Re: [Samba] modify only, not deletable

2007-02-13 Thread Tim Wunder
On Tuesday 13 February 2007 4:49:32 am Joshua, C.S. Chen wrote:
> Rashid N. Achilov wrote:
> > On Tuesday 13 February 2007 14:30, Joshua, C.S. Chen wrote:
> >> Hi folks,
> >> I have a samba file server joining a Windows 2k AD as member server.
> >> I wonder how I can setup the files on the samba share to be modifiable
> >> by users, but no one can delete them. Is it possible? linux chattr
> >> command doesn't seems to help, and I can only setup windows share
> >> permission (full control, read,write) for the samba files from windows
> >> interface, not NTFS detailed permissions. Any idea?
> >
> > When you are under FreeBSD, it has chflags command to set "undeletable"
> > flag. I think, trying to delete flagged file should lead to "access
> > denied" message.
>
> Thanks for the info.
> now samba is running on a linux CentOS 4.4, is it possible to do the
> same thing?

Perhaps through the use of the sticky bit on the directory...
from 'man chmod':
"STICKY DIRECTORIES
   When the sticky bit is set on a directory, files in that directory may 
be unlinked or  renamed  only by root or their owner.  Without the sticky 
bit, anyone able to write to the directory can delete or rename files.  The 
sticky bit is commonly found on  directories,  such  as  /tmp,  that  are  
world-writable."

Look at using something like 
create mask = 0664
force directory mode = 01775
in your smb.conf file.

HTH, 
Tim

-- 
Fedora Core release 6 (Zod), Linux 2.6.19-1.2895.fc6
 14:15:58 up 4 days, 20:04,  0 users,  load average: 0.15, 0.10, 0.09
MP3/OGG archive Total playlength : 14 days, 21 hours, 52 mins 42 seconds
"It's what you learn after you know it all that counts" John Wooden


pgpAELwjZudfz.pgp
Description: PGP signature
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] samba-3.0.21b-2 & win98

2007-01-18 Thread Tim Wunder
On Thursday 18 January 2007 12:55 am, Stefan Kok wrote:
> Hi List
>
> We have a samba 3.0.21b running.
>
> When typing \\nlasrv in  win98 run. We get a response like this:
>
> "The computer or sharename could not be found"
>

Do you get the same result when typing in the IP address?

-- 
Fedora Core release 5 (Bordeaux), Linux 2.6.18-1.2257.fc5
 08:40:01 up 4 days, 19:50,  2 users,  load average: 0.13, 0.36, 0.42
MP3/OGG archive Total playlength : 9 days, 8 hours, 9 mins 27 seconds
"It's what you learn after you know it all that counts" John Wooden


pgpXqgu0YOYWi.pgp
Description: PGP signature
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Dual boot Win98 Centos sharing files

2007-01-16 Thread Tim Wunder
On Tuesday 16 January 2007 3:31 pm, Jeff Boyce wrote:
> Greetings -
>
> I have searched the mailing list archives and my Samba 3 book and have not
> seen this issue addressed anywhere.  My home desktop box has Win98
> installed on a 20 GB drive and Centos 4.4 on a 160 GB drive with a Grub
> menu for selecting which OS to boot.  I am wondering if it is theoretically
> possible to share (read and write) files on the Linux drive when booted to
> Window, and vice versa, is it possible to share files on the Windows drive
> when booted to Linux.  My Linux drive is set up with LVM.  I manage a Linux
> server with 8 Windows boxes at work using Samba, so am familiar with
> configuring Samba, but I am wondering if it is possible to do this type of
> file sharing within a single dual boot box?  Thanks.
>

Linux can read and write FAT32, just mount the Windows partion in linux and 
store shared files there. There also used to be Windows utilities that could 
read and write ext2, I imagine there are utilities that will read & write 
ext3. So, depending on the filesystem you're using on linux, it's possible 
for you to read and write files on the linux partiion. But I wouldn't 
recommend it.

HTH, 
Tim
-- 
Fedora Core release 5 (Bordeaux), Linux 2.6.18-1.2257.fc5
 16:05:01 up 3 days,  3:15,  4 users,  load average: 0.19, 0.17, 0.14
MP3/OGG archive Total playlength : 9 days, 8 hours, 9 mins 27 seconds
"It's what you learn after you know it all that counts" John Wooden


pgp6YnFQDNztN.pgp
Description: PGP signature
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Group permissions issue migrating from 2.2.8a to 3.0.23a

2007-01-15 Thread Tim Wunder
Thanks for the response Thomas, questions below...

On Monday 15 January 2007 2:13 pm, you wrote:
> Tim Wunder wrote:
> > I have a share that worked fine in samba 2.2.8a, users were able to read
> > and write to the share, and edit files. After migrating to 3.0.23a, users
> > are no longer able to edit existing files.
>
> I would use 3.0.23d - there were some changes in group behaviour.
>
> > Samba 3.0.23a config:
> > [sales]
> > comment = SALES
> > path = /home/netshare/sales
> > read list = @purch, @shipping
>
> Try   read list = +purch, +shipping
>
> > write list = @adm, @mgt, @sales, @vag, +hap
>
> Try   write list = +adm, +mgt, +sales, +vag, +hap
>

Changing the @ to a + seems to make no difference.
Also, according to the Help file that came with samba, the @ is the proper 
syntax:
"This is a list of users that are given read-write access to a service. If the 
connecting user is in this list then they will be given write access, no 
matter what the read only option is set to. The list can include group names 
using the @group syntax."

> > force group = +sales
>
> Try   force group = sales
>
> > I can only edit the file as user tpw. In samba 2.2.8a, anyone in the
> > sales group could edit the file.
>
> You need the '+' as group flag now (tested with 3.0.23d).
>
> > Additionally, it seems that samba is changing the group to tpw when
> > saving the file as user tpw. The unix group "sales" exists and the user
> > "tpw" is a memeber of that group. Shouldn't the "force group = +sales"
> > cause the group to be "sales" when the file is saved?
>
> No. You must have no group flag (+) in 'force group' because 'force
> group' forces ... a group and not also users as in 'read list' and
> 'write list' ;)

Again, according to the Help file, "In Samba 2.0.5 and above this parameter 
has extended functionality in the following way. If the group name listed 
here has a '+' character prepended to it then the current user accessing the 
share only has the primary group default assigned to this group if they are 
already assigned as a member of that group."


pgpuoOR3WZo8a.pgp
Description: PGP signature
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

[Samba] Group permissions issue migrating from 2.2.8a to 3.0.23a

2007-01-15 Thread Tim Wunder
Hi, 

I have a share that worked fine in samba 2.2.8a, users were able to read and 
write to the share, and edit files. After migrating to 3.0.23a, users are no 
longer able to edit existing files.

Samba 2.2.8a config:
[sales]
comment = SALES
path = /home/netshare/sales
read list = @purch, @shipping
write list = @adm, @mgt, @sales, @vag, +hap
force group = +sales
create mask = 0664
directory mask = 00
force directory mode = 01775
vfs object = /usr/local/samba/recycle.so
vfs options = /etc/samba/salesrecycle.conf

Samba 3.0.23a config:
[sales]
comment = SALES
path = /home/netshare/sales
read list = @purch, @shipping
write list = @adm, @mgt, @sales, @vag, +hap
force group = +sales
create mask = 0664
directory mask = 00
force directory mode = 01775
vfs objects = recycle:recycle
recycle:repository = .recycle/%U
recycle:keeptree = Yes
recycle:touch = Yes
recycle:versions = No

the directory the file is in has the following permissions:
drwxrwxr-t  3 tpw sales
the file has:
-rwxrw-r--  1 tpw sales

I can only edit the file as user tpw. In samba 2.2.8a, anyone in the sales 
group could edit the file.

Additionally, it seems that samba is changing the group to tpw when saving the 
file as user tpw. The unix group "sales" exists and the user "tpw" is a 
memeber of that group. Shouldn't the "force group = +sales" cause the group 
to be "sales" when the file is saved?

Has something changed with samba? If so, how do I need to configure this share 
to allow users in group sales to edit files?

Thanks, 
Tim


pgps7TGG2fslE.pgp
Description: PGP signature
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba