Hello,
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of
Eric Halverson
Sent: Thursday, March 27, 2003 9:37 AM
To: Jaques Metz
Cc: Samba List
Subject: Re: [Samba] New Files in Samba
On Thu, 2003-03-27 at 08:31, Jaques Metz wrote:
Hi.
I've configured Samba to work as a dedicated file server, but when a
user create a new file in the shared directory, only this user can os
access this file. What should I do to change this?
Thanks.
Jaques Metz
The answer is simple...
Let's say that you have a partition labeled share and inside
it are a number of directories that you are sharing...
cd in to the share partition...
Then run this command...
chmod -R g+s *
What that will do is cause all files folders and sub-directories
to be created with the same group ownership as group user that access
and creates such files and folders. What you will end up with is the
following when running a ls -l :
[EMAIL PROTECTED] share]# ls -l
total 84
drwxrwsrwx3 root account 4096 Jan 9 10:57 account
drwxrws--- 29 root cad 4096 Mar 26 18:26 cad
drwxr-x---5 root root 4096 Jan 20 11:13 configurations
drwxrws--- 26 root docs 4096 Mar 25 12:11 docs
drwxrws--- 31 root inspect 4096 Mar 27 07:07 inspect
drwxrws---3 root jboss4096 Mar 27 09:43 jobboss
drwxrws---2 root laser4096 Mar 27 10:09 laser
drwxr-x---2 root root 4096 Mar 21 08:58 logfiles
drwxrwS---2 root root16384 Jul 16 2002 lost+found
drwxrws---3 root mail 4096 Jan 22 14:05 mail
drwxrws--- 12 root mill 4096 Mar 27 10:08 mill
drwxrws--- 18 root dmusers 4096 Mar 24 13:55 profiles
drwxrws--- 27 root public 4096 Mar 26 16:02 public
drwxrws--- 14 radkins purchasi 8192 Mar 27 10:00 purchasing
drwxrws---9 dgillesp qsman4096 Mar 3 11:59 qs9000
drwxrws---2 root quotes 4096 Dec 5 10:33 quotes
drwxrws---2 root shipping 4096 Feb 22 09:06 shipping
If you know how the above output is read... The first listing
shows what the files or directories are. The first group of 3 after the
'd' (which designates directory), refers to a user account, which in the
case of most of the directories is root. The second group of 3
characters refers to the group, which can easily be seen above. The
final group of 3 refers to world (meaning EVERYONE on the system)
rights.
If you are looking to fully utilize user and group security
rights, then the final set of three should be --- like they are above.
In the case of the second set of 3, the 's' denotes that all files and
folders created within those directories will have the same group
ownership rights attached to them.
With this you can create a number of nested group/user rights.
You'll want to look at the create mask (or create mode) options in that
share. If you want rwx access for the creator and primary group,
create
mask would be 0770, if you want full access for everyone to have full
access to the files, create mask would reflect 0777. Just make sure
that your create mask corresponds with the linux/unix file permission
structure.
For the LOVE OF GOD, please refrain from using the number method
when running chmod. You will have stricter control and actually KNOW
what rights you are handing out to the various users and groups on your
system when using the alpha character method.
For example;
chmod ug+rw some_text_file.txt
Will put User u and Group g read r and write w rights
onto the file. This will allow the user that has his or her username
listed as the owner of the file as well as any members of the group that
are listed on the file. For the World rights use o. To add such
rights use a + sign in between the ugo (User, Group, World) and the
rwx (Read, Write, Executable) and the - sign to take them away.
If you have a group called Accounting that needs access to a
directory then use the following command...
chown root:Accounting directory_name
Then change the rwx rights to allow the group Accounting to use
the directory and files within.
Then you can run whatever group ownership rights you want on
that directory and all Accounting group members will have access to the
files within.
These two commands, chmod and chown, are likely the most
important UNIX/Linux commands that you could ever possibly learn.
--
Eric Halverson [EMAIL PROTECTED]
Doctors Care Health Services
Regards,
Robert Adkins II
IT Manager/Buyer
Impel Industries, Inc.
586-254-5800
--
To unsubscribe from this list go to the following URL and read the
instructions: http://lists.samba.org/mailman/listinfo/samba
