Samba share to windows permission specific

Posted on

Samba share to windows permission specific – Managing your servers can streamline the performance of your team by allowing them to complete complex tasks faster. Plus, it can enable them to detect problems early on before they get out of hand and compromise your business. As a result, the risk of experiencing operational setbacks is drastically lower.

But the only way to make the most of your server management is to perform it correctly. And to help you do so, this article will share nine tips on improving your server management and fix some problem about windows, samba, , , .

I’ve a Centos server with a Samba 3.6. The Samba Config are written below:

log level =2
follow symlinks = yes
wide links = yes
unix extensions = no
hide dot files = no
security = share
passdb backend = tdbsam

path = /local/asgard/asgard_server
public = yes
writable = yes
browseable = yes
guest ok = yes
follow symlinks = yes
wide links = yes
unix extensions = no
hide dot files = no

Then I mount it to the windows as R:/ and it seems fine.But the security properties of the file under R:/ are Specific, not full control. All those files on the server are 0777 and the owner are the root.Then I cannot modify those files on windows. So whats wrong?

Solution :

On of the solutions to set owners would be to add for each share read/write list. You can specify users

    read list = bob123 anna456
    write list = bob123 anna456

or use groups that are defined in /etc/groups

    read list = @dwarfs
    write list = @wizards

To set file/dir mode (in sense of chmod) you can play with parameters below:

    force create mode = 0666
    force directory mode = 6775


    create mask = 644
    directory mask = 755

The directories with data have to have unix permission allowing bob123 anna456 to read and write in them. If directory /local/asgard/asgard_server is owned by root and it has flag 755 neither Bob nor Anna can write in this directory using samba share.

Leave a Reply

Your email address will not be published.