Re: [Samba] Re: can I configure smb.conf to always publish share files with -rw-rw-rw- permission ?

2007-10-15 Thread Greg Byshenk
On Mon, Oct 15, 2007 at 07:25:08AM +, KLEIN St?phane wrote:
> Le Mon, 15 Oct 2007 00:03:25 +0200, Greg Byshenk a ??crit??:
> > On Sun, Oct 14, 2007 at 09:30:19PM +, KLEIN Stephane wrote:

> >> I use samba to share some files between some clients. I would like than
> >> these files are always view with -rw-rw-rw- rights by all clients event
> >> if someone change file access permissions.
> >  
> >> Can I configure smb.conf to do that ?

> > I don't think that you can force Samba to have them "view"ed that way,
> > as the permissions in Samba are dependent upon the permissions on the
> > files themselves (on the server).

> > But you can force the permissions to be set in a given way by Samba when
> > files are created or modified.  Look at 'force create mode' in the
> > smb.conf man page.
 
> I know force create mode, force directory mode parameters but how can I 
> force permission when one user launch "chmod" ?

I'm not sure what you are asking when you refer to 'launch "chmod"'.

If you mean 'change permissions from windows', then 'force create mode' 
should do what you want.

   force create mode (S)
  This  parameter  specifies  a  set of UNIX mode bit permissions that
  will always be set on a file created by Samba. This is done by  bit-
  wise  'OR'ing  these bits onto the mode bits of a file that is being
  created or having its permissions  changed.  The  default  for  this
  parameter is (in octal) 000. The modes in this parameter are bitwise
  'OR'ed onto the file mode after the mask  set  in  the  create  mask
  parameter is applied. 

Note the "is being created *or having its permissions changed*"...

If you mean 'actually running "chmod" on the server', then there is nothing
that Samba can do about that, as that is something that is occurring on the
server itself, below the level of Samba. 

What might work to allow full access to everythign in the share-- regardless of
permissions -- would be to assign 'admin users' to the share in question... but
read the warnings about this.


-- 
greg byshenk  -  [EMAIL PROTECTED]  -  Leiden, NL

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
..
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
...
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
..
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
...
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
..
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
...
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
..
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
...
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
..
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


RE: [Samba] How to make "Add permission" for folder in system with ntacl support?

2007-10-15 Thread Necos Secon

Yes, it is possible to do this in Samba with Linux ACL support.

You have to look at setfacl. There are two types of permissions that you can 
set using setfacl. The first are permissions on the directory or file itself. 
For example, this sets the group ntadmins to read/write/execute on the 
directory /home/ntadmins:

setfacl -m g:"ntadmins":rwx -R /home/ntadmins

Now, the second type of permissions apply to any file (or directory) that is 
created in /home/ntadmins:

setfacl -m d:g:"ntusers":--- -R /home/ntadmins

The effect of the second setfacl command says that the group ntusers will be 
explicitly given no access to any file or directory created in /home/ntadmins.

So, if you're trying to create a dropbox for a group staff, it would look 
something like this:

setfacl -m g:"staff":rwx -R /home/dropbox
setfacl -m d:g:"staff":--- -R /home/dropbox

What this does is allow them to add files to the directory, but immediately 
strip their permissions once the file is uploaded. Try this out. I hope it does 
what you want.

> From: [EMAIL PROTECTED]
> To: samba@lists.samba.org
> Subject: Fw: [Samba] How to make "Add permission" for folder in system with   
> ntacl support?
> Date: Sun, 14 Oct 2007 22:49:34 +0300
> 
> Is it too simple and therefore noone will answer? :) Or it is not possible 
> with Samba on Linux?
> 
> Thanks,
> G.
> 
> 
> 
> - Original Message - 
> From: "Georgy Goshin" <[EMAIL PROTECTED]>
> To: 
> Sent: Thursday, October 11, 2007 6:34 PM
> Subject: [Samba] How to make "Add permission" for folder in system with 
> ntacl support?
> 
> 
> > Hi,
> >
> > On windows nt is possible to configure permission when users can add files 
> > to share or folder but can't read and even list files in this share or 
> > filder. Is it possible to make this with samba fileserver?
> >
> >
> > Thanks,
> > G.
> > -- 
> > To unsubscribe from this list go to the following URL and read the
> > instructions:  https://lists.samba.org/mailman/listinfo/samba
> > 
> 
> -- 
> To unsubscribe from this list go to the following URL and read the
> instructions:  https://lists.samba.org/mailman/listinfo/samba

_
Climb to the top of the charts!  Play Star Shuffle:  the word scramble 
challenge with star power.
http://club.live.com/star_shuffle.aspx?icid=starshuffle_wlmailtextlink_oct--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Re: can I configure smb.conf to always publish share files with -rw-rw-rw- permission ?

2007-10-15 Thread Greg Byshenk
On Mon, Oct 15, 2007 at 07:25:08AM +, KLEIN St?phane wrote:
> Le Mon, 15 Oct 2007 00:03:25 +0200, Greg Byshenk a ??crit??:
> > On Sun, Oct 14, 2007 at 09:30:19PM +, KLEIN Stephane wrote:

> >> I use samba to share some files between some clients. I would like than
> >> these files are always view with -rw-rw-rw- rights by all clients event
> >> if someone change file access permissions.
> >  
> >> Can I configure smb.conf to do that ?

> > I don't think that you can force Samba to have them "view"ed that way,
> > as the permissions in Samba are dependent upon the permissions on the
> > files themselves (on the server).

> > But you can force the permissions to be set in a given way by Samba when
> > files are created or modified.  Look at 'force create mode' in the
> > smb.conf man page.
 
> I know force create mode, force directory mode parameters but how can I 
> force permission when one user launch "chmod" ?

I'm not sure what you are asking when you refer to 'launch "chmod"'.

If you mean 'change permissions from windows', then 'force create mode' 
should do what you want.

   force create mode (S)
  This  parameter  specifies  a  set of UNIX mode bit permissions that
  will always be set on a file created by Samba. This is done by  bit-
  wise  'OR'ing  these bits onto the mode bits of a file that is being
  created or having its permissions  changed.  The  default  for  this
  parameter is (in octal) 000. The modes in this parameter are bitwise
  'OR'ed onto the file mode after the mask  set  in  the  create  mask
  parameter is applied. 

Note the "is being created *or having its permissions changed*"...

If you mean 'actually running "chmod" on the server', then there is nothing
that Samba can do about that, as that is something that is occurring on the
server itself, below the level of Samba. 

What might work to allow full access to everythign in the share-- regardless of
permissions -- would be to assign 'admin users' to the share in question... but
read the warnings about this.


-- 
greg byshenk  -  [EMAIL PROTECTED]  -  Leiden, NL

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
...
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
..
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
...
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
..
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
...
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
..
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
...
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
..
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] samba PDC and lan printer

2007-10-15 Thread satish patel
Dear all
   
I have configured samba with print services and my printer is 
LAN printer Ethernet jack and my PDC on another subnet so is it possible share 
printer from other subnet ??
   
   
  Regards
   
  satish patel


$ cat ~/satish/url.txt  

http://www.linuxbug.org
_

   
-
 Travelling to a new city? Search for ATMs in that city. Click here.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Re: can I configure smb.conf to always publish share files with -rw-rw-rw- permission ?

2007-10-15 Thread Greg Byshenk
On Mon, Oct 15, 2007 at 07:25:08AM +, KLEIN St?phane wrote:
> Le Mon, 15 Oct 2007 00:03:25 +0200, Greg Byshenk a ??crit??:
> > On Sun, Oct 14, 2007 at 09:30:19PM +, KLEIN Stephane wrote:

> >> I use samba to share some files between some clients. I would like than
> >> these files are always view with -rw-rw-rw- rights by all clients event
> >> if someone change file access permissions.
> >  
> >> Can I configure smb.conf to do that ?

> > I don't think that you can force Samba to have them "view"ed that way,
> > as the permissions in Samba are dependent upon the permissions on the
> > files themselves (on the server).

> > But you can force the permissions to be set in a given way by Samba when
> > files are created or modified.  Look at 'force create mode' in the
> > smb.conf man page.
 
> I know force create mode, force directory mode parameters but how can I 
> force permission when one user launch "chmod" ?

I'm not sure what you are asking when you refer to 'launch "chmod"'.

If you mean 'change permissions from windows', then 'force create mode' 
should do what you want.

   force create mode (S)
  This  parameter  specifies  a  set of UNIX mode bit permissions that
  will always be set on a file created by Samba. This is done by  bit-
  wise  'OR'ing  these bits onto the mode bits of a file that is being
  created or having its permissions  changed.  The  default  for  this
  parameter is (in octal) 000. The modes in this parameter are bitwise
  'OR'ed onto the file mode after the mask  set  in  the  create  mask
  parameter is applied. 

Note the "is being created *or having its permissions changed*"...

If you mean 'actually running "chmod" on the server', then there is nothing
that Samba can do about that, as that is something that is occurring on the
server itself, below the level of Samba. 

What might work to allow full access to everythign in the share-- regardless of
permissions -- would be to assign 'admin users' to the share in question... but
read the warnings about this.


-- 
greg byshenk  -  [EMAIL PROTECTED]  -  Leiden, NL

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
...
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
..
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
...
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
..
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
...
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
..
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
...
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
..
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Problem with Net join

2007-10-15 Thread Ramadevu, Ramkumar
Team,

 

Can any one help me on the below?

