Samba permissions

djtsa · 10-02-2003, 08:06 AM

Hi

I recently moved data over from one server to another using scp

command : scp -r root@blah.blah /blah .

it copied all the files over , i recreated the samba shares.

Problem is now , some of the directories users are getting "permission denied" errors.

security = share in my smb.conf file (basically I cloned the whole smb.conf file from the old server! noted

bviously changed server name etc).ownership is also set to nobody:nobody

is there something i'm missing , not doing right?

losing alot of hair over this , please help!

djt

fatgod · 10-02-2003, 10:56 AM

do you mean some directories under shares? or some shares are now "perm denied"?

Must be directory permissions if the samba config has not changed, but my security = users so there might be something "security = share" specific.

Medievalist · 10-02-2003, 11:12 AM

post your smb.conf

fatgod · 10-02-2003, 04:07 PM

And your directory permissions and the line your using to mount it.

djtsa · 10-03-2003, 01:59 AM

ok , here's the shares section of my smb.conf file

[Docs]
comment = Documents
path = /data/documents
public = yes
writable = yes
create mode = 0775
directory mode = 0770
printable = no

that basically is the conf I use for all my shares

security is also set to share (not user)

I changed all the dir permissions:

chmod -R a+rwx,g+rx,o+rx

The really weird thing is , I can create a directory on the share , but only I can access it , but another user can actually delete that dir??!!!?? really odd....

Please help (management is jumping on me)

Hope this sheds more light....

Ta

levian · 10-03-2003, 03:10 AM

...its a bit hard to imagine your condition...
however, what permission do you have in your Docs shared directory?
is it 777?

fatgod · 10-03-2003, 07:22 AM

Dude, you should be reading the smb.conf man page for this, it's really good, but anyway...

The things you need to check:
/data/documents/
My understanding is that these files are owned by nobody. when a user creates a file it is nobody:nogroup 0775. and a dir is 0770. If everyone was connecting as nobody then you would not have a problem. But I dont think they are, I think that your setup is specifying that users write files as nobody:nogroup but they are still connecting as themselves which is why your permissions are screwed.

How is smb.conf dealing with usernames? post the entire file, without the shares section.