[Samba] Directory permission windows issue - Samba

This is a discussion on [Samba] Directory permission windows issue - Samba ; Hi all, I have been trying to fix this issue for over a week with no avail. I am using samba 3.0.28a/29 authenticating against AD server. This functions correctly and I can set permissions correctly on files and can see ...

+ Reply to Thread
Results 1 to 7 of 7

Thread: [Samba] Directory permission windows issue

  1. [Samba] Directory permission windows issue

    Hi all,

    I have been trying to fix this issue for over a week with no avail. I am
    using samba 3.0.28a/29 authenticating against AD server. This functions
    correctly and I can set permissions correctly on files and can see the
    permissions in the XP security dialog. However the same cannot be said of
    directories in samba. I can create directories and once created I can change
    permissions, however the permissions never show in the XP security dialog
    box, thus making it extremely difficult to know what permissions have been
    set on a directory form a windows user point of view. If I watch the
    permissions on the directory in linux I can see the permissions being
    changed according to what is requested. This is little use though as the
    windows user will never know or forget what permissions they have set.

    Is it possible to resolve this in some way? The partition for the share is
    mounted with acls and the kernel is 2.6.18-6-686 on debian etch.

    Any help with this issue is greatly appreciated, as I had hoped to replace a
    windows share with this, it's a step in the right direction,

    Best Regards,

    Conor

    Here is the share config:

    [data01]
    comment = File Storage
    path = /home/data

    create mask = 700
    directory mask = 711

    force create mode = 700

    read only = No
    available = yes
    writable = yes
    browsable = yes
    public = yes
    preserve case = yes
    short preserve case = yes
    map hidden = no
    map system = no
    admin users = '@Domain Admins'

    ea support = yes

    acl compatibility = Yes
    acl group control = Yes
    force unknown acl user = Yes
    inherit acls = No
    map acl inherit = Yes
    --
    To unsubscribe from this list go to the following URL and read the
    instructions: https://lists.samba.org/mailman/listinfo/samba


  2. Re: [Samba] Directory permission windows issue

    On Thu, May 22, 2008 at 6:42 AM, Conor O'Callaghan
    wrote:
    > Hi all,
    >
    > I have been trying to fix this issue for over a week with no avail. I am
    > using samba 3.0.28a/29 authenticating against AD server. This functions
    > correctly and I can set permissions correctly on files and can see the
    > permissions in the XP security dialog. However the same cannot be said of
    > directories in samba. I can create directories and once created I can change
    > permissions, however the permissions never show in the XP security dialog
    > box, thus making it extremely difficult to know what permissions have been
    > set on a directory form a windows user point of view. If I watch the
    > permissions on the directory in linux I can see the permissions being
    > changed according to what is requested. This is little use though as the
    > windows user will never know or forget what permissions they have set.
    >
    > Is it possible to resolve this in some way? The partition for the share is
    > mounted with acls and the kernel is 2.6.18-6-686 on debian etch.
    >

    I have found for this to work you need to setup idmap, winbind and to
    enable acls on your unix filesystem.

    John
    --
    To unsubscribe from this list go to the following URL and read the
    instructions: https://lists.samba.org/mailman/listinfo/samba


  3. Re: [Samba] Directory permission windows issue

    >
    >
    > I have found for this to work you need to setup idmap, winbind and to
    > enable acls on your unix filesystem.
    >
    >
    > John
    >


    Hi John,

    I think I have this already setup, this is from my config file:

    -----------------------------

    idmap uid = 10000-20000
    idmap gid = 10000-20000

    debuglevel = 2
    log file = /var/log/samba.log
    max log size = 50
    debug timestamp = yes

    # Winbind settings
    winbind separator = \
    winbind enum users = yes
    winbind enum groups = yes
    winbind use default domain = yes

    -----------------------------

    Best Regards,

    Conor
    --
    To unsubscribe from this list go to the following URL and read the
    instructions: https://lists.samba.org/mailman/listinfo/samba


  4. Re: [Samba] Directory permission windows issue

    >
    > Hi John,
    >
    > I think I have this already setup, this is from my config file:
    >
    > -----------------------------
    >
    > idmap uid = 10000-20000
    > idmap gid = 10000-20000
    >
    > debuglevel = 2
    > log file = /var/log/samba.log
    > max log size = 50
    > debug timestamp = yes
    >
    > # Winbind settings
    > winbind separator = \
    > winbind enum users = yes
    > winbind enum groups = yes
    > winbind use default domain = yes
    >
    > -----------------------------
    >
    > Best Regards,
    >
    > Conor
    >


    Hi all,

    I am sure that somebody in a corporate environment has the requirement for
    their clients using windows to be able to see directory permissions. Should
    I submit a feature request for this or is it an impossibility of the acl
    compatibility restraints.

    Best Regards,

    Conor
    --
    To unsubscribe from this list go to the following URL and read the
    instructions: https://lists.samba.org/mailman/listinfo/samba


  5. Re: [Samba] Directory permission windows issue

    > I am sure that somebody in a corporate environment has the requirement for
    > their clients using windows to be able to see directory permissions. Should
    > I submit a feature request for this or is it an impossibility of the acl
    > compatibility restraints.
    >

    Do you have acls activated on your unix host filesystem?

    Is the problem that you set an acl in windows properties tab and after
    pressing accept the acls go back to what you had before?

    Do you have your nsswitch.conf set to use winbind?

    John
    --
    To unsubscribe from this list go to the following URL and read the
    instructions: https://lists.samba.org/mailman/listinfo/samba


  6. Re: [Samba] Directory permission windows issue

    2008/5/28 John Drescher :

    > Do you have acls activated on your unix host filesystem?
    >
    > Is the problem that you set an acl in windows properties tab and after
    > pressing accept the acls go back to what you had before?
    >
    > Do you have your nsswitch.conf set to use winbind?
    >
    > John
    >


    Hi John,

    The kernel has acl support and the share partition is mounted with acls
    support. The problem occurs on directories, when you set permissions, the
    permissions will change but windows properties show all the security boxes
    unticked as if no user has any permissions on it. I can see the permissions
    being set by monitoring the host file system, as I say this functions
    correctly for files and the tick boxes in windows show the appropriate
    settings which is useful, but the same does not occur in setting directory
    permissions.

    My nssswitch.conf also uses winbind.

    Best Regards,

    Conor
    --
    To unsubscribe from this list go to the following URL and read the
    instructions: https://lists.samba.org/mailman/listinfo/samba


  7. Re: [Samba] Directory permission windows issue

    Hi Conor,

    On Wed, 28 May 2008 21:49:33 +0100
    "Conor O'Callaghan" wrote:

    > The kernel has acl support and the share partition is mounted with acls
    > support. The problem occurs on directories, when you set permissions, the
    > permissions will change but windows properties show all the security boxes
    > unticked as if no user has any permissions on it.


    Is the lower 'special permissions' box checked?

    If so this is due to the permission inheritance flags on the folder.
    Folder permissions defined without 'this folder, subfolders & files'
    inheritance will appear as 'special permissions'.

    Permissions (and inheritance) state can be viewed from the Advanced
    dialog, you just have to drill a little deeper to see them ;-)

    Samba 3, by default does not store folder inheritance flags, therfore
    all folder inheritance defauts to 'this folder only'.

    Cheers, Dave
    --
    To unsubscribe from this list go to the following URL and read the
    instructions: https://lists.samba.org/mailman/listinfo/samba


+ Reply to Thread