Re: [Samba] folder/users privileges
Hi, You would use in "/etc/fstab" the option "acl" in the partition that will use the ACL. For example: /dev/mapper/VG00-LVData /data ext3defaults,acl0 2 This form the setfacl command will be accept. I think that will help you. __ Leandro Silva Coronato lcoron...@hotmail.com > Date: Tue, 4 Aug 2009 14:06:12 -0700 > From: jjoh...@gmail.com > To: ale...@gmail.com > CC: samba@lists.samba.org > Subject: Re: [Samba] folder/users privileges > > Surendil wrote: > > You were right, i can do it easily with setfacl. > > Thanks for solving my problem. > > > > i have another thing going on now. > > everytime i try to setfacl a user to a folder it gives me an error. > > > > r...@s-f141-lx01:/# setfacl -b -k -R prueba/ > > r...@s-f141-lx01:/# setfacl -R -m u:ale:rw prueba/ > > setfacl: prueba/: Operation not supported > > > > > The file system is not mounted with ACL enabled? > > > any idea of why this is happening??? > > > > Againg thanks for your help. > > > > On Tue, Aug 4, 2009 at 1:40 PM, Robert LeBlanc wrote: > > > > > >> I've found that you can not change the ugo permissions that are default on > >> Linux systems. You have to use extended ACLs and with Windows you can > >> manage > >> those to your heart's content. Typically, what we do is set permissions > >> that > >> will not ever be changed using the Linux ugo permissions, and then more > >> detailed ones we use extended ACLs. I have not found a way to manage the > >> Linux ugo permissions from Windows. > >> > >> Robert LeBlanc > >> Life Sciences & Undergraduate Education Computer Support > >> Brigham Young University > >> > >> > >> On Tue, Aug 4, 2009 at 10:30 AM, Surendil wrote: > >> > >> > >>> I've tried to set ACLs but have the same results as before, definitly i'm > >>> doing something wrong. > >>> I just thought i could manage privileges like Windows 2003 file server. > >>> > >>> On Tue, Aug 4, 2009 at 1:29 PM, Surendil wrote: > >>> > >>> > >>>> I've tried to set ACLs but have the same results as before, definitly > >>>> > >>> i'm > >>> > >>>> doing something wrong. > >>>> I just thought i could manage privileges like Windows 2003 file server. > >>>> > >>>> > >>>> > >>>> On Tue, Aug 4, 2009 at 12:23 PM, Robert LeBlanc >>>> wrote: > >>>> > >>>> > >>>>> Samba respect file system ACLs. We use them all the time. We have our > >>>>> share declarations wide open (relatively speaking) and control all the > >>>>> > >>> rest > >>> > >>>>> of the permissions by ACLs. We use XFS and usually mount the file > >>>>> > >>> system to > >>> > >>>>> respect gid bit setting on folders to give a Windows like environment > >>>>> > >>> (we > >>> > >>>>> also set the umask appropriately in smb.conf) > >>>>> > >>>>> Robert LeBlanc > >>>>> Life Sciences & Undergraduate Education Computer Support > >>>>> Brigham Young University > >>>>> > >>>>> > >>>>> On Tue, Aug 4, 2009 at 8:47 AM, Surendil wrote: > >>>>> > >>>>> > >>>>>> The users ale and jvillar are windows XP users trying to get into > >>>>>> > >>> samba > >>> > >>>>>> shared folder > >>>>>> will acl work? > >>>>>> > >>>>>> On Tue, Aug 4, 2009 at 11:31 AM, Eero Volotinen < > >>>>>> > >>> eero.voloti...@iki.fi > >>> > >>>>>>> wrote: > >>>>>>> > >>>>>>> I got a folder named "BACKUP" > >>>>>>> > >>>>>>>> users ale and jvillar can read/write this folder > >>>>>>>> inside "BACKUP" is another folder
Re: [Samba] folder/users privileges
Surendil wrote: You were right, i can do it easily with setfacl. Thanks for solving my problem. i have another thing going on now. everytime i try to setfacl a user to a folder it gives me an error. r...@s-f141-lx01:/# setfacl -b -k -R prueba/ r...@s-f141-lx01:/# setfacl -R -m u:ale:rw prueba/ setfacl: prueba/: Operation not supported The file system is not mounted with ACL enabled? any idea of why this is happening??? Againg thanks for your help. On Tue, Aug 4, 2009 at 1:40 PM, Robert LeBlanc wrote: I've found that you can not change the ugo permissions that are default on Linux systems. You have to use extended ACLs and with Windows you can manage those to your heart's content. Typically, what we do is set permissions that will not ever be changed using the Linux ugo permissions, and then more detailed ones we use extended ACLs. I have not found a way to manage the Linux ugo permissions from Windows. Robert LeBlanc Life Sciences & Undergraduate Education Computer Support Brigham Young University On Tue, Aug 4, 2009 at 10:30 AM, Surendil wrote: I've tried to set ACLs but have the same results as before, definitly i'm doing something wrong. I just thought i could manage privileges like Windows 2003 file server. On Tue, Aug 4, 2009 at 1:29 PM, Surendil wrote: I've tried to set ACLs but have the same results as before, definitly i'm doing something wrong. I just thought i could manage privileges like Windows 2003 file server. On Tue, Aug 4, 2009 at 12:23 PM, Robert LeBlanc Samba respect file system ACLs. We use them all the time. We have our share declarations wide open (relatively speaking) and control all the rest of the permissions by ACLs. We use XFS and usually mount the file system to respect gid bit setting on folders to give a Windows like environment (we also set the umask appropriately in smb.conf) Robert LeBlanc Life Sciences & Undergraduate Education Computer Support Brigham Young University On Tue, Aug 4, 2009 at 8:47 AM, Surendil wrote: The users ale and jvillar are windows XP users trying to get into samba shared folder will acl work? On Tue, Aug 4, 2009 at 11:31 AM, Eero Volotinen < eero.voloti...@iki.fi wrote: I got a folder named "BACKUP" users ale and jvillar can read/write this folder inside "BACKUP" is another folder named "MAIL BACKUP" i want user ale to read/write this folder and user jvillar only read. Even though i tried everything i could think of nothing worked out the way i wanted too. Did anyone solved this? Use acl on filesystem ? -- Eero -- Alejandro Debussy Konexion Urbana Tel: 02322-426468 -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba -- Alejandro Debussy Konexion Urbana Tel: 02322-426468 -- Alejandro Debussy Konexion Urbana Tel: 02322-426468 -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] folder/users privileges
You were right, i can do it easily with setfacl. Thanks for solving my problem. i have another thing going on now. everytime i try to setfacl a user to a folder it gives me an error. r...@s-f141-lx01:/# setfacl -b -k -R prueba/ r...@s-f141-lx01:/# setfacl -R -m u:ale:rw prueba/ setfacl: prueba/: Operation not supported any idea of why this is happening??? Againg thanks for your help. On Tue, Aug 4, 2009 at 1:40 PM, Robert LeBlanc wrote: > I've found that you can not change the ugo permissions that are default on > Linux systems. You have to use extended ACLs and with Windows you can manage > those to your heart's content. Typically, what we do is set permissions that > will not ever be changed using the Linux ugo permissions, and then more > detailed ones we use extended ACLs. I have not found a way to manage the > Linux ugo permissions from Windows. > > Robert LeBlanc > Life Sciences & Undergraduate Education Computer Support > Brigham Young University > > > On Tue, Aug 4, 2009 at 10:30 AM, Surendil wrote: > >> I've tried to set ACLs but have the same results as before, definitly i'm >> doing something wrong. >> I just thought i could manage privileges like Windows 2003 file server. >> >> On Tue, Aug 4, 2009 at 1:29 PM, Surendil wrote: >> >> > I've tried to set ACLs but have the same results as before, definitly >> i'm >> > doing something wrong. >> > I just thought i could manage privileges like Windows 2003 file server. >> > >> > >> > >> > On Tue, Aug 4, 2009 at 12:23 PM, Robert LeBlanc > >wrote: >> > >> >> Samba respect file system ACLs. We use them all the time. We have our >> >> share declarations wide open (relatively speaking) and control all the >> rest >> >> of the permissions by ACLs. We use XFS and usually mount the file >> system to >> >> respect gid bit setting on folders to give a Windows like environment >> (we >> >> also set the umask appropriately in smb.conf) >> >> >> >> Robert LeBlanc >> >> Life Sciences & Undergraduate Education Computer Support >> >> Brigham Young University >> >> >> >> >> >> On Tue, Aug 4, 2009 at 8:47 AM, Surendil wrote: >> >> >> >>> The users ale and jvillar are windows XP users trying to get into >> samba >> >>> shared folder >> >>> will acl work? >> >>> >> >>> On Tue, Aug 4, 2009 at 11:31 AM, Eero Volotinen < >> eero.voloti...@iki.fi >> >>> >wrote: >> >>> >> >>> > I got a folder named "BACKUP" >> >>> >> users ale and jvillar can read/write this folder >> >>> >> inside "BACKUP" is another folder named "MAIL BACKUP" >> >>> >> i want user ale to read/write this folder and user jvillar only >> read. >> >>> >> Even though i tried everything i could think of nothing worked out >> the >> >>> way >> >>> >> i >> >>> >> wanted too. >> >>> >> Did anyone solved this? >> >>> >> >> >>> > >> >>> > Use acl on filesystem ? >> >>> > >> >>> > -- >> >>> > Eero >> >>> > >> >>> >> >>> >> >>> >> >>> -- >> >>> Alejandro Debussy >> >>> Konexion Urbana >> >>> Tel: 02322-426468 >> >>> -- >> >>> To unsubscribe from this list go to the following URL and read the >> >>> instructions: https://lists.samba.org/mailman/options/samba >> >>> >> >> >> >> >> > >> > >> > -- >> > Alejandro Debussy >> > Konexion Urbana >> > Tel: 02322-426468 >> > >> >> >> >> -- >> Alejandro Debussy >> Konexion Urbana >> Tel: 02322-426468 >> -- >> To unsubscribe from this list go to the following URL and read the >> instructions: https://lists.samba.org/mailman/options/samba >> > > -- Alejandro Debussy Konexion Urbana Tel: 02322-426468 -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] folder/users privileges
I've found that you can not change the ugo permissions that are default on Linux systems. You have to use extended ACLs and with Windows you can manage those to your heart's content. Typically, what we do is set permissions that will not ever be changed using the Linux ugo permissions, and then more detailed ones we use extended ACLs. I have not found a way to manage the Linux ugo permissions from Windows. Robert LeBlanc Life Sciences & Undergraduate Education Computer Support Brigham Young University On Tue, Aug 4, 2009 at 10:30 AM, Surendil wrote: > I've tried to set ACLs but have the same results as before, definitly i'm > doing something wrong. > I just thought i could manage privileges like Windows 2003 file server. > > On Tue, Aug 4, 2009 at 1:29 PM, Surendil wrote: > > > I've tried to set ACLs but have the same results as before, definitly i'm > > doing something wrong. > > I just thought i could manage privileges like Windows 2003 file server. > > > > > > > > On Tue, Aug 4, 2009 at 12:23 PM, Robert LeBlanc >wrote: > > > >> Samba respect file system ACLs. We use them all the time. We have our > >> share declarations wide open (relatively speaking) and control all the > rest > >> of the permissions by ACLs. We use XFS and usually mount the file system > to > >> respect gid bit setting on folders to give a Windows like environment > (we > >> also set the umask appropriately in smb.conf) > >> > >> Robert LeBlanc > >> Life Sciences & Undergraduate Education Computer Support > >> Brigham Young University > >> > >> > >> On Tue, Aug 4, 2009 at 8:47 AM, Surendil wrote: > >> > >>> The users ale and jvillar are windows XP users trying to get into samba > >>> shared folder > >>> will acl work? > >>> > >>> On Tue, Aug 4, 2009 at 11:31 AM, Eero Volotinen >>> >wrote: > >>> > >>> > I got a folder named "BACKUP" > >>> >> users ale and jvillar can read/write this folder > >>> >> inside "BACKUP" is another folder named "MAIL BACKUP" > >>> >> i want user ale to read/write this folder and user jvillar only > read. > >>> >> Even though i tried everything i could think of nothing worked out > the > >>> way > >>> >> i > >>> >> wanted too. > >>> >> Did anyone solved this? > >>> >> > >>> > > >>> > Use acl on filesystem ? > >>> > > >>> > -- > >>> > Eero > >>> > > >>> > >>> > >>> > >>> -- > >>> Alejandro Debussy > >>> Konexion Urbana > >>> Tel: 02322-426468 > >>> -- > >>> To unsubscribe from this list go to the following URL and read the > >>> instructions: https://lists.samba.org/mailman/options/samba > >>> > >> > >> > > > > > > -- > > Alejandro Debussy > > Konexion Urbana > > Tel: 02322-426468 > > > > > > -- > Alejandro Debussy > Konexion Urbana > Tel: 02322-426468 > -- > To unsubscribe from this list go to the following URL and read the > instructions: https://lists.samba.org/mailman/options/samba > -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] folder/users privileges
I've tried to set ACLs but have the same results as before, definitly i'm doing something wrong. I just thought i could manage privileges like Windows 2003 file server. On Tue, Aug 4, 2009 at 1:29 PM, Surendil wrote: > I've tried to set ACLs but have the same results as before, definitly i'm > doing something wrong. > I just thought i could manage privileges like Windows 2003 file server. > > > > On Tue, Aug 4, 2009 at 12:23 PM, Robert LeBlanc wrote: > >> Samba respect file system ACLs. We use them all the time. We have our >> share declarations wide open (relatively speaking) and control all the rest >> of the permissions by ACLs. We use XFS and usually mount the file system to >> respect gid bit setting on folders to give a Windows like environment (we >> also set the umask appropriately in smb.conf) >> >> Robert LeBlanc >> Life Sciences & Undergraduate Education Computer Support >> Brigham Young University >> >> >> On Tue, Aug 4, 2009 at 8:47 AM, Surendil wrote: >> >>> The users ale and jvillar are windows XP users trying to get into samba >>> shared folder >>> will acl work? >>> >>> On Tue, Aug 4, 2009 at 11:31 AM, Eero Volotinen >> >wrote: >>> >>> > I got a folder named "BACKUP" >>> >> users ale and jvillar can read/write this folder >>> >> inside "BACKUP" is another folder named "MAIL BACKUP" >>> >> i want user ale to read/write this folder and user jvillar only read. >>> >> Even though i tried everything i could think of nothing worked out the >>> way >>> >> i >>> >> wanted too. >>> >> Did anyone solved this? >>> >> >>> > >>> > Use acl on filesystem ? >>> > >>> > -- >>> > Eero >>> > >>> >>> >>> >>> -- >>> Alejandro Debussy >>> Konexion Urbana >>> Tel: 02322-426468 >>> -- >>> To unsubscribe from this list go to the following URL and read the >>> instructions: https://lists.samba.org/mailman/options/samba >>> >> >> > > > -- > Alejandro Debussy > Konexion Urbana > Tel: 02322-426468 > -- Alejandro Debussy Konexion Urbana Tel: 02322-426468 -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] folder/users privileges
The users ale and jvillar are windows XP users trying to get into samba shared folder will acl work? On Tue, Aug 4, 2009 at 11:31 AM, Eero Volotinen wrote: > I got a folder named "BACKUP" >> users ale and jvillar can read/write this folder >> inside "BACKUP" is another folder named "MAIL BACKUP" >> i want user ale to read/write this folder and user jvillar only read. >> Even though i tried everything i could think of nothing worked out the way >> i >> wanted too. >> Did anyone solved this? >> > > Use acl on filesystem ? > > -- > Eero > -- Alejandro Debussy Konexion Urbana Tel: 02322-426468 -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] folder/users privileges
I got a folder named "BACKUP" users ale and jvillar can read/write this folder inside "BACKUP" is another folder named "MAIL BACKUP" i want user ale to read/write this folder and user jvillar only read. Even though i tried everything i could think of nothing worked out the way i wanted too. Did anyone solved this? Use acl on filesystem ? -- Eero -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba