Samba Security Question
 

Hello all, I recently asked a question on this forum and posts i receive were extremely helpful and courteous so this will be my second thread:

SETUP: I recently set up samba on a linux computer as a file server for windows computers. Anyway I made several users in linux then put them all into a the same group, I then made samba users from those users and set up the smb.conf file to allow these users access to read and write to a specific folder. I also made the group these users belong to the owner of the this folder.

PROBLEM: All the users have full access to the folder as I want, but if one user creates a new folder he/she then is the only person that can write to the folder (However everyone can