Samba uses the masks on the files/directories to reflect different things on
different platforms.   So, if you have users from say Windows accessing
these shares, you don't want to be changing the file attributes without
careful consideration.

If you are having problems with only the owner having r/w access to files
that he/she created, consider using the 'force user =' option in your
SMB.CONF file for each share.  We do this and it works perfectly.

For each share, specify a 'force user'.  Then when any connected samba user
uses that share, you ensure that the file created belongs to a single unix
user.  Then any other user of the share also has access.

Aria

-----Original Message-----
From: Linux on 390 Port [mailto:[email protected]] On Behalf Of van
Sleeuwen, Berry
Sent: Wednesday, May 04, 2011 7:48 AM
To: [email protected]
Subject: Re: Samba authorization

We have tried several of the recommendations but still the files are created
as <userid> group users and only the owner has read/write on the files. Is
there anything else we can do?

Currently we have in the /etc/smb.conf:

[MFPL]
        create mask = 0755
        valid users = @users
        path = /srv/smb/shares/MFPL

 [PL_Linux]
        # Identification
        comment = PL Linux

        # Management
        path        = /srv/smb/shares/MFPL/PL_Linux
        writable    = yes
        force group = +zlinux
        valid users = @zlinux

        # Access set up
        create mask          = 0000
        directory mask       = 0775
        force create mode    = 0770
        force directory mode = 0775


And the directories contain:

nlzlx115:~ # ll /srv/smb/
drwxr-xr-x 7 root users 4096 Apr 20 13:36 shares

nlzlx115:~ # ll /srv/smb/shares/
drwxrwxr-x 5 root users  4096 May  4 09:38 MFPL

nlzlx115:~ # ll /srv/smb/shares/MFPL/
drwxrwxr-x 2 root zlinux 4096 May  4 10:14 PL_Linux

nlzlx115:~ # ll /srv/smb/shares/MFPL/PL_Linux/
-rwxr--r-- 1 nl12237 users 0 May  4 10:13 New (17) Text Document.txt
-rwxr--r-- 1 nl12237 users 0 May  4 10:14 New (18) Text Document.txt

Regards, Berry.

>
> The "create mask" is ANDed with whatever "DOS" permissions the Windows
> client is specifying.  The, the "force create mode" is ORed with the
result of
> that.  If you absolutely positively want every file to be 0770, then I
would
> say use an all-zero create mask, and 0770 for the force create mode.
>
> What is the owner and group of the /srv/smb/shares/MFPL/PL Linux
> directory?  For the group ownership problem, you could try "force group =
> +zlinux".
>
>
> Mark Post
>

----------------------------------------------------------------------
For LINUX-390 subscribe / signoff / archive access instructions,
send email to [email protected] with the message: INFO LINUX-390 or
visit
http://www.marist.edu/htbin/wlvindex?LINUX-390
----------------------------------------------------------------------
For more information on Linux on System z, visit
http://wiki.linuxvm.org/

----------------------------------------------------------------------
For LINUX-390 subscribe / signoff / archive access instructions,
send email to [email protected] with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390
----------------------------------------------------------------------
For more information on Linux on System z, visit
http://wiki.linuxvm.org/

Reply via email to