 

 

[global]
   domain master = no
   local master = no
   preferred master = no

   workgroup = TOKYO
   client code page = 932
   codingsystem = EUC
   encrypt passwords = yes
   socket options = SO_REUSEADDR SO_KEEPALIVE TCP_NODELAY
   security = domain
   password server = Server1,Serve2,Server3
   server string =
   wins proxy = no
   wins support = no
   preferred master = no
   browse list = no
   public = no
   status = yes
   hide dot files = no
   mangled names = yes
   case sensitive = yes
   postscript = true
   browseable = yes
   log level = 1
   debug level = 1
   password level = 0
   mangled stack = 1
   log file = /var/opt/samba/log.%m
   lock directory = /var/opt/samba/locks
   auto services = homes
   username map = /etc/opt/samba/users.map
   client ntlmv2 auth = yes
   client lanman auth = no
   client plaintext auth = no
   lanman auth = no

 
 

===

 

bash-2.01# /etc/init.d/samba stop


bash-2.01# /opt/samba/bin/net join -S Server1 -s /etc/opt/samba/smb.conf
-Uuser1
[2007/09/05 19:53:12, 0] param/loadparm.c:(2762)
  Unknown parameter encountered: "client code page"
[2007/09/05 19:53:12, 0] param/loadparm.c:(3496)
  Ignoring unknown parameter "client code page"
[2007/09/05 19:53:12, 0] param/loadparm.c:(2762)
  Unknown parameter encountered: "codingsystem"
[2007/09/05 19:53:12, 0] param/loadparm.c:(3496)
  Ignoring unknown parameter "codingsystem"
[2007/09/05 19:53:12, 0] param/loadparm.c:(2762)
  Unknown parameter encountered: "status"
[2007/09/05 19:53:12, 0] param/loadparm.c:(3496)
  Ignoring unknown parameter "status"
[2007/09/05 19:53:12, 0] param/loadparm.c:(2762)
  Unknown parameter encountered: "postscript"
[2007/09/05 19:53:12, 0] param/loadparm.c:(3496)
  Ignoring unknown parameter "postscript"
[2007/09/05 19:53:12, 0] param/loadparm.c:(2762)
  Unknown parameter encountered: "mangled stack"
[2007/09/05 19:53:12, 0] param/loadparm.c:(3496)
  Ignoring unknown parameter "mangled stack"
Password:
Could not connect to server Server1
The username or password was not correct.
Connection failed: NT_STATUS_LOGON_FAILURE
 

 

 

And the error log having following errors

 

 

2007/09/05 19:51:26, 0] rpc_client/cli_pipe.c:(2679)

  cli_rpc_pipe_open_schannel: failed to get schannel session key from
server Server1 for domain TOKYO.

[2007/09/05 19:51:26, 0] auth/auth_domain.c:(119)

  connect_to_domain_password_server: unable to open the domain client
session to machine Server1. Error was : NT_STATUS_ACCESS_DENIED.

[2007/09/05 19:51:26, 0] auth/auth_domain.c:(217)

 

==

 

Samba version : VERSION:  3.0.23_A0

 

Regards

Ram.

 

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Re: can I configure smb.conf to always publish share files with -rw-rw-rw- permission ?

2007-10-15 Thread Greg Byshenk
On Mon, Oct 15, 2007 at 07:25:08AM +, KLEIN St?phane wrote:
> Le Mon, 15 Oct 2007 00:03:25 +0200, Greg Byshenk a ??crit??:
> > On Sun, Oct 14, 2007 at 09:30:19PM +, KLEIN Stephane wrote:

> >> I use samba to share some files between some clients. I would like than
> >> these files are always view with -rw-rw-rw- rights by all clients event
> >> if someone change file access permissions.
> >  
> >> Can I configure smb.conf to do that ?

> > I don't think that you can force Samba to have them "view"ed that way,
> > as the permissions in Samba are dependent upon the permissions on the
> > files themselves (on the server).

> > But you can force the permissions to be set in a given way by Samba when
> > files are created or modified.  Look at 'force create mode' in the
> > smb.conf man page.
 
> I know force create mode, force directory mode parameters but how can I 
> force permission when one user launch "chmod" ?

I'm not sure what you are asking when you refer to 'launch "chmod"'.

If you mean 'change permissions from windows', then 'force create mode' 
should do what you want.

   force create mode (S)
  This  parameter  specifies  a  set of UNIX mode bit permissions that
  will always be set on a file created by Samba. This is done by  bit-
  wise  'OR'ing  these bits onto the mode bits of a file that is being
  created or having its permissions  changed.  The  default  for  this
  parameter is (in octal) 000. The modes in this parameter are bitwise
  'OR'ed onto the file mode after the mask  set  in  the  create  mask
  parameter is applied. 

Note the "is being created *or having its permissions changed*"...

If you mean 'actually running "chmod" on the server', then there is nothing
that Samba can do about that, as that is something that is occurring on the
server itself, below the level of Samba. 

What might work to allow full access to everythign in the share-- regardless of
permissions -- would be to assign 'admin users' to the share in question... but
read the warnings about this.


-- 
greg byshenk  -  [EMAIL PROTECTED]  -  Leiden, NL

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
...
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
..
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
...
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
..
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
...
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
..
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
...
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
..
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Re: can I configure smb.conf to always publish share files with -rw-rw-rw- permission ?

2007-10-15 Thread Greg Byshenk
On Mon, Oct 15, 2007 at 07:25:08AM +, KLEIN St?phane wrote:
> Le Mon, 15 Oct 2007 00:03:25 +0200, Greg Byshenk a ??crit??:
> > On Sun, Oct 14, 2007 at 09:30:19PM +, KLEIN Stephane wrote:

> >> I use samba to share some files between some clients. I would like than
> >> these files are always view with -rw-rw-rw- rights by all clients event
> >> if someone change file access permissions.
> >  
> >> Can I configure smb.conf to do that ?

> > I don't think that you can force Samba to have them "view"ed that way,
> > as the permissions in Samba are dependent upon the permissions on the
> > files themselves (on the server).

> > But you can force the permissions to be set in a given way by Samba when
> > files are created or modified.  Look at 'force create mode' in the
> > smb.conf man page.
 
> I know force create mode, force directory mode parameters but how can I 
> force permission when one user launch "chmod" ?

I'm not sure what you are asking when you refer to 'launch "chmod"'.

If you mean 'change permissions from windows', then 'force create mode' 
should do what you want.

   force create mode (S)
  This  parameter  specifies  a  set of UNIX mode bit permissions that
  will always be set on a file created by Samba. This is done by  bit-
  wise  'OR'ing  these bits onto the mode bits of a file that is being
  created or having its permissions  changed.  The  default  for  this
  parameter is (in octal) 000. The modes in this parameter are bitwise
  'OR'ed onto the file mode after the mask  set  in  the  create  mask
  parameter is applied. 

Note the "is being created *or having its permissions changed*"...

If you mean 'actually running "chmod" on the server', then there is nothing
that Samba can do about that, as that is something that is occurring on the
server itself, below the level of Samba. 

What might work to allow full access to everythign in the share-- regardless of
permissions -- would be to assign 'admin users' to the share in question... but
read the warnings about this.


-- 
greg byshenk  -  [EMAIL PROTECTED]  -  Leiden, NL

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
..
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
...
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
..
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
...
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
..
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
...
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
..
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Winbind and Samba - Renaming an Active Directory Domain

2007-10-15 Thread Thompson, Scott (WA)
 
Hi
Has anyone been thru the renaming of a domain (Win2k3) with a linux box
running Samba and Winbind?
Any info would be most appreciated


Cheers
Scott
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Re: can I configure smb.conf to always publish share files with -rw-rw-rw- permission ?

2007-10-15 Thread Greg Byshenk
On Mon, Oct 15, 2007 at 07:25:08AM +, KLEIN St?phane wrote:
> Le Mon, 15 Oct 2007 00:03:25 +0200, Greg Byshenk a ??crit??:
> > On Sun, Oct 14, 2007 at 09:30:19PM +, KLEIN Stephane wrote:

> >> I use samba to share some files between some clients. I would like than
> >> these files are always view with -rw-rw-rw- rights by all clients event
> >> if someone change file access permissions.
> >  
> >> Can I configure smb.conf to do that ?

> > I don't think that you can force Samba to have them "view"ed that way,
> > as the permissions in Samba are dependent upon the permissions on the
> > files themselves (on the server).

> > But you can force the permissions to be set in a given way by Samba when
> > files are created or modified.  Look at 'force create mode' in the
> > smb.conf man page.
 
> I know force create mode, force directory mode parameters but how can I 
> force permission when one user launch "chmod" ?

I'm not sure what you are asking when you refer to 'launch "chmod"'.

If you mean 'change permissions from windows', then 'force create mode' 
should do what you want.

   force create mode (S)
  This  parameter  specifies  a  set of UNIX mode bit permissions that
  will always be set on a file created by Samba. This is done by  bit-
  wise  'OR'ing  these bits onto the mode bits of a file that is being
  created or having its permissions  changed.  The  default  for  this
  parameter is (in octal) 000. The modes in this parameter are bitwise
  'OR'ed onto the file mode after the mask  set  in  the  create  mask
  parameter is applied. 

Note the "is being created *or having its permissions changed*"...

If you mean 'actually running "chmod" on the server', then there is nothing
that Samba can do about that, as that is something that is occurring on the
server itself, below the level of Samba. 

What might work to allow full access to everythign in the share-- regardless of
permissions -- would be to assign 'admin users' to the share in question... but
read the warnings about this.


-- 
greg byshenk  -  [EMAIL PROTECTED]  -  Leiden, NL

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
...
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
..
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
...
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
..
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
...
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
..
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Samba as PDC with XP Client - Logon requires reboot - Help Please

2007-10-15 Thread Edmundo Valle Neto

Ron Segal escreveu:

Hi, I'm running the latest version of Samba with a tdbsam backend,
configured not to use roaming profiles. Two different XP clients (SP2)
are joined to the domain ok but users can only logon by rebooting before
entering their logon details.  When users logoff and try to logon again
(or logon as a different user on the same machine) they get the standard
message 'windows cannot connect to the domain either because the domain
controller is down or because your computer account was not found.
Please try again later .. ' etc.  Have tried fiddling with registry
entries and permissions but can't get this problem to go away.  Any
ideas on this would be appreciated. Cheers.


Would help if you post your smb.conf and give a little more information 
about your network (if it is really only these 3 machines and you want 
the samba server be a PDC of a little domain), and about how did you 
joined the workstations.



Regards.

Edmundo Valle Neto
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Re: can I configure smb.conf to always publish share files with -rw-rw-rw- permission ?

2007-10-15 Thread Greg Byshenk
On Mon, Oct 15, 2007 at 07:25:08AM +, KLEIN St?phane wrote:
> Le Mon, 15 Oct 2007 00:03:25 +0200, Greg Byshenk a ??crit??:
> > On Sun, Oct 14, 2007 at 09:30:19PM +, KLEIN Stephane wrote:

> >> I use samba to share some files between some clients. I would like than
> >> these files are always view with -rw-rw-rw- rights by all clients event
> >> if someone change file access permissions.
> >  
> >> Can I configure smb.conf to do that ?

> > I don't think that you can force Samba to have them "view"ed that way,
> > as the permissions in Samba are dependent upon the permissions on the
> > files themselves (on the server).

> > But you can force the permissions to be set in a given way by Samba when
> > files are created or modified.  Look at 'force create mode' in the
> > smb.conf man page.
 
> I know force create mode, force directory mode parameters but how can I 
> force permission when one user launch "chmod" ?

I'm not sure what you are asking when you refer to 'launch "chmod"'.

If you mean 'change permissions from windows', then 'force create mode' 
should do what you want.

   force create mode (S)
  This  parameter  specifies  a  set of UNIX mode bit permissions that
  will always be set on a file created by Samba. This is done by  bit-
  wise  'OR'ing  these bits onto the mode bits of a file that is being
  created or having its permissions  changed.  The  default  for  this
  parameter is (in octal) 000. The modes in this parameter are bitwise
  'OR'ed onto the file mode after the mask  set  in  the  create  mask
  parameter is applied. 

Note the "is being created *or having its permissions changed*"...

If you mean 'actually running "chmod" on the server', then there is nothing
that Samba can do about that, as that is something that is occurring on the
server itself, below the level of Samba. 

What might work to allow full access to everythign in the share-- regardless of
permissions -- would be to assign 'admin users' to the share in question... but
read the warnings about this.


-- 
greg byshenk  -  [EMAIL PROTECTED]  -  Leiden, NL

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
...
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
..
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
...
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
..
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
...
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
..
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Re: can I configure smb.conf to always publish share files with -rw-rw-rw- permission ?

2007-10-15 Thread Greg Byshenk
On Mon, Oct 15, 2007 at 07:25:08AM +, KLEIN St?phane wrote:
> Le Mon, 15 Oct 2007 00:03:25 +0200, Greg Byshenk a ??crit??:
> > On Sun, Oct 14, 2007 at 09:30:19PM +, KLEIN Stephane wrote:

> >> I use samba to share some files between some clients. I would like than
> >> these files are always view with -rw-rw-rw- rights by all clients event
> >> if someone change file access permissions.
> >  
> >> Can I configure smb.conf to do that ?

> > I don't think that you can force Samba to have them "view"ed that way,
> > as the permissions in Samba are dependent upon the permissions on the
> > files themselves (on the server).

> > But you can force the permissions to be set in a given way by Samba when
> > files are created or modified.  Look at 'force create mode' in the
> > smb.conf man page.
 
> I know force create mode, force directory mode parameters but how can I 
> force permission when one user launch "chmod" ?

I'm not sure what you are asking when you refer to 'launch "chmod"'.

If you mean 'change permissions from windows', then 'force create mode' 
should do what you want.

   force create mode (S)
  This  parameter  specifies  a  set of UNIX mode bit permissions that
  will always be set on a file created by Samba. This is done by  bit-
  wise  'OR'ing  these bits onto the mode bits of a file that is being
  created or having its permissions  changed.  The  default  for  this
  parameter is (in octal) 000. The modes in this parameter are bitwise
  'OR'ed onto the file mode after the mask  set  in  the  create  mask
  parameter is applied. 

Note the "is being created *or having its permissions changed*"...

If you mean 'actually running "chmod" on the server', then there is nothing
that Samba can do about that, as that is something that is occurring on the
server itself, below the level of Samba. 

What might work to allow full access to everythign in the share-- regardless of
permissions -- would be to assign 'admin users' to the share in question... but
read the warnings about this.


-- 
greg byshenk  -  [EMAIL PROTECTED]  -  Leiden, NL

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
...
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
..
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
...
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
..
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
...
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
..
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Re: can I configure smb.conf to always publish share files with -rw-rw-rw- permission ?

2007-10-15 Thread Greg Byshenk
On Mon, Oct 15, 2007 at 07:25:08AM +, KLEIN St?phane wrote:
> Le Mon, 15 Oct 2007 00:03:25 +0200, Greg Byshenk a ??crit??:
> > On Sun, Oct 14, 2007 at 09:30:19PM +, KLEIN Stephane wrote:

> >> I use samba to share some files between some clients. I would like than
> >> these files are always view with -rw-rw-rw- rights by all clients event
> >> if someone change file access permissions.
> >  
> >> Can I configure smb.conf to do that ?

> > I don't think that you can force Samba to have them "view"ed that way,
> > as the permissions in Samba are dependent upon the permissions on the
> > files themselves (on the server).

> > But you can force the permissions to be set in a given way by Samba when
> > files are created or modified.  Look at 'force create mode' in the
> > smb.conf man page.
 
> I know force create mode, force directory mode parameters but how can I 
> force permission when one user launch "chmod" ?

I'm not sure what you are asking when you refer to 'launch "chmod"'.

If you mean 'change permissions from windows', then 'force create mode' 
should do what you want.

   force create mode (S)
  This  parameter  specifies  a  set of UNIX mode bit permissions that
  will always be set on a file created by Samba. This is done by  bit-
  wise  'OR'ing  these bits onto the mode bits of a file that is being
  created or having its permissions  changed.  The  default  for  this
  parameter is (in octal) 000. The modes in this parameter are bitwise
  'OR'ed onto the file mode after the mask  set  in  the  create  mask
  parameter is applied. 

Note the "is being created *or having its permissions changed*"...

If you mean 'actually running "chmod" on the server', then there is nothing
that Samba can do about that, as that is something that is occurring on the
server itself, below the level of Samba. 

What might work to allow full access to everythign in the share-- regardless of
permissions -- would be to assign 'admin users' to the share in question... but
read the warnings about this.


-- 
greg byshenk  -  [EMAIL PROTECTED]  -  Leiden, NL

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
..
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
...
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
..
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
...
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
..
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Samba + LDAP - now with ldapsam extensions

2007-10-15 Thread Daniel L. Miller

John H Terpstra wrote:

On Thursday 11 October 2007 22:57, Daniel L. Miller wrote:
  

Are the IDEALX tools necessary for "complete" integration with LDAP?  Or
is the built-in support sufficiently advanced now?

Daniel


What does "complete" integration with LDAP mean to you?

You are not the first person to ask questions like these.  It would help me to 
write more useful documentation if I could better understand what is behind 
the questions.
  
Do the "ldapsam:trusted: and "ldapsam:editposix" extensions provide - 
(pause whilst I search for the correct word) - "equivalent" 
functionality to the IDEALX tools?  Or are they solutions for different 
applications?  For "typical" applications, with a PDC, mixed Unix and 
Windows workstations, file and print sharing - are the extensions a 
simpler way to achieve the - (wait, need to substitute word again) - 
"equivalent" level of LDAP integration?


--
Daniel
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Samba as PDC with XP Client - Logon requires reboot - Help Please

2007-10-15 Thread Gary Dale

Ron Segal wrote:

Hi, I'm running the latest version of Samba with a tdbsam backend,
configured not to use roaming profiles. Two different XP clients (SP2)
are joined to the domain ok but users can only logon by rebooting before
entering their logon details.  When users logoff and try to logon again
(or logon as a different user on the same machine) they get the standard
message 'windows cannot connect to the domain either because the domain
controller is down or because your computer account was not found.
Please try again later .. ' etc.  Have tried fiddling with registry
entries and permissions but can't get this problem to go away.  Any
ideas on this would be appreciated. Cheers.
  
Have you checked your netlogon and/or profiles Unix permissions? You 
generally need to set them very, very loose and let Samba handle the 
security.

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Re: can I configure smb.conf to always publish share files with -rw-rw-rw- permission ?

