samba-users May 2010 archive
Main Archive Page > Month Archives  > samba-users archives
samba-users: [Samba] Permission issues

[Samba] Permission issues

From: David van Laatum <david_at_nospam>
Date: Fri May 21 2010 - 03:56:59 GMT

Last weekend I changed over to our new file server running Debian Lenny 64Bit
Samba version 3.2.5... all seemed to work fine but we are getting the
occasional file that ends up with permissions like -r--rwx---
ie the owning user has no write permission. Ive been unable to replicate but
am told they are not new files. they seem to all be MS Office documents and the
users just get access denied when they try and save the file. Not sure why this
is happening but will post more info if I figure out more.

Following is an extract of part of my samba config.... Ive only included the
accounts share but its happening on several.

   load printers = no
   security = ads
   workgroup = ***************
   server string = File Store
   realm = *************
   password server = ***********
   wins server = **************
   dns proxy = no
   log file = /var/log/samba/log.%m
   max log size = 100
   log level = 0
   panic action = /usr/share/samba/panic-action %d
   encrypt passwords = true
   idmap backend = ad
   passdb backend = tdbsam
   idmap uid = 100-90000
   idmap gid = 100-90000
   winbind cache time = 300
   winbind nss info = rfc2307
   winbind enum groups = yes
   winbind enum users = yes
   winbind use default domain = yes
   winbind separator = /
   winbind nested groups = yes
   template homedir = /home/%U/homedir
   template shell = /bin/bash
   debug uid = yes
   obey pam restrictions = yes
   idmap alloc backend = tdb
   idmap alloc config:range = 90000-100000

  comment = Accounts Stuff
  path = /filestore/accounts
  guest ok = no
  browseable = yes
  valid users = @accounts group
  writable = yes
  force create mode = 0660
  force directory mode = 0770
  fstype = EXT3
  hide unreadable = yes
  dos filemode = yes
  acl map full control = yes
-- To unsubscribe from this list go to the following URL and read the instructions: