EMAIL PROTECTED] Powered by Linux, driven by passion ! ___ "Computers are not intelligent. They only think they are." - Original Message - From: "Thomas Reiss" <[EMAIL PROTECTED]> To: Sent: Friday, January 28, 2005 7:12 PM Subject: Re: [Samba] Inherit permissions question (Please help) Hallo David Wilson, M... I wonder what else I could try ? Perhaps it would easier if I configure ACL support and just set the permissions manually each time a new file is copied to the users' areas by a Domain Admin ? I think you doesn't need in this case ACL support because the Problem is still the same, or not ? Manually change the Permission seems to be the only way. Must you do this very often ? When yes, write a little Skript that change the Permissions for you on all userx/ Directory (maybe as a post exec script in the Share Definition). Greetings Thomas -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Inherit permissions question (Please help)(disclaimer)
David, I'm kinda shooting in the dark here, but from what I remember, you need to be able to manage various user files without affecting the user ownership and while preserving the 'security' of each users files from being seen from everybody else. What I would do is create a group in /etc/groups -- called 'manager' or whatever. The member(s) of the manager group would be whoever would need read/write access to every users files. I would then set user and group ownership of the user's home directories to "user.manager" via chown. That way cron or whatever is running as 'manager' could do whatever is needed globally for all users while preserving the individual user security. In that vein, force group = manager would assure access to the manager. The only fly in the ointment would be if you had a common share that all needed to access while you are still trying to preserve individual security to. But, heck, if that's the case, then individual security would be irrelevant unless you simply wanted to grant write access to each. Like I said, I'm shooting in the dark, but that is my .02 on what you are looking at. Linux/samba is flexible enough from a permissions standpoint that you can do about anything you want to. The Linux basic permissions of user.group.world coupled with force user, force group and inherit permissions along with your /etc/group definitions are the basic building blocks for just about anything you can think of. One other option would be to define an 'admin users = ' for the shares you want to manage. That is another option for giving a user or group of users rwx access to any share while preserving user privacy. Hope this helps. And of course the disclaimer: I'm a lawyer, who use to be an engineer, who still 'thinks' he can stay reasonably current on his OS of choice, but has to regrettably admit that I am no authority on the finer points of coding/samba/Linux anymore. (that stopped when I quit babysitting 750,000 lines of FORTRAN known as SVDS (space vehicle dynamic simulation - the shuttle ascent launch processor in '89) (Yes that was at the time DIBS and DOLILU was coming online) (... and for the curious DOLILU = day of launch I-Load update)(uhh.. GNC, Pitch-Yaw-Roll stuff from SRB ignition to MECO)(uhh.. it's supposed to keep the wings from coming off going uphill)(and uhh.. again, ET foam shedding was never an issue while Martin-Marietta built the tank)(and uhh.. the Martin-Thiokol booster o-ring problem had been found and addressed by then [51-L] --> STS26) -- David C. Rankin, J.D., P.E. RANKIN LAW FIRM, PLLC 510 Ochiltree Street Nacogdoches, Texas 75961 (936) 715-9333 (936) 715-9339 fax www.rankin-bertin.com -- - Original Message - From: "David Wilson" <[EMAIL PROTECTED]> To: "david rankin" <[EMAIL PROTECTED]>; "samba" Sent: Friday, January 28, 2005 12:51 AM Subject: Re: [Samba] Inherit permissions question (Please help) Hi David, Thanks for your reply. That would work but then because it's on the share for user's profiles each user would then be able to access everyone elses profile. Please correct me if I'm wrong. Kindest regards David Wilson ___ D c D a t a Tel +27 33 342 7003 Fax +27 33 345 4155 Cell +27 82 4147413 http://www.dcdata.co.za [EMAIL PROTECTED] Powered by Linux, driven by passion ! ___ "Computers are not intelligent. They only think they are." - Original Message - From: "david rankin" <[EMAIL PROTECTED]> To: "samba" Sent: Friday, January 28, 2005 6:13 AM Subject: Re: [Samba] Inherit permissions question (Please help) Sorry I'm late on this thread, but would 'force user = ' force group = ' work? -- David C. Rankin, J.D., P.E. RANKIN LAW FIRM, PLLC 510 Ochiltree Street Nacogdoches, Texas 75961 (936) 715-9333 (936) 715-9339 fax www.rankin-bertin.com -- - Original Message - From: "David Wilson" <[EMAIL PROTECTED]> To: "Craig White" <[EMAIL PROTECTED]>; Sent: Wednesday, January 26, 2005 3:26 AM Subject: Re: [Samba] Inherit permissions question (Please help) Hi Craig, Thanks for your reply. My suggestions for using a preexec script is a sort of "last resort" option. I could rather configure a job in cron that checks permissions. Ideally I need the "inherit permissions" option but with the ability to also include user & group ownership. To get this done samba would require root privileges to change the ownership of files to that of the parent folder - which probably wouldn't be a good idea ? Thanks for your help so far. Any assistance/input would be greatly appreciated. Kindest regards David Wilson ___ D c D a t a Tel +27
Re: [Samba] Inherit permissions question (Please help)
Hallo David Wilson, > M... I wonder what else I could try ? > Perhaps it would easier if I configure ACL support and just set the > permissions manually each time a new file is copied to the users' areas by > a Domain Admin ? I think you doesn't need in this case ACL support because the Problem is still the same, or not ? Manually change the Permission seems to be the only way. Must you do this very often ? When yes, write a little Skript that change the Permissions for you on all userx/ Directory (maybe as a post exec script in the Share Definition). Greetings Thomas -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Inherit permissions question (Please help)
Hi David, Thanks for your reply. That would work but then because it's on the share for user's profiles each user would then be able to access everyone elses profile. Please correct me if I'm wrong. Kindest regards David Wilson ___ D c D a t a Tel +27 33 342 7003 Fax +27 33 345 4155 Cell +27 82 4147413 http://www.dcdata.co.za [EMAIL PROTECTED] Powered by Linux, driven by passion ! ___ "Computers are not intelligent. They only think they are." - Original Message - From: "david rankin" <[EMAIL PROTECTED]> To: "samba" Sent: Friday, January 28, 2005 6:13 AM Subject: Re: [Samba] Inherit permissions question (Please help) Sorry I'm late on this thread, but would 'force user = ' force group = ' work? -- David C. Rankin, J.D., P.E. RANKIN LAW FIRM, PLLC 510 Ochiltree Street Nacogdoches, Texas 75961 (936) 715-9333 (936) 715-9339 fax www.rankin-bertin.com -- - Original Message - From: "David Wilson" <[EMAIL PROTECTED]> To: "Craig White" <[EMAIL PROTECTED]>; Sent: Wednesday, January 26, 2005 3:26 AM Subject: Re: [Samba] Inherit permissions question (Please help) Hi Craig, Thanks for your reply. My suggestions for using a preexec script is a sort of "last resort" option. I could rather configure a job in cron that checks permissions. Ideally I need the "inherit permissions" option but with the ability to also include user & group ownership. To get this done samba would require root privileges to change the ownership of files to that of the parent folder - which probably wouldn't be a good idea ? Thanks for your help so far. Any assistance/input would be greatly appreciated. Kindest regards David Wilson ___ D c D a t a Tel +27 33 342 7003 Fax +27 33 345 4155 Cell +27 82 4147413 http://www.dcdata.co.za [EMAIL PROTECTED] Powered by Linux, driven by passion ! ___ "Computers are not intelligent. They only think they are." - Original Message ----- From: "Craig White" <[EMAIL PROTECTED]> To: Sent: Wednesday, January 26, 2005 10:41 AM Subject: Re: [Samba] Inherit permissions question (Please help) Am I the only one that thinks it's a terrible idea? When I need to make changes to user profiles, I use things like... logon script perl/shell script updates on actual samba server but I suppose that you could have a 'pre-exec' script that changes the ownership of all files in a person's profile be changed upon login. Craig -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Inherit permissions question (Please help)
Sorry I'm late on this thread, but would 'force user = ' force group = ' work? -- David C. Rankin, J.D., P.E. RANKIN LAW FIRM, PLLC 510 Ochiltree Street Nacogdoches, Texas 75961 (936) 715-9333 (936) 715-9339 fax www.rankin-bertin.com -- - Original Message - From: "David Wilson" <[EMAIL PROTECTED]> To: "Craig White" <[EMAIL PROTECTED]>; Sent: Wednesday, January 26, 2005 3:26 AM Subject: Re: [Samba] Inherit permissions question (Please help) Hi Craig, Thanks for your reply. My suggestions for using a preexec script is a sort of "last resort" option. I could rather configure a job in cron that checks permissions. Ideally I need the "inherit permissions" option but with the ability to also include user & group ownership. To get this done samba would require root privileges to change the ownership of files to that of the parent folder - which probably wouldn't be a good idea ? Thanks for your help so far. Any assistance/input would be greatly appreciated. Kindest regards David Wilson ___ D c D a t a Tel +27 33 342 7003 Fax +27 33 345 4155 Cell +27 82 4147413 http://www.dcdata.co.za [EMAIL PROTECTED] Powered by Linux, driven by passion ! ___ "Computers are not intelligent. They only think they are." - Original Message - From: "Craig White" <[EMAIL PROTECTED]> To: Sent: Wednesday, January 26, 2005 10:41 AM Subject: Re: [Samba] Inherit permissions question (Please help) Am I the only one that thinks it's a terrible idea? When I need to make changes to user profiles, I use things like... logon script perl/shell script updates on actual samba server but I suppose that you could have a 'pre-exec' script that changes the ownership of all files in a person's profile be changed upon login. Craig -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Inherit permissions question (Please help)
Hi Thomas, Thank you for your reply and for the information and ideas. I think your option would work ok, but as you said a bit hairy with a lot of users. :) We have about 700 users that we are running off this Samba box so it would be a bit of a mission to keep maintained. M... I wonder what else I could try ? Perhaps it would easier if I configure ACL support and just set the permissions manually each time a new file is copied to the users' areas by a Domain Admin ? Kindest regards David Wilson ___ D c D a t a Tel +27 33 342 7003 Fax +27 33 345 4155 Cell +27 82 4147413 http://www.dcdata.co.za [EMAIL PROTECTED] Powered by Linux, driven by passion ! ___ "Computers are not intelligent. They only think they are." - Original Message - From: "Thomas Reiss" <[EMAIL PROTECTED]> To: "David Wilson" <[EMAIL PROTECTED]> Sent: Wednesday, January 26, 2005 7:42 PM Subject: Re: [Samba] Inherit permissions question (Please help) Hallo David Wilson, Hi Thomas, Thank you for your reply and the information. Will the "s"-Bit cause all new files that are written by a "Domain Admin" to the user1/ folder to be owned by "user1" ? No, cause only that the Group was always "Domain Admin". My problem is that "Domain Admins" can write to users' folders in the [userprofile] share but then the respective user who owns the folder can't access the new data in it. The "inherit permisions" would solve my problem except that it does not allow user/group ownership to be passed down onto files. Any ideas ? :) hmm, can you set the "s"-Bit on the UID with chmod u+s user1/ ? Ok it make a testhmm seems not funktional. I see in the Section of "inherit permissions" in "man smb.conf": Note that the setuid bit is never set via inheritance (the code explicitly prohibits this) --- Hmmm...i think the only way is to make a group "user1" and add the respective "Admin"-User to this Group and set the Permission to 770 and the Group to "user1-Group" of user1/ Folder. Additional add the "s"-bit to the Group and set "inherit permissions = yes" in smb.conf. But, this would be hairy on 2000 Users Greetings Thomas -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Inherit permissions question (Please help)
Hi Craig, Thanks for your reply. My suggestions for using a preexec script is a sort of "last resort" option. I could rather configure a job in cron that checks permissions. Ideally I need the "inherit permissions" option but with the ability to also include user & group ownership. To get this done samba would require root privileges to change the ownership of files to that of the parent folder - which probably wouldn't be a good idea ? Thanks for your help so far. Any assistance/input would be greatly appreciated. Kindest regards David Wilson ___ D c D a t a Tel +27 33 342 7003 Fax +27 33 345 4155 Cell +27 82 4147413 http://www.dcdata.co.za [EMAIL PROTECTED] Powered by Linux, driven by passion ! ___ "Computers are not intelligent. They only think they are." - Original Message - From: "Craig White" <[EMAIL PROTECTED]> To: Sent: Wednesday, January 26, 2005 10:41 AM Subject: Re: [Samba] Inherit permissions question (Please help) Am I the only one that thinks it's a terrible idea? When I need to make changes to user profiles, I use things like... logon script perl/shell script updates on actual samba server but I suppose that you could have a 'pre-exec' script that changes the ownership of all files in a person's profile be changed upon login. Craig -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Inherit permissions question (Please help)
Am I the only one that thinks it's a terrible idea? When I need to make changes to user profiles, I use things like... logon script perl/shell script updates on actual samba server but I suppose that you could have a 'pre-exec' script that changes the ownership of all files in a person's profile be changed upon login. Craig -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Inherit permissions question (Please help)
Any other ideas ? Pehaps this could be added as a feature to Samba ? Kindest regards David Wilson ___ D c D a t a Tel +27 33 342 7003 Fax +27 33 345 4155 Cell +27 82 4147413 http://www.dcdata.co.za [EMAIL PROTECTED] Powered by Linux, driven by passion ! ___ "Computers are not intelligent. They only think they are." - Original Message - From: "David Wilson" <[EMAIL PROTECTED]> To: ; "Gerald (Jerry) Carter" <[EMAIL PROTECTED]>; "Thomas Reiss" <[EMAIL PROTECTED]> Sent: Tuesday, January 25, 2005 2:03 PM Subject: Re: [Samba] Inherit permissions question (Please help) Hi Thomas, Thank you for your reply and the information. Will the "s"-Bit cause all new files that are written by a "Domain Admin" to the user1/ folder to be owned by "user1" ? My problem is that "Domain Admins" can write to users' folders in the [userprofile] share but then the respective user who owns the folder can't access the new data in it. The "inherit permisions" would solve my problem except that it does not allow user/group ownership to be passed down onto files. Any ideas ? :) Thank you for your help so far. Kindest regards David Wilson ___ D c D a t a Tel +27 33 342 7003 Fax +27 33 345 4155 Cell +27 82 4147413 http://www.dcdata.co.za [EMAIL PROTECTED] Powered by Linux, driven by passion ! ___ "Computers are not intelligent. They only think they are." - Original Message - From: "Thomas Reiss" <[EMAIL PROTECTED]> To: ; "Gerald (Jerry) Carter" <[EMAIL PROTECTED]> Sent: Tuesday, January 25, 2005 9:56 AM Subject: Re: [Samba] Inherit permissions question (Please help) Hallo David Wilson, If the administrator(root) had to write a file (test.txt) to the user1 folder and I had "inherit permissions" turned on, then file would be written as: rwx-- 16 root Domain Admins 0 2005-01-21 07:07 test.txt Unfortunately I need "user1" to own the file, just like it's parent directory, which is as follows: drwx- 16 user1 users 4096 2005-01-21 user1/ I thing it makes Life easyer when you change the Group Owner to "Domain Admins" and set the "s"-Bit and the Permissions to 770 on the userx/ Directorys. So every "Domain Admin" can write files on the directorys. Try this (or do this on a higher Directory Level): drwxrws-- 16 user1 Domain Admins 4096 2005-01-21 user1/ Hope it helps. Greetings Thomas -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Inherit permissions question (Please help)
Hi Thomas, Thank you for your reply and the information. Will the "s"-Bit cause all new files that are written by a "Domain Admin" to the user1/ folder to be owned by "user1" ? My problem is that "Domain Admins" can write to users' folders in the [userprofile] share but then the respective user who owns the folder can't access the new data in it. The "inherit permisions" would solve my problem except that it does not allow user/group ownership to be passed down onto files. Any ideas ? :) Thank you for your help so far. Kindest regards David Wilson ___ D c D a t a Tel +27 33 342 7003 Fax +27 33 345 4155 Cell +27 82 4147413 http://www.dcdata.co.za [EMAIL PROTECTED] Powered by Linux, driven by