RE: [Samba] MS Word and Samba File Permissions Problem: probablysolved
+ Groupmapping: - Domain Admins - root - Domain Users - domuser - Domain Guests - nogroup For the add group script I use what is given as an example in the Samba HowTo: http://de.samba.org/samba/docs/man/groupmapping.html#smbgrpadd.sh The add user script is just the normal useradd-comand: - /usr/sbin/useradd -d /home/%u -c DomainUser -s /bin/false %u That only worked correctly when I omitted the -g whateverPrimaryGroup . Apparently Samba adds the user to the group later: - set primary group script = /usr/sbin/usermod -g %g %u Giving passwords to users only worked after I adapted the passwd chat to the Debian passwd program: passwd chat = *new*password* %n\\n *new*password* %n\\n *updated* New compis are added to the group nogroup in my config: - add machine script = /usr/sbin/useradd -d /dev/null -s /bin/false -c DomainMachines -g nogroup %u And (nearly) finally all that only worked after I did set the rights right: Groupmapping: see above smb.conf: see above and valid users = +root, +domuser, +nogroup Hi Alexander, With this set up of yours, when you add users, do you have to manually add the home directories profile directories in usrmgr, or does that work automatically? And what backend are you using? I am using tbdsam. I have had limited success - either I have to add them myself, or they automatically appear as \\basilisk\%u and \\basilisk\profiles\%u i.e. the %L is expanded correctly to the machine name, but the %u is not expanded correctly - and a %u directory apprears in \\basilisk\profiles! Maybe one of the samba team can tell me what the expected behaviour should be (with tbdsam/usrmgr). To recall I am using samba 3.0.0final, compiled from the debian testing source, with-quotas. Would the expected behaviour change if one was to use pam password change = yes, instead of passwd program = /usr/bin/passwd %u. Cheers Chris -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
RE: [Samba] MS Word and Samba File Permissions Problem
Hello everybody! Obviously Samba as a PDC and Fileserver for w2k clients is not as easy as I first thought. Soon after setup and integration in a network a problem with the shares and MS Word appeared. Any time a file is opened with M$ Word directly from a share and edited it can't be saved. The M$ user gets the msg that the file is write-protected and on the samba side the file permissions are changed to r-xr-xr-x even if they have been 770 before. Here some of my configs: ### +Samba 3.0.1 on Debian 3.0 + Groupmapping: - Domain Admins - root - Domain Users - domuser - Domain Guests - nogroup + smb.conf: [global] ... admin users = +root write list = +root +domuser create mask = 0775 directory mask = 0775 ... [share] force create mode = 0660 force directory mode = 0770 force group = domuser Client-side: MS Office 2000 on w2k ### All the files/directories on this share belong to the group domuser. I found a hint in the Samba HowTo collection: http://de.samba.org/samba/docs/man/AccessControls.html#id2920312 According to that I set the sgid bit on all the directories (rwxrws---) and did set the force create/directory mode but that doesn't help. If anyone came across a similar problem or even a solution, please help me. A samba fileserver. that scrambles write-rights in conjunction with M$ Word is pretty useless .. Hi Alexander I had this problem at work (Debian 2.2.3a). My shares now look like this: [Share] comment = description path = /home/projects browseable = yes read only = no force create mode = 0060 force directory mode = 0070 create mask = 0770 directory mask = 0770 mode is drwxrwx--- owned by root.staff All users in company are in group staff. No sticky bit set (although we are running a similar share for out R D dept with the mode drwxrwx--T Everything runs happily now. All files are owned by the creator group staff. I also had an issue when i had set veto files (but I think that was because I had put veto files in the global section). As a return favour - have you got add user script/add group script etc working properly yet? Could you share your scripts with me pls - as I have issues with this in 3.0.0fianl. Regards, Chris -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] MS Word and Samba File Permissions Problem: probably solved
Hi Chris! Am Dienstag, 27. Januar 2004 14:59 schrieb Chris Aitken: +Samba 3.0.1 on Debian 3.0 + Groupmapping: - Domain Admins - root - Domain Users - domuser - Domain Guests - nogroup + smb.conf: [global] ... admin users = +root write list = +root +domuser create mask = 0775 directory mask = 0775 ... [share] force create mode = 0660 force directory mode = 0770 force group = domuser Client-side: MS Office 2000 on w2k ### All the files/directories on this share belong to the group domuser. ... I had this problem at work (Debian 2.2.3a). My shares now look like this: [Share] comment = description path = /home/projects browseable = yes read only = no force create mode = 0060 force directory mode = 0070 create mask = 0770 directory mask = 0770 mode is drwxrwx--- owned by root.staff I'll test that configuration next time when I'm allowed to stop the relevant bureau-net. But I found a different solution: setting oplock = Yes on the share worked. It looked as if my samba installation couldn't handle this opportunistic locking thing the w2k clients required (even though man smb.conf said it was turned on by default). I had to enable it on the share. Now the M$ Word problem is gone. I found some hints about that problem (via the Samba HowTo) in the MS knowledge-base: About XP Problems and oplocking: http://support.microsoft.com/default.aspx?scid=kb;EN-US;812937 About opportunistic locking in general: http://support.microsoft.com/default.aspx?scid=kb;EN-US;296264 First time that an MS help was of some use.. As a return favour - have you got add user script/add group script etc working properly yet? Could you share your scripts with me pls - as I have issues with this in 3.0.0fianl. Regards, Chris For the add group script I use what is given as an example in the Samba HowTo: http://de.samba.org/samba/docs/man/groupmapping.html#smbgrpadd.sh The add user script is just the normal useradd-comand: - /usr/sbin/useradd -d /home/%u -c DomainUser -s /bin/false %u That only worked correctly when I omitted the -g whateverPrimaryGroup . Apparently Samba adds the user to the group later: - set primary group script = /usr/sbin/usermod -g %g %u Giving passwords to users only worked after I adapted the passwd chat to the Debian passwd program: - passwd chat = *new*password* %n\\n *new*password* %n\\n *updated* New compis are added to the group nogroup in my config: - add machine script = /usr/sbin/useradd -d /dev/null -s /bin/false -c DomainMachines -g nogroup %u And (nearly) finally all that only worked after I did set the rights right: Groupmapping: see above smb.conf: see above and valid users = +root, +domuser, +nogroup Really finally: That's with Debian 3.0 and the Debian Samba package 3.0.1-2 Don't know if that helps, but I hope regards Alexander -- --- agoeres _at_ lieblinx.net tel.: +49 (0)30 / 61 20 26 87 fax: +49 (0)30 / 61 20 26 89 --- lieblinxNET we do software a Marwood Thiele GbR --- reichenberger straße 125 10999 Berlin http://lieblinx.net --- -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] MS Word and Samba File Permissions Problem
sorry, misdirected it and klicked too early on send.. :-( -- Weitergeleitete Nachricht -- Subject: Re: [Samba] MS Word and Samba File Permissions Problem Date: Dienstag, 27. Januar 2004 17:16 From: Alexander Goeres [EMAIL PROTECTED] To: Collen Blijenberg (MLHJ) [EMAIL PROTECTED] Hi Collen, Am Dienstag, 27. Januar 2004 15:25 schrieb Collen Blijenberg (MLHJ): Had the same prob with 3.0.0 version, but it's gone with 302rc1 creator group creator owner are the prob.. some how the 300 version added an extra group to my shares (creator group) and made it r+x causing the prob. just update to latest samba, or make an extra creator group mapping.. dunno.. prob passsed... l8r Collen thanks for the hint, but I for myself don't dare to use a release candidate. But I'll see forward to a final verion of 3.0.2.. Greetings Alexander --- agoeres _at_ lieblinx.net tel.: +49 (0)30 / 61 20 26 87 fax: +49 (0)30 / 61 20 26 89 --- lieblinxNET we do software a Marwood Thiele GbR --- reichenberger straße 125 10999 Berlin http://lieblinx.net --- -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