2007-10-15 Thread Greg Byshenk
On Mon, Oct 15, 2007 at 07:25:08AM +, KLEIN St?phane wrote:
> Le Mon, 15 Oct 2007 00:03:25 +0200, Greg Byshenk a ??crit??:
> > On Sun, Oct 14, 2007 at 09:30:19PM +, KLEIN Stephane wrote:

> >> I use samba to share some files between some clients. I would like than
> >> these files are always view with -rw-rw-rw- rights by all clients event
> >> if someone change file access permissions.
> >  
> >> Can I configure smb.conf to do that ?

> > I don't think that you can force Samba to have them "view"ed that way,
> > as the permissions in Samba are dependent upon the permissions on the
> > files themselves (on the server).

> > But you can force the permissions to be set in a given way by Samba when
> > files are created or modified.  Look at 'force create mode' in the
> > smb.conf man page.
 
> I know force create mode, force directory mode parameters but how can I 
> force permission when one user launch "chmod" ?

I'm not sure what you are asking when you refer to 'launch "chmod"'.

If you mean 'change permissions from windows', then 'force create mode' 
should do what you want.

   force create mode (S)
  This  parameter  specifies  a  set of UNIX mode bit permissions that
  will always be set on a file created by Samba. This is done by  bit-
  wise  'OR'ing  these bits onto the mode bits of a file that is being
  created or having its permissions  changed.  The  default  for  this
  parameter is (in octal) 000. The modes in this parameter are bitwise
  'OR'ed onto the file mode after the mask  set  in  the  create  mask
  parameter is applied. 

Note the "is being created *or having its permissions changed*"...

If you mean 'actually running "chmod" on the server', then there is nothing
that Samba can do about that, as that is something that is occurring on the
server itself, below the level of Samba. 

What might work to allow full access to everythign in the share-- regardless of
permissions -- would be to assign 'admin users' to the share in question... but
read the warnings about this.


-- 
greg byshenk  -  [EMAIL PROTECTED]  -  Leiden, NL

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
...
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
..
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
...
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
..
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Re: can I configure smb.conf to always publish share files with -rw-rw-rw- permission ?

2007-10-15 Thread Greg Byshenk
On Mon, Oct 15, 2007 at 07:25:08AM +, KLEIN St?phane wrote:
> Le Mon, 15 Oct 2007 00:03:25 +0200, Greg Byshenk a ??crit??:
> > On Sun, Oct 14, 2007 at 09:30:19PM +, KLEIN Stephane wrote:

> >> I use samba to share some files between some clients. I would like than
> >> these files are always view with -rw-rw-rw- rights by all clients event
> >> if someone change file access permissions.
> >  
> >> Can I configure smb.conf to do that ?

> > I don't think that you can force Samba to have them "view"ed that way,
> > as the permissions in Samba are dependent upon the permissions on the
> > files themselves (on the server).

> > But you can force the permissions to be set in a given way by Samba when
> > files are created or modified.  Look at 'force create mode' in the
> > smb.conf man page.
 
> I know force create mode, force directory mode parameters but how can I 
> force permission when one user launch "chmod" ?

I'm not sure what you are asking when you refer to 'launch "chmod"'.

If you mean 'change permissions from windows', then 'force create mode' 
should do what you want.

   force create mode (S)
  This  parameter  specifies  a  set of UNIX mode bit permissions that
  will always be set on a file created by Samba. This is done by  bit-
  wise  'OR'ing  these bits onto the mode bits of a file that is being
  created or having its permissions  changed.  The  default  for  this
  parameter is (in octal) 000. The modes in this parameter are bitwise
  'OR'ed onto the file mode after the mask  set  in  the  create  mask
  parameter is applied. 

Note the "is being created *or having its permissions changed*"...

If you mean 'actually running "chmod" on the server', then there is nothing
that Samba can do about that, as that is something that is occurring on the
server itself, below the level of Samba. 

What might work to allow full access to everythign in the share-- regardless of
permissions -- would be to assign 'admin users' to the share in question... but
read the warnings about this.


-- 
greg byshenk  -  [EMAIL PROTECTED]  -  Leiden, NL

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
...
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
..
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
...
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
..
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Profile Location Best Practice

2007-10-15 Thread Steve Thompson

On Mon, 15 Oct 2007, Adam Tauno Williams wrote:


Yes;  I've got about 200 users who sign on and off every day.  PDC is
Samba;  profiles in one share, home directory its own share.  No issues.


Likewise.

-steve
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Profile Location Best Practice

2007-10-15 Thread Charles Marcus
Eric Feldhusen, you've pretty much convinced me that best practice is 
having profiles stored in one place, and home folders in another.  
But I'm still curious if you have also experienced these problems 
even with such a configuration.  Either way, I think the merits of 
such a configuration are clear; I just wonder if I can expect even 
these problems to go away, or if I shouldn't get my hopes up quite 
that much. 


Well... I created a new directory structure:

home directory = \server\home\username (unchanged)
profile directory = \server\home\profiles\username (new)

I've already switched one user over who was having a weird problem with 
a printer not appearing on the receptionist computer (she covers for the 
receptionist when she goes to lunch, etc). That problem is now resolved, 
while nothing else I tried worked.


So, I'm hopeful that this will indeed fix these other mysterious 
problems. After some reading on  this, I'm embarrassed that I never 
encountered this 'best practice' knowledge before...


Many thanks to Eric for the whack upside the head...

--

Best regards,

Charles
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Profile Location Best Practice

2007-10-15 Thread Adam Tauno Williams
> Eric Feldhusen, you've pretty much convinced me that best practice is 
> having profiles stored in one place, and home folders in another.  But 
> I'm still curious if you have also experienced these problems even with 
> such a configuration.  Either way, I think the merits of such a 
> configuration are clear; I just wonder if I can expect even these 
> problems to go away, or if I shouldn't get my hopes up quite that much.

Yes;  I've got about 200 users who sign on and off every day.  PDC is
Samba;  profiles in one share, home directory its own share.  No issues.
Has worked well for a very long time.
-- 
  Consonance: an Open Source .NET OpenGroupware client.
  http://code.google.com/p/consonance/ - Searching for a bored Cairo# hacker.
   Contact:[EMAIL PROTECTED]   http://www.opengroupware.org

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Re: can I configure smb.conf to always publish share files with -rw-rw-rw- permission ?

2007-10-15 Thread Greg Byshenk
On Mon, Oct 15, 2007 at 07:25:08AM +, KLEIN St?phane wrote:
> Le Mon, 15 Oct 2007 00:03:25 +0200, Greg Byshenk a ??crit??:
> > On Sun, Oct 14, 2007 at 09:30:19PM +, KLEIN Stephane wrote:

> >> I use samba to share some files between some clients. I would like than
> >> these files are always view with -rw-rw-rw- rights by all clients event
> >> if someone change file access permissions.
> >  
> >> Can I configure smb.conf to do that ?

> > I don't think that you can force Samba to have them "view"ed that way,
> > as the permissions in Samba are dependent upon the permissions on the
> > files themselves (on the server).

> > But you can force the permissions to be set in a given way by Samba when
> > files are created or modified.  Look at 'force create mode' in the
> > smb.conf man page.
 
> I know force create mode, force directory mode parameters but how can I 
> force permission when one user launch "chmod" ?

I'm not sure what you are asking when you refer to 'launch "chmod"'.

If you mean 'change permissions from windows', then 'force create mode' 
should do what you want.

   force create mode (S)
  This  parameter  specifies  a  set of UNIX mode bit permissions that
  will always be set on a file created by Samba. This is done by  bit-
  wise  'OR'ing  these bits onto the mode bits of a file that is being
  created or having its permissions  changed.  The  default  for  this
  parameter is (in octal) 000. The modes in this parameter are bitwise
  'OR'ed onto the file mode after the mask  set  in  the  create  mask
  parameter is applied. 

Note the "is being created *or having its permissions changed*"...

If you mean 'actually running "chmod" on the server', then there is nothing
that Samba can do about that, as that is something that is occurring on the
server itself, below the level of Samba. 

What might work to allow full access to everythign in the share-- regardless of
permissions -- would be to assign 'admin users' to the share in question... but
read the warnings about this.


-- 
greg byshenk  -  [EMAIL PROTECTED]  -  Leiden, NL

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
...
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
..
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
...
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
..
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] "Access denied" error on Samba mount

2007-10-15 Thread bhoomikasc

Hi,

I am trying to mount a samba share on to a Windows 2003 server. 

When I do,
devdb001:/ # mount -t cifs -o username=mysql,password=pass
//10.141.52.15/linuxbak/mysql_db/devdb /media/devdb/
retrying with upper case share name
mount error 6 = No such device or address
Refer to the mount.cifs(8) manual page (e.g.man mount.cifs)

My smb.conf is,
[global]
workgroup = MY.COM
map to guest = Bad User
usershare allow guests = Yes
valid users = root, mysql
force user = mysql

[homes]
comment = Home Directories
valid users = %S, %D%w%S
read only = No
inherit acls = Yes
browseable = No

[profiles]
comment = Network Profiles Service
path = %H
read only = No
create mask = 0600
directory mask = 0700
store dos attributes = Yes

[users]
comment = All users
path = /home
read only = No
inherit acls = Yes

[groups]
comment = All groups
path = /home/groups
read only = No
inherit acls = Yes

[devdb]
comment = Share for devdb001 on backup server
path = /media/devdb
write list = root, mysql
read only = No
create mask = 0600
directory mask = 0700
inherit acls = Yes

The user mysql is added to the smbpasswd file.

Also, 
devdb001:/ # smbclient -L 10.141.55.66 -U mysql
Password:
Domain=[DEVDB001] OS=[Unix] Server=[Samba 3.0.22-13.30-1290-SUSE-SLES10]

Sharename   Type  Comment
-     ---
profilesDisk  Network Profiles Service
users   Disk  All users
groups  Disk  All groups
devdb   Disk  Share for devdb001 on backup server
IPC$IPC   IPC Service (Samba
3.0.22-13.30-1290-SUSE-SLES10)
ADMIN$  IPC   IPC Service (Samba
3.0.22-13.30-1290-SUSE-SLES10)
mysql   Disk  Home Directories
Domain=[DEVDB001] OS=[Unix] Server=[Samba 3.0.22-13.30-1290-SUSE-SLES10]

Server   Comment
----

WorkgroupMaster
----
OVE-VICKIOVE-DC01
OVE.COM  DEVDB001
OVE.LOCALAMANDABACKUP

Can someone tell me what I am doing wrong?

Thanks.
-- 
View this message in context: 
http://www.nabble.com/%22Access-denied%22-error-on-Samba-mount-tf4629545.html#a13219213
Sent from the Samba - General mailing list archive at Nabble.com.

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Re: can I configure smb.conf to always publish share files with -rw-rw-rw- permission ?

2007-10-15 Thread Greg Byshenk
On Mon, Oct 15, 2007 at 07:25:08AM +, KLEIN St?phane wrote:
> Le Mon, 15 Oct 2007 00:03:25 +0200, Greg Byshenk a ??crit??:
> > On Sun, Oct 14, 2007 at 09:30:19PM +, KLEIN Stephane wrote:

> >> I use samba to share some files between some clients. I would like than
> >> these files are always view with -rw-rw-rw- rights by all clients event
> >> if someone change file access permissions.
> >  
> >> Can I configure smb.conf to do that ?

> > I don't think that you can force Samba to have them "view"ed that way,
> > as the permissions in Samba are dependent upon the permissions on the
> > files themselves (on the server).

> > But you can force the permissions to be set in a given way by Samba when
> > files are created or modified.  Look at 'force create mode' in the
> > smb.conf man page.
 
> I know force create mode, force directory mode parameters but how can I 
> force permission when one user launch "chmod" ?

I'm not sure what you are asking when you refer to 'launch "chmod"'.

If you mean 'change permissions from windows', then 'force create mode' 
should do what you want.

   force create mode (S)
  This  parameter  specifies  a  set of UNIX mode bit permissions that
  will always be set on a file created by Samba. This is done by  bit-
  wise  'OR'ing  these bits onto the mode bits of a file that is being
  created or having its permissions  changed.  The  default  for  this
  parameter is (in octal) 000. The modes in this parameter are bitwise
  'OR'ed onto the file mode after the mask  set  in  the  create  mask
  parameter is applied. 

Note the "is being created *or having its permissions changed*"...

If you mean 'actually running "chmod" on the server', then there is nothing
that Samba can do about that, as that is something that is occurring on the
server itself, below the level of Samba. 

What might work to allow full access to everythign in the share-- regardless of
permissions -- would be to assign 'admin users' to the share in question... but
read the warnings about this.


-- 
greg byshenk  -  [EMAIL PROTECTED]  -  Leiden, NL

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
..
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
...
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
..
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Re: can I configure smb.conf to always publish share files with -rw-rw-rw- permission ?

2007-10-15 Thread Greg Byshenk
On Mon, Oct 15, 2007 at 07:25:08AM +, KLEIN St?phane wrote:
> Le Mon, 15 Oct 2007 00:03:25 +0200, Greg Byshenk a ??crit??:
> > On Sun, Oct 14, 2007 at 09:30:19PM +, KLEIN Stephane wrote:

> >> I use samba to share some files between some clients. I would like than
> >> these files are always view with -rw-rw-rw- rights by all clients event
> >> if someone change file access permissions.
> >  
> >> Can I configure smb.conf to do that ?

> > I don't think that you can force Samba to have them "view"ed that way,
> > as the permissions in Samba are dependent upon the permissions on the
> > files themselves (on the server).

> > But you can force the permissions to be set in a given way by Samba when
> > files are created or modified.  Look at 'force create mode' in the
> > smb.conf man page.
 
> I know force create mode, force directory mode parameters but how can I 
> force permission when one user launch "chmod" ?

I'm not sure what you are asking when you refer to 'launch "chmod"'.

If you mean 'change permissions from windows', then 'force create mode' 
should do what you want.

   force create mode (S)
  This  parameter  specifies  a  set of UNIX mode bit permissions that
  will always be set on a file created by Samba. This is done by  bit-
  wise  'OR'ing  these bits onto the mode bits of a file that is being
  created or having its permissions  changed.  The  default  for  this
  parameter is (in octal) 000. The modes in this parameter are bitwise
  'OR'ed onto the file mode after the mask  set  in  the  create  mask
  parameter is applied. 

Note the "is being created *or having its permissions changed*"...

If you mean 'actually running "chmod" on the server', then there is nothing
that Samba can do about that, as that is something that is occurring on the
server itself, below the level of Samba. 

What might work to allow full access to everythign in the share-- regardless of
permissions -- would be to assign 'admin users' to the share in question... but
read the warnings about this.


-- 
greg byshenk  -  [EMAIL PROTECTED]  -  Leiden, NL

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
...
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
..
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] samba migration 3.x -> 3.x

2007-10-15 Thread Jan Falkenhagen
hi, i am currently searching for a samba howto that covers the migration
of a Samba 3 PDC to another piece of hardware (with changing
distributions from a discontinued SUSE 9.2 to CentOS 5 parallely). 

Until now i converted the smbpasswd backend to tdbsam, let the new
machine join the domain, and executed net rpc getsid. The i copied the
secrets.tdb and the passwd.tdb to the new machine. Unfortunately user
login doesn't work for the new one. In the end I am planing to turn off
the old one and to make the new machine the domain master.

Is there anything left that has to be done? Do i have to set new
passwords?
-- 
best regards
jan

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


RE: [Samba] Problem with network drives

2007-10-15 Thread Dennis McLeod
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of
Vincent Zakofski
Sent: Sunday, October 14, 2007 11:22 PM
To: samba@lists.samba.org
Subject: [Samba] Problem with network drives

Hi,

I have a Windows Xp station where a network drive is mapped. The username
and password for this network drive are the same as those of my Windows
session.
I want to access to another share on this server with another name and login
than those of the mapped network drive. When I try to access to this share
it tries with the username and password from my Windows session. I can see
it in the samba log file ( NT_STATUS_NETWORK_ACCESS_DENIED).
It doesn't work because this share is not accessible for my user. When I try
to log with a valid username and login for this share it doesn't work and I
have nothing in the samba log file.
This share is accessible with another username and login when I dont have
network drives mappped on the same samba server.
Can somebody explain me why it doesn't work and why I don't see anything in
my log file.


Thanks


Vincent
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba






It's not a problem, and I don't think it's a Samba issue. It's a function of
XP/2000/2003. This would happen on a Windows Network too.
"Multiple connections to a server or shared resource by the same user using
more than one user name are not allowed."
That's the reason. I'm not enough of a Samba guru to tell you why it's not
in your logs. It may show up in your XP event logs, depending on your XP
Event log settings, though.
You can make the second connection to the server using its IP address (I.E.
\\192.168.1.10\share) as a work around.
Why would you want to connect as someone else, though, rather than give
yourself (actually a group you belong to) access to the share?
If it's just for testing, then the method above will be fine
Dennis

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Re: can I configure smb.conf to always publish share files with -rw-rw-rw- permission ?

2007-10-15 Thread Greg Byshenk
On Mon, Oct 15, 2007 at 07:25:08AM +, KLEIN St?phane wrote:
> Le Mon, 15 Oct 2007 00:03:25 +0200, Greg Byshenk a ??crit??:
> > On Sun, Oct 14, 2007 at 09:30:19PM +, KLEIN Stephane wrote:

> >> I use samba to share some files between some clients. I would like than
> >> these files are always view with -rw-rw-rw- rights by all clients event
> >> if someone change file access permissions.
> >  
> >> Can I configure smb.conf to do that ?

> > I don't think that you can force Samba to have them "view"ed that way,
> > as the permissions in Samba are dependent upon the permissions on the
> > files themselves (on the server).

> > But you can force the permissions to be set in a given way by Samba when
> > files are created or modified.  Look at 'force create mode' in the
> > smb.conf man page.
 
> I know force create mode, force directory mode parameters but how can I 
> force permission when one user launch "chmod" ?

I'm not sure what you are asking when you refer to 'launch "chmod"'.

If you mean 'change permissions from windows', then 'force create mode' 
should do what you want.

   force create mode (S)
  This  parameter  specifies  a  set of UNIX mode bit permissions that
  will always be set on a file created by Samba. This is done by  bit-
  wise  'OR'ing  these bits onto the mode bits of a file that is being
  created or having its permissions  changed.  The  default  for  this
  parameter is (in octal) 000. The modes in this parameter are bitwise
  'OR'ed onto the file mode after the mask  set  in  the  create  mask
  parameter is applied. 

Note the "is being created *or having its permissions changed*"...

If you mean 'actually running "chmod" on the server', then there is nothing
that Samba can do about that, as that is something that is occurring on the
server itself, below the level of Samba. 

What might work to allow full access to everythign in the share-- regardless of
permissions -- would be to assign 'admin users' to the share in question... but
read the warnings about this.


-- 
greg byshenk  -  [EMAIL PROTECTED]  -  Leiden, NL

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
...
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
..
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Profile Location Best Practice

2007-10-15 Thread Eric J. Feldhusen
Server Gremlin wrote:
> Eric Feldhusen, you've pretty much convinced me that best practice is
> having profiles stored in one place, and home folders in another.  But
> I'm still curious if you have also experienced these problems even with
> such a configuration.  Either way, I think the merits of such a
> configuration are clear; I just wonder if I can expect even these
> problems to go away, or if I shouldn't get my hopes up quite that much.

At the moment, I'd have to say I'm just "channeling" the advice of the
Samba team and their postings on the email lists roaming profiles, since
their advice is straightforward, it's just the listening part I've had
to work for.

Yes, with the profiles stored under a "Profiles" share, I have problems
with broken profiles, but much less, and of the times I'm working
through my head to remember, I "think" most of those were problems with
the workstation configuration, bad Windows XP install, user assisted us
by installing spyware/virii, wrong network drivers detected and
installed from Windows update, etc...

I've been going back through our RT system and I had forgot we have 4
"types" of samba file/print doing PDC control.  We have RHEL4 servers,
and there's two types of file system's, those with acl and user
attribute and those with no acl or user attributes on.  Then, each of
those groups are split again with profiles in user home and profiles in
profile share.

Looking at our support tickets, our least problems go from the systems
with acl/user attribute and profiles shares to systems with acl/user
attributes and profiles in home directories to systems with no acl/user
attributes and profiles to finally, systems with no acl/user attributes
and no profile shares.

So, to make an executive summary at the end, basically I've done what
has been documented in the official documentation and suggested on the
email lists by Samba team members.

Off-topic, the question on why aren't all our systems quite the same?  I
had to sneak file system acl's, user attribute's and profiles shares
onto a couple of servers, because I was adamant from what I had read on
the samba lists was that separate profile shares, and acl/user attribute
would give us the best ability to support our windows clients.  Not
quite professional to sneak around my co-worker's back, but...

Eric

-- 
Eric Feldhusen
Network Administratorhttp://www.remc1.org
[EMAIL PROTECTED]
PO Box 270  (906) 482-4520  x239
809 Hecla St(906) 482-5031 fax
Hancock, MI  49930  (906) 370 6202 mobile

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] using cifs to access posix acl from a linux client

2007-10-15 Thread Chuck Kollars
> We would like to mount a Linux server running samba 
> using a cifs mount from a linux client (linux-> 
> linux) and still be able to access the
> extended attributes. 
>
> Acl's work on the native filesystem, however when we
> mount the samba server on the Linux client using
> mount -t cifs //localhost/test test -o username=xxx
>
> Then the extended attributes are no longer visible,
> only the default posix rights. Any idea's?

My experience over the last year in probing deeply
into the interaction of Linux ACLs with Samba (but I'm
not a Samba expert and coult be wrong:-) is "you can't
get there from here". 

While you can get Samba to pretty much use the Linux
ACLs on the _server_ side, Linux ACLs will never
behave _exactly_ the same way they do for a user who's
directly logged on nor will they be visible to the
_client_. 

I found the implementation of Linux ACLs to still be a
little more off the beaten path than I assumed naively
at first. It interacts weirdly with quotas; I can
crash it (admittedly my kernel is now out of date). I
had to get a special version of `rsync` that
understood and propagated Linux ACLs (the regular one
doesn't). And I'm even a little doubtful about full
support in NFS.

good luck!


-Chuck Kollars


   

Be a better Globetrotter. Get better travel answers from someone who knows. 
Yahoo! Answers - Check it out.
http://answers.yahoo.com/dir/?link=list&sid=396545469
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Re: can I configure smb.conf to always publish share files with -rw-rw-rw- permission ?

2007-10-15 Thread Greg Byshenk
On Mon, Oct 15, 2007 at 07:25:08AM +, KLEIN St?phane wrote:
> Le Mon, 15 Oct 2007 00:03:25 +0200, Greg Byshenk a ??crit??:
> > On Sun, Oct 14, 2007 at 09:30:19PM +, KLEIN Stephane wrote:

> >> I use samba to share some files between some clients. I would like than
> >> these files are always view with -rw-rw-rw- rights by all clients event
> >> if someone change file access permissions.
> >  
> >> Can I configure smb.conf to do that ?

> > I don't think that you can force Samba to have them "view"ed that way,
> > as the permissions in Samba are dependent upon the permissions on the
> > files themselves (on the server).

> > But you can force the permissions to be set in a given way by Samba when
> > files are created or modified.  Look at 'force create mode' in the
> > smb.conf man page.
 
> I know force create mode, force directory mode parameters but how can I 
> force permission when one user launch "chmod" ?

I'm not sure what you are asking when you refer to 'launch "chmod"'.

If you mean 'change permissions from windows', then 'force create mode' 
should do what you want.

   force create mode (S)
  This  parameter  specifies  a  set of UNIX mode bit permissions that
  will always be set on a file created by Samba. This is done by  bit-
  wise  'OR'ing  these bits onto the mode bits of a file that is being
  created or having its permissions  changed.  The  default  for  this
  parameter is (in octal) 000. The modes in this parameter are bitwise
  'OR'ed onto the file mode after the mask  set  in  the  create  mask
  parameter is applied. 

Note the "is being created *or having its permissions changed*"...

If you mean 'actually running "chmod" on the server', then there is nothing
that Samba can do about that, as that is something that is occurring on the
server itself, below the level of Samba. 

What might work to allow full access to everythign in the share-- regardless of
permissions -- would be to assign 'admin users' to the share in question... but
read the warnings about this.


-- 
greg byshenk  -  [EMAIL PROTECTED]  -  Leiden, NL

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
...
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
..
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Re: can I configure smb.conf to always publish share files with -rw-rw-rw- permission ?

2007-10-15 Thread KLEIN Stéphane
Le Mon, 15 Oct 2007 13:51:57 +, KLEIN Stéphane a écrit :

> Le Mon, 15 Oct 2007 11:31:12 +0200, Greg Byshenk a écrit :
> 
>> On Mon, Oct 15, 2007 at 07:25:08AM +, KLEIN St?phane wrote:
>>> Le Mon, 15 Oct 2007 00:03:25 +0200, Greg Byshenk a ??crit??:
>>> > On Sun, Oct 14, 2007 at 09:30:19PM +, KLEIN Stephane wrote:
>> 
>>> >> I use samba to share some files between some clients. I would like
>>> >> than these files are always view with -rw-rw-rw- rights by all
>>> >> clients event if someone change file access permissions.
>>> >  
>>> >> Can I configure smb.conf to do that ?
>> 
>>> > I don't think that you can force Samba to have them "view"ed that
>>> > way, as the permissions in Samba are dependent upon the permissions
>>> > on the files themselves (on the server).
>> 
>>> > But you can force the permissions to be set in a given way by Samba
>>> > when files are created or modified.  Look at 'force create mode' in
>>> > the smb.conf man page.
>>  
>>> I know force create mode, force directory mode parameters but how can
>>> I force permission when one user launch "chmod" ?
> 
>> If you mean 'change permissions from windows', then 'force create mode'
>> should do what you want.
> 
> I mean 'change permissions from GNU/Linux samba client'. I don't mean :
> 'actually running "chmod" on the server'.
> 
> In this instance, 'force create mode' work also ?

Well, it's work !


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Profile Location Best Practice

2007-10-15 Thread deann corum

Adam Tauno Williams wrote:

Wasn't it the case a while back that if there were older clients on the
network (Win95-Win98, etc.) that the Samba profile HAD to be inside the
home directory?  Probably many Samba installations still have them there
from those days if they've been using Samba long enough, and IF that was
the case.  (?)

I am not aware of any documentation that said that the Win9X profile HAD to be 
stored in the users' home directory.  I'd appreciate a pointer to where this 
is stated so ti can be fixed.
  

Also, regarding where profiles should be stored, I wrote to this list a
while back (5/17/07) regarding an Office 2007 read-only issue that was
fixed by setting "profile acls = no" on the user's home directory. Well,
it fixed the Office 2007 read-only problem but *broke* the roaming
profiles.  Is the ONLY solution to this issue likely to be moving our
hundreds of Samba profiles scattered across many servers into seperate
directories?  OR, can/should this particular item be considered a Samba
bug?



Sounds to be like you have answered your own question;  do *not* put
profiles in user's home directories.   The 'default' behavior for
windows is to not store user's profiles in any share the user explicitly
maps, so don't do that.  The user shouldn't be diddling around in their
profile folders so putting them somewhere the user is going to
inevitably diddle is a bad idea anyway.

  
Not really. I asked if that was the ONLY solution. It likely isn't, but 
it is the only one *possible* at this time. It appears that the default 
config of Samba when first installed according to other posts here, same 
subject, is to put the profiles in the user's home directory in 
smb.conf.  If that is so, maybe that ought to be changed as it is 
apparently misleading to Samba users - regardless what the docs say.


It also appears that a few people are possibly misled by a belief that 
older versions of Windows (See Server Gremlin original post) may have 
required just such a configuration. In the environment I'm in, for 
instance I inherited this config and was also told that it was due to 
older versions of Windows clients requiring it.  While the documentation 
may not state that anywhere, that doesn't mean it *wasn't* the case (or 
that it was). 

Documentation can't possibly cover all assumptions erroneous or 
otherwise, but default configs when Samba is loaded can endeavor to 
follow whatever the 'best practice' might be and if that is to place 
profiles in a separate share than home directories, and that is not how 
a  fresh install is configured, maybe that should be changed?  Just a 
suggestion.


Anyway, thanks for answering this question.

D
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Profile Location Best Practice

2007-10-15 Thread Server Gremlin

Eric J. Feldhusen wrote:

Charles Marcus wrote:
  

The key advantage is that if the profile is stored within the user's
home directory, the Windows workstations will sometimes discconnect the
user's home directory network drive mapping during logout before the
profile has finished synchronizing between the workstation and the
server, and your users may have broken profile problems.
  

Wow... maybe this explains the mysterious problems I've been having...

Currently, user profiles are stored in:

\\server\home\user\system\profile

system is a hidden folder in the users home dir, so they don't even
'see' it (unless they enable 'Show hidden files and folders').

Home folder is mapped to H:, target = \\server\home\user

'My Documents' folder is mapped to H:

It has worked very well - with the OCCASIONAL exception of mysterious
problems with deleted icons from the desktop reappearing, and OCCASIONAL
corrupted files in the users profile

Are you saying that this could be causing these problems? I thought it
would be ok, since the Profile path is an UNC path, not a mapped drive
letter?



That is what I used to think as well, but after 5+ years of Samba
experience on about 19-20 Linux servers, a lot of reading of the Samba
Official How-to and Official By-Example and samba email lists, my
experience is that a separate profile share not under the user's home
directory works best.

>From the Samba Official How-to, check out the "Note" section just a few
paragraphs down from the top of this link that explains why a separate
profile share

http://us1.samba.org/samba/docs/man/Samba-HOWTO-Collection/ProfileMgmt.html#id418314

Also, I can't recommend the Samba Official How-to and Official
By-Example enough.  They both take time to read through, but each is
well written, easy to read, and real "glue" together understanding how
Samba and Windows clients interact.

Also, you can download the latest versions of each document from
http://www.samba.org ,but I've purchased one edition of each once to
support the authors, because both books are that good.

  
I have the exact same setup as what Charles Marcus described, with user 
profiles in the home directory (save that my path is 
\\server\share\username\profile, and it's not hidden), and the exact 
same strange OCCASIONAL problems he described.  Desktop icons 
mysteriously reappear on the desktop over and over, the user can't 
permanently delete them.  File corruption seems to be less of an issue, 
but it has happened.


Eric Feldhusen, you've pretty much convinced me that best practice is 
having profiles stored in one place, and home folders in another.  But 
I'm still curious if you have also experienced these problems even with 
such a configuration.  Either way, I think the merits of such a 
configuration are clear; I just wonder if I can expect even these 
problems to go away, or if I shouldn't get my hopes up quite that much.


Thanks,
- SG
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] remove machine account automatically

2007-10-15 Thread Marcus Sobchak <[EMAIL PROTECTED]>
Hi,

is there a way to remove a machine account (passwd and tdbsam)
automatically like adding a machine using

add machine script = /usr/sbin/useradd -g machines -c Machine
-d /dev/null -s /bin/false %u

Thanks,
Marcus


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] How to report successfull and unseccessful login attempts

2007-10-15 Thread Valerio Daelli
Hello

On 10/15/07, Willy Offermans <[EMAIL PROTECTED]> wrote:
> Hello Valerio,
>
> Maybe ``grep'' can help you?
>

Thanks for your suggestion.
We were looking for something like a good patch already
approved by the core developers of samba or something similar.
Bye

Valerio
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Re: can I configure smb.conf to always publish share files with -rw-rw-rw- permission ?

2007-10-15 Thread KLEIN Stéphane
Le Mon, 15 Oct 2007 11:31:12 +0200, Greg Byshenk a écrit :

> On Mon, Oct 15, 2007 at 07:25:08AM +, KLEIN St?phane wrote:
>> Le Mon, 15 Oct 2007 00:03:25 +0200, Greg Byshenk a ??crit??:
>> > On Sun, Oct 14, 2007 at 09:30:19PM +, KLEIN Stephane wrote:
> 
>> >> I use samba to share some files between some clients. I would like
>> >> than these files are always view with -rw-rw-rw- rights by all
>> >> clients event if someone change file access permissions.
>> >  
>> >> Can I configure smb.conf to do that ?
> 
>> > I don't think that you can force Samba to have them "view"ed that
>> > way, as the permissions in Samba are dependent upon the permissions
>> > on the files themselves (on the server).
> 
>> > But you can force the permissions to be set in a given way by Samba
>> > when files are created or modified.  Look at 'force create mode' in
>> > the smb.conf man page.
>  
>> I know force create mode, force directory mode parameters but how can I
>> force permission when one user launch "chmod" ?

> If you mean 'change permissions from windows', then 'force create mode'
> should do what you want.

I mean 'change permissions from GNU/Linux samba client'. I don't mean 
: 'actually running "chmod" on the server'.

In this instance, 'force create mode' work also ?

Thanks,
Stephane


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Re: can I configure smb.conf to always publish share files with -rw-rw-rw- permission ?

2007-10-15 Thread Greg Byshenk
On Mon, Oct 15, 2007 at 07:25:08AM +, KLEIN St?phane wrote:
> Le Mon, 15 Oct 2007 00:03:25 +0200, Greg Byshenk a ??crit??:
> > On Sun, Oct 14, 2007 at 09:30:19PM +, KLEIN Stephane wrote:

> >> I use samba to share some files between some clients. I would like than
> >> these files are always view with -rw-rw-rw- rights by all clients event
> >> if someone change file access permissions.
> >  
> >> Can I configure smb.conf to do that ?

> > I don't think that you can force Samba to have them "view"ed that way,
> > as the permissions in Samba are dependent upon the permissions on the
> > files themselves (on the server).

> > But you can force the permissions to be set in a given way by Samba when
> > files are created or modified.  Look at 'force create mode' in the
> > smb.conf man page.
 
> I know force create mode, force directory mode parameters but how can I 
> force permission when one user launch "chmod" ?

I'm not sure what you are asking when you refer to 'launch "chmod"'.

If you mean 'change permissions from windows', then 'force create mode' 
should do what you want.

   force create mode (S)
  This  parameter  specifies  a  set of UNIX mode bit permissions that
  will always be set on a file created by Samba. This is done by  bit-
  wise  'OR'ing  these bits onto the mode bits of a file that is being
  created or having its permissions  changed.  The  default  for  this
  parameter is (in octal) 000. The modes in this parameter are bitwise
  'OR'ed onto the file mode after the mask  set  in  the  create  mask
  parameter is applied. 

Note the "is being created *or having its permissions changed*"...

If you mean 'actually running "chmod" on the server', then there is nothing
that Samba can do about that, as that is something that is occurring on the
server itself, below the level of Samba. 

What might work to allow full access to everythign in the share-- regardless of
permissions -- would be to assign 'admin users' to the share in question... but
read the warnings about this.


-- 
greg byshenk  -  [EMAIL PROTECTED]  -  Leiden, NL

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
..
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] How to report successfull and unseccessful login attempts

2007-10-15 Thread Willy Offermans
Hello Valerio,

On Mon, Oct 15, 2007 at 02:22:04PM +0200, Valerio Daelli wrote:
> Hi
> we use samba 3.0.25a on FreeBSD 6.2 and we would like to have in the logs
> only the successfull and unsuccessfull login attempts.
> We would like to read in the log file:
> 
> Authentication for user [%s] -> [%s] -> [%s] succeeded
> 
> or
> 
> Authentication for user [%s] -> [%s] FAILED with error
> 
> We have tried with log level 1 and we get only the successfull logins.
> We have tried with log level 2 and we get the unsuccessfull as well but
> with those a million of other irrelevant (for us) events are logged.
> We know we could patch the source code (I think we should patch
> source/auth/auth.c) but we prefer taking a simpler approach.
> Any suggestions?
> Thanks
> 
> Valerio Daelli
> -- 
> To unsubscribe from this list go to the following URL and read the
> instructions:  https://lists.samba.org/mailman/listinfo/samba


Maybe ``grep'' can help you?

-- 
Met vriendelijke groeten,
With kind regards,
Mit freundlichen Gruessen,
De jrus wah,

Willy

*
W.K. Offermans
Home:   +31 45 544 49 44
Mobile: +31 653 27 16 23
e-mail: [EMAIL PROTECTED]

   Powered by 

(__)
 \\\'',)
   \/  \ ^
   .\._/_)

   www.FreeBSD.org
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Re: can I configure smb.conf to always publish share files with -rw-rw-rw- permission ?

2007-10-15 Thread Greg Byshenk
On Mon, Oct 15, 2007 at 07:25:08AM +, KLEIN St?phane wrote:
> Le Mon, 15 Oct 2007 00:03:25 +0200, Greg Byshenk a ??crit??:
> > On Sun, Oct 14, 2007 at 09:30:19PM +, KLEIN Stephane wrote:

> >> I use samba to share some files between some clients. I would like than
> >> these files are always view with -rw-rw-rw- rights by all clients event
> >> if someone change file access permissions.
> >  
> >> Can I configure smb.conf to do that ?

> > I don't think that you can force Samba to have them "view"ed that way,
> > as the permissions in Samba are dependent upon the permissions on the
> > files themselves (on the server).

> > But you can force the permissions to be set in a given way by Samba when
> > files are created or modified.  Look at 'force create mode' in the
> > smb.conf man page.
 
> I know force create mode, force directory mode parameters but how can I 
> force permission when one user launch "chmod" ?

I'm not sure what you are asking when you refer to 'launch "chmod"'.

If you mean 'change permissions from windows', then 'force create mode' 
should do what you want.

   force create mode (S)
  This  parameter  specifies  a  set of UNIX mode bit permissions that
  will always be set on a file created by Samba. This is done by  bit-
  wise  'OR'ing  these bits onto the mode bits of a file that is being
  created or having its permissions  changed.  The  default  for  this
  parameter is (in octal) 000. The modes in this parameter are bitwise
  'OR'ed onto the file mode after the mask  set  in  the  create  mask
  parameter is applied. 

Note the "is being created *or having its permissions changed*"...

If you mean 'actually running "chmod" on the server', then there is nothing
that Samba can do about that, as that is something that is occurring on the
server itself, below the level of Samba. 

What might work to allow full access to everythign in the share-- regardless of
permissions -- would be to assign 'admin users' to the share in question... but
read the warnings about this.


-- 
greg byshenk  -  [EMAIL PROTECTED]  -  Leiden, NL

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Samba as PDC with XP Client - Logon requires reboot - Help Please

2007-10-15 Thread Ron Segal
Hi, I'm running the latest version of Samba with a tdbsam backend,
configured not to use roaming profiles. Two different XP clients (SP2)
are joined to the domain ok but users can only logon by rebooting before
entering their logon details.  When users logoff and try to logon again
(or logon as a different user on the same machine) they get the standard
message 'windows cannot connect to the domain either because the domain
controller is down or because your computer account was not found.
Please try again later .. ' etc.  Have tried fiddling with registry
entries and permissions but can't get this problem to go away.  Any
ideas on this would be appreciated. Cheers.



-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] How to report successfull and unseccessful login attempts

2007-10-15 Thread Valerio Daelli
Hi
we use samba 3.0.25a on FreeBSD 6.2 and we would like to have in the logs
only the successfull and unsuccessfull login attempts.
We would like to read in the log file:

Authentication for user [%s] -> [%s] -> [%s] succeeded

or

Authentication for user [%s] -> [%s] FAILED with error

We have tried with log level 1 and we get only the successfull logins.
We have tried with log level 2 and we get the unsuccessfull as well but
with those a million of other irrelevant (for us) events are logged.
We know we could patch the source code (I think we should patch
source/auth/auth.c) but we prefer taking a simpler approach.
Any suggestions?
Thanks

Valerio Daelli
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Profile Location Best Practice

2007-10-15 Thread Adam Tauno Williams
> >> Wasn't it the case a while back that if there were older clients on the
> >> network (Win95-Win98, etc.) that the Samba profile HAD to be inside the
> >> home directory?  Probably many Samba installations still have them there
> >> from those days if they've been using Samba long enough, and IF that was
> >> the case.  (?)
> > I am not aware of any documentation that said that the Win9X profile HAD to 
> > be 
> > stored in the users' home directory.  I'd appreciate a pointer to where 
> > this 
> > is stated so ti can be fixed.
> >> Also, regarding where profiles should be stored, I wrote to this list a
> >> while back (5/17/07) regarding an Office 2007 read-only issue that was
> >> fixed by setting "profile acls = no" on the user's home directory. Well,
> >> it fixed the Office 2007 read-only problem but *broke* the roaming
> >> profiles.  Is the ONLY solution to this issue likely to be moving our
> >> hundreds of Samba profiles scattered across many servers into seperate
> >> directories?  OR, can/should this particular item be considered a Samba
> >> bug?

Sounds to be like you have answered your own question;  do *not* put
profiles in user's home directories.   The 'default' behavior for
windows is to not store user's profiles in any share the user explicitly
maps, so don't do that.  The user shouldn't be diddling around in their
profile folders so putting them somewhere the user is going to
inevitably diddle is a bad idea anyway.

> > How can it be a Samba bug, when it is the Windows client that can 
> > disconnect 
> > its connections to network shares before the profile has been written to 
> > the 
> > server?
> You misunderstand me. I was not referring to the disconnection issue but 
> rather another issue related to where roaming profiles are stored. 
> Please read the second paragraph above regarding Office 2007 read-only 
> issue. THAT is what I asked about.  Sorry if I confused you.
> Having the profile inside the users home directory (and apparently some 
> people *do* have Samba configured that way),  

Sure,  I've seen Samba configured in some pretty mind boggling ways.
That never implies that doing so is "right", "proper", "accepted", or
even "useful".

> When the profile is in the user's home directory and profile acls = yes 
> is set, Office 2007 will save files to the home directory as read-only, 
> causing the user to be unable to modify them after that. Setting profile 
> acls = no fixes that problem - but breaks the roaming profile. I asked 
> if the only solution to this is moving the roaming profiles out of home 
> directories in this case?

I'm willing to go on record with "Yes".  Change your configuration and
the problem goes away - indicates the problem was your configuration.

-- 
Adam Tauno Williams, Network & Systems Administrator
Consultant - http://www.whitemiceconsulting.com
Developer - http://www.opengroupware.org

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Re: default kerberos realm??

2007-10-15 Thread Gerald (Jerry) Carter
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Frank,

> #net ads join -U administrator
> administrator's password:
> [2007/10/12 12:04:19, 0]  libsmb/cliconnect.c:cli_session_setup_spnego(785)
>  Kinit failed: Configuration file does not specify default realm
> Failed to join domain!


Set the default realm  in /etc/krb5.conf




cheer,s jerry
- --
=
Samba--- http://www.samba.org
Centeris ---  http://www.centeris.com
"What man is a man who does not make the world better?"  --Balian
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.6 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFHE1etIR7qMdg1EfYRAvmuAJ9d1CfzD1NjFFDjFMIAnoETg7kC+QCfQejA
DBA6KvvQzH2uoC/I8K5M6YM=
=sFBV
-END PGP SIGNATURE-
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Re: can I configure smb.conf to always publish share files with -rw-rw-rw- permission ?

2007-10-15 Thread Greg Byshenk
On Mon, Oct 15, 2007 at 07:25:08AM +, KLEIN St?phane wrote:
> Le Mon, 15 Oct 2007 00:03:25 +0200, Greg Byshenk a ??crit??:
> > On Sun, Oct 14, 2007 at 09:30:19PM +, KLEIN Stephane wrote:

> >> I use samba to share some files between some clients. I would like than
> >> these files are always view with -rw-rw-rw- rights by all clients event
> >> if someone change file access permissions.
> >  
> >> Can I configure smb.conf to do that ?

> > I don't think that you can force Samba to have them "view"ed that way,
> > as the permissions in Samba are dependent upon the permissions on the
> > files themselves (on the server).

> > But you can force the permissions to be set in a given way by Samba when
> > files are created or modified.  Look at 'force create mode' in the
> > smb.conf man page.
 
> I know force create mode, force directory mode parameters but how can I 
> force permission when one user launch "chmod" ?

I'm not sure what you are asking when you refer to 'launch "chmod"'.

If you mean 'change permissions from windows', then 'force create mode' 
should do what you want.

   force create mode (S)
  This  parameter  specifies  a  set of UNIX mode bit permissions that
  will always be set on a file created by Samba. This is done by  bit-
  wise  'OR'ing  these bits onto the mode bits of a file that is being
  created or having its permissions  changed.  The  default  for  this
  parameter is (in octal) 000. The modes in this parameter are bitwise
  'OR'ed onto the file mode after the mask  set  in  the  create  mask
  parameter is applied. 

Note the "is being created *or having its permissions changed*"...

If you mean 'actually running "chmod" on the server', then there is nothing
that Samba can do about that, as that is something that is occurring on the
server itself, below the level of Samba. 

What might work to allow full access to everythign in the share-- regardless of
permissions -- would be to assign 'admin users' to the share in question... but
read the warnings about this.


-- 
greg byshenk  -  [EMAIL PROTECTED]  -  Leiden, NL

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] SAMBA+LDAP-How to promote Administrator with all priviliges?

2007-10-15 Thread Torsten

Adam Tauno Williams schrieb:


Add them to the domain administrators group.

  
if you have read my initial posting, you would have noticed that this is 
the problem.  the user administrator is member of "domain admins" but 
still can't perform administrative tasks.

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Re: can I configure smb.conf to always publish share files with -rw-rw-rw- permission ?

2007-10-15 Thread KLEIN Stéphane
Le Mon, 15 Oct 2007 00:03:25 +0200, Greg Byshenk a écrit :

> On Sun, Oct 14, 2007 at 09:30:19PM +, KLEIN Stephane wrote:
>  
>> I use samba to share some files between some clients. I would like than
>> these files are always view with -rw-rw-rw- rights by all clients event
>> if someone change file access permissions.
>  
>> Can I configure smb.conf to do that ?
>  
> I don't think that you can force Samba to have them "view"ed that way,
> as the permissions in Samba are dependent upon the permissions on the
> files themselves (on the server).
> 
> But you can force the permissions to be set in a given way by Samba when
> files are created or modified.  Look at 'force create mode' in the
> smb.conf man page.

I know force create mode, force directory mode parameters but how can I 
force permission when one user launch "chmod" ?

Thanks,
Stephane


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba