Prev: [Samba] Mis-behavior of ldap.conf regarding nss?
Next: [Samba] Samba PDC, joining XP workstation 'network path was not found'
From: Petr Kopecky on 23 Apr 2008 15:20
Hi there,

I have some problem with Windows access rights mapping on Samba 3.0.28. I am
using XFS filesystem and ACL is working.

This is a part of my smb.conf:

domain logons = Yes
preferred master = Yes
map acl inherit = Yes
map archive = Yes
map hidden = Yes
map system = Yes
veto files = /*.eml/*.nws/*.{*}/
veto oplock files = /*.doc/*.xls/*.mdb/
create mask = 0755
directory mask = 0755

[profiles]
comment = Profile Share
path = /data/samba/profiles
read only = No
profile acls = Yes
browseable = No

[share]
comment = Shared Data
path = /data/samba/share
public = No
writable = No
write list = @smbusers
browseable = Yes


This configuration works fine for profiles where I need to map hidden and
system flags as windows uses them. But those flags are mapped in execute
flags not acl rights, but it works.

getfacl /data/samba/profiles/some.user
# file: data/samba/profiles/some.user
# owner: someuser
# group: smbusers
user::rwx
group::---
other::---

The problem is on other share. If anyone changes the premissions on the file
then access rights are mapped to execute flag not ACL and it is very
confusing.
If domain user rights are set to write and modify, it is stored as group
execute, if others are granted for write and modify, then execute flag for
others is set. But these flags are interpreted as system and hidden.
Additionally all created files have owner's executable bit set which means
archive.

Could you please help me what should I set to have DOS access rights working
together with windows ACL? I cannot find this simple information on net :-(

Thank you!

Regards,
Petr

--
Ing. Petr Kopecky
E-mail: kejpi(a)centrum.cz
_______________________________________________________

OpenDocument is now international standard ISO/IEC 26300. Use OpenOffice!
It's free for everyone :-)

http://www.openoffice.org
http://www.openoffice.cz
_______________________________________________________

--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/listinfo/samba
 | 
Pages: 1
Prev: [Samba] Mis-behavior of ldap.conf regarding nss?
Next: [Samba] Samba PDC, joining XP workstation 'network path was not found'