IIRC you can set the sticky bits on the user and group.
chmod ug+s /home/data_cc
When a file is created in /home/data_cc it should now be owned by
the user and group that owns /home/data_cc.
I use this along with the mask and mode commands in the samba
configuration file to restrict who can add directories and files
and ensure that the created files have the same ownership and
permissions no matter who puts them there.
Your setup seems overly liberal.
This is what I use:
---smb.conf---
# Global parameters
[global]
workgroup = JUPITER
netbios name = EUROPA
server string = FreeBSD Samba Server
unix password sync = yes
encrypt passwords = Yes
update encrypted = Yes
restrict anonymous = Yes
# ssl CA certFile = /usr/share/ssl/certs/ca-bundle.crt
log file = /var/log/samba/log.%m.%U.%I
max log size = 50
debug uid = Yes
socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
character set = ISO8859-1
os level = 66
preferred master = Yes
domain master = Yes
wins support = Yes
admin users = callisto
create mask = 0644
printing = cups
[homes]
comment = Home Directories
writeable = Yes
browseable = No
[public]
path = /var/backup/public-share/
comment = Public file share area
allow hosts = <list removed for privacy>
create mask = 660
write list = @public
directory mask = 770
---
This is how I set the directory permissions.
---
drwxr-xr-x root wheel /var/backup/public-share
drwsrwsrwx root wheel /var/backup/public-share/Network Trash Folder
-r--r--r-- root wheel /var/backup/public-share/README.txt
drwsrwsrwx root wheel /var/backup/public-share/TheVolumeSettingsFolder
drwsr-sr-x root wheel /var/backup/public-share/Work
drwxrws--- root public /var/backup/public-share/Work/Documentation
drwxrws--- root public /var/backup/public-share/Work/Images
drwxrwx--- root wheel /var/backup/public-share/Work/Misc
drwxrwxr-x root wheel /var/backup/public-share/Work/Network
drwxrws--- root public /var/backup/public-share/Work/Forms
drwxrws--- root public /var/backup/public-share/Works/Products
drwxrwsr-x root public /var/backup/public-share/Work/Software
drwxr-xr-x root wheel /var/backup/public-share/Work/Special
drwsrws--- root wheel /var/backup/public-share/Work/Special/Secret
drwxrws-wx root wheel /var/backup/public-share/Work/Special/moderated
drwxrwsr-x root wheel /var/backup/public-share/Work/Special/readonly
drwxrws--- root public /var/backup/public-share/Work/Special/user-ro
---
As you can see by changing the group and permission a number of
unique qualities can be configured. Users who belong to wheel
have extensive privileges, users who belong to public have limited
access, and users who don't belong to either group have very
restricted access. Where you see an "s" instead of an "x" in a
directories permissions it means the owner or group associated to the
"s" is applied to any file or directory created in that directory.
This may be more complicated than you need because these directories
are also shared with netatalk. This is so that Macintosh, Windows
and Unix/Linux machines have the same privileges depending on the
user not the platform.
Hope this helps.
On Fri, 2005-07-01 at 11:40 +0000, mike wrote:
I have a file-server running FC3, which is running in share mode (XP
home machines)
I can mount shares and write files except for one major problem - all
files are created with owner/group of nobody. This applies on bioth XP
and FC3 machines. The same problem applies whether using smb or cifs
This causes problems especially sending mail
Any idea what is wrong?
This is my relevant smb.conf
[global]
workgroup = brec
wins support = yes
netbios name = DATA_CC
server string = breccc
security = SHARE
obey pam restrictions = Yes
password server = None
pam password change = Yes
passwd program = /usr/bin/passwd %u
passwd chat = *New*password* %n\n *Retype*new*password* %n\n
*passwd:*all*authentication*tokens*updated*successfully*
unix password sync = Yes
log level = 3
log file = /var/log/samba/%m.log
max log size = 0
socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
name resolve order = wins lmhosts hosts bcast
os level = 50
preferred master = Yes
domain master = Yes
dns proxy = No
ldap ssl = no
create mask = 0777
force create mode = 0777
force security mode = 0777
directory mask = 0777
force directory mode = 0777
force directory security mode = 0777
guest ok = yes
hosts allow = 192.168.1.4, 192.168.1.50,192.168.1.6, 127.0.0.1,
192.168.1.7,192.168.1.6
idmap uid = 16777216-33554431
idmap gid = 16777216-33554431
template shell = /bin/false
winbind use default domain = no
[datacc]
comment = shared data files for connecting communities
path = /home/data_cc
writeable = yes
inherit permissions = Yes
--
Guy Fraser
Network Administrator
The Internet Centre
1-888-450-6787
(780)450-6787