passion ! ___ "Computers are not intelligent. They only think they are." - Original Message - From: "Thomas Reiss" <[EMAIL PROTECTED]> To: ; "Gerald (Jerry) Carter" <[EMAIL PROTECTED]> Sent: Tuesday, January 25, 2005 9:56 AM Subject: Re: [Samba] Inherit permissions question (Please help) Hallo David Wilson, If the administrator(root) had to write a file (test.txt) to the user1 folder and I had "inherit permissions" turned on, then file would be written as: rwx-- 16 root Domain Admins 0 2005-01-21 07:07 test.txt Unfortunately I need "user1" to own the file, just like it's parent directory, which is as follows: drwx- 16 user1 users 4096 2005-01-21 user1/ I thing it makes Life easyer when you change the Group Owner to "Domain Admins" and set the "s"-Bit and the Permissions to 770 on the userx/ Directorys. So every "Domain Admin" can write files on the directorys. Try this (or do this on a higher Directory Level): drwxrws-- 16 user1 Domain Admins 4096 2005-01-21 user1/ Hope it helps. Greetings Thomas -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Inherit permissions question (Please help)
Hallo David Wilson, > If the administrator(root) had to write a file (test.txt) to the user1 > folder and I had "inherit permissions" turned on, then file would be > written as: > rwx-- 16 root Domain Admins 0 2005-01-21 07:07 test.txt > Unfortunately I need "user1" to own the file, just like it's parent > directory, which is as follows: > drwx- 16 user1 users 4096 2005-01-21 user1/ I thing it makes Life easyer when you change the Group Owner to "Domain Admins" and set the "s"-Bit and the Permissions to 770 on the userx/ Directorys. So every "Domain Admin" can write files on the directorys. Try this (or do this on a higher Directory Level): drwxrws-- 16 user1 Domain Admins 4096 2005-01-21 user1/ Hope it helps. Greetings Thomas -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Inherit permissions question (Please help)
Hi Gerry, Thanks for your reply. OK, that makes sense. Unfortunately I can't use the "force user" option on the share due to the sub folders in the share being owned separately by other users (600+ of them). If the administrator(root) had to write a file (test.txt) to the user1 folder and I had "inherit permissions" turned on, then file would be written as: rwx-- 16 root Domain Admins 0 2005-01-21 07:07 test.txt Unfortunately I need "user1" to own the file, just like it's parent directory, which is as follows: drwx- 16 user1 users 4096 2005-01-21 user1/ The problem is that I have other users in the same "userprofile" share, which each need to own their own profile folder and files in them. Perhaps configuring filesystem ACLs and turning on "inherit acls" would help ? Any ideas ? :) Perhaps I need to write a "postexec" script that looks at the user's folder name, which corresponds to the username and does a "chmod -R [user] [user]" on the folder after data is written to it ? Thank you for your assistance so far, greatly appreciated ! Kindest regards David Wilson ___ D c D a t a Tel +27 33 342 7003 Fax +27 33 345 4155 Cell +27 82 4147413 http://www.dcdata.co.za [EMAIL PROTECTED] Powered by Linux, driven by passion ! ___ "Computers are not intelligent. They only think they are." - Original Message - From: "Gerald (Jerry) Carter" <[EMAIL PROTECTED]> To: "David Wilson" <[EMAIL PROTECTED]> Cc: Sent: Monday, January 24, 2005 3:53 PM Subject: Re: [Samba] Inherit permissions question (Please help) -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 David Wilson wrote: |>> If the administrator connects to \\server\userprofile\user1 and |>> writes a file named "test.txt" into the directory the permissions |>> from the directory "user1" are not propagated down to the new file. |>> My permissions on the "user1" directory are set as follows: |>> drwx- 16 user1 users 4096 2005-01-21 user1/ |>> |>> The file "test.txt" gets written with the following permissions: |>> -rw-- 16 root Domain Admins 0 2005-01-21 07:07 test.txt |>> |>> Any ideas on how I get samba to write it so that the owner of the |>> folder propagates to new files written into the folder even if a |>> domain admin writes them there ? Inherit permissions set file bits not the owner. You might have more luck with the 'force user' option. But be careful of granting more access than you intend. cheers, jerry = Alleviating the pain of Windows(tm) --- http://www.samba.org GnuPG Key- http://www.plainjoe.org/gpg_public.asc "I never saved anything for the swim back." Ethan Hawk in Gattaca -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.4 (GNU/Linux) Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org iD8DBQFB9P27IR7qMdg1EfYRAiuxAKCJe/tse4/vSzm/gVKReTetXR8SBACbBFt9 Z+dkBSAOYjtEuyxY8ayd4rk= =W/Fd -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Inherit permissions question (Please help)
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 David Wilson wrote: |>> If the administrator connects to \\server\userprofile\user1 and |>> writes a file named "test.txt" into the directory the permissions |>> from the directory "user1" are not propagated down to the new file. |>> My permissions on the "user1" directory are set as follows: |>> drwx- 16 user1 users 4096 2005-01-21 user1/ |>> |>> The file "test.txt" gets written with the following permissions: |>> -rw-- 16 root Domain Admins 0 2005-01-21 07:07 test.txt |>> |>> Any ideas on how I get samba to write it so that the owner of the |>> folder propagates to new files written into the folder even if a |>> domain admin writes them there ? Inherit permissions set file bits not the owner. You might have more luck with the 'force user' option. But be careful of granting more access than you intend. cheers, jerry = Alleviating the pain of Windows(tm) --- http://www.samba.org GnuPG Key- http://www.plainjoe.org/gpg_public.asc "I never saved anything for the swim back." Ethan Hawk in Gattaca -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.4 (GNU/Linux) Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org iD8DBQFB9P27IR7qMdg1EfYRAiuxAKCJe/tse4/vSzm/gVKReTetXR8SBACbBFt9 Z+dkBSAOYjtEuyxY8ayd4rk= =W/Fd -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Inherit permissions question (Please help)
Any ideas ?? Kindest regards David Wilson ___ D c D a t a Tel +27 33 342 7003 Fax +27 33 345 4155 Cell +27 82 4147413 http://www.dcdata.co.za [EMAIL PROTECTED] Powered by Linux, driven by passion ! ___ "Computers are not intelligent. They only think they are." - Original Message - From: "David Wilson" <[EMAIL PROTECTED]> To: Sent: Sunday, January 23, 2005 6:28 PM Subject: [Samba] Inherit permissions question Hi guys, Unfortunately I'm still battling with this. Perhaps I've missed something ? Your assistance would be greatly appreciated. Thanks in advance. Kindest regards David Wilson ___ D c D a t a Tel +27 33 342 7003 Fax +27 33 345 4155 Cell +27 82 4147413 http://www.dcdata.co.za [EMAIL PROTECTED] Powered by Linux, driven by passion ! ___ - Original Message - From: "David Wilson" <[EMAIL PROTECTED]> To: Sent: Friday, January 21, 2005 7:17 AM Subject: Inherit permissions question Hi guys, How are you ? We have a share named [userprofile] on our Samba-3.0.9 server where each users' profile is stored. Fairly often a user which is not the user that owns the profile i.e and admin, needs to copy files into other users' profile folders. The problem which then arises is that the user who owns the profile is unable to access the new files, due to the UNIX permissions being set to the person who copied the files into the directory. I've looked through the smb.conf and found the "inherit permissions" parameter and tried it but cannot seem to get it to work ? In my smb.conf for the [userprofile] share I have the following: [userprofile] path = /data/userprofile read only = no guest ok = yes profile acls = yes browseable = no csc policy = disable share modes = no inherit permissions = yes If the administrator connects to \\server\userprofile\user1 and writes a file named "test.txt" into the directory the permissions from the directory "user1" are not propagated down to the new file. My permissions on the "user1" directory are set as follows: drwx- 16 user1 users 4096 2005-01-21 user1/ The file "test.txt" gets written with the following permissions: -rw-- 16 root Domain Admins 0 2005-01-21 07:07 test.txt Any ideas on how I get samba to write it so that the owner of the folder propagates to new files written into the folder even if a domain admin writes them there ? Many thanks. Kindest regards David Wilson ___ D c D a t a Tel +27 33 342 7003 Fax +27 33 345 4155 Cell +27 82 4147413 http://www.dcdata.co.za [EMAIL PROTECTED] Powered by Linux, driven by passion ! ___ -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
