Hello,

I use Samba 2.27 on top of Red Hat 9 as a Domain Member Server. The
integration with the NT4 Primary Domain Controller works fine. Being used to
NTFS I find the definition of Access Rights on shared files is somewhat
limited.  I can only assign Access Rights tot the User, his Primary User
Group and the Everyone Group.  I Understand this is a limitation of the
Linux filesystem where one assigns rights to User, Group and Others?

However there is an option valid users = [user list]  that you can use to
let Samba determine who has access. As far as I have been able to test it,
this option only seems to work with users that are defined in the Linux
account database. As soon as I define the valid users option,  my NT users
can not use the share. If I remove the valid users option from the share,
the problem is gone.

Another thing I don't understand is why I keep getting an Access Denied
Error when I try to modify access rights on a file I have created myself (as
an NT user) on the Samba share. The NT combo box tells me I have full
control on the file but I can not change any permissions. On the level of
Linux user group and others have read, write and execute rights, so that
should be sufficient.

So the question is:  Are these bugs or are these features? And if  they are
bugs, is there a fix?

I have seen the add user script option too, which seems to allow the
creation of Linux users "on the fly"  But I haven't been able to implement
it successfully (yet).  Or do I have to turn my Samba server into a Domain
PDC for this option to work? Can anyone help me on this.?

Any answers are highly appreciated.

Best Regards from the Netherlands,

Henk

PS: please find my smb.conf below


----------------------------------------------------------------------------
----

Current Config
 

# Samba config file created using SWAT
# from 192.168.0.2 (192.168.0.2)
# Date: 2004/05/07 09:04:45

# Global parameters
[global]
        workgroup = WORKGROUP
        netbios name = NETBIOSNAME
        security = DOMAIN
        encrypt passwords = Yes
        password server = *
        log level = 3
        log file = /tmp/%S.log
        winbind uid = 10000-20000
        winbind gid = 10000-20000
        admin users = DOMAIN\domainadmin
        printer admin = DOMAIN\domainadmin

[test]
        comment = my shared folder
        path = /home/samba
        force group = ARCHITECT
        read only = No
        force create mode = 0777
        force directory mode = 0777

[print$]
        path = /usr/local/samba/printers
        write list = [ a list of users]
        read only = No
        guest ok = Yes

[printers]
        path = /tmp
        printable = Yes
        browseable = No

 
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

Reply via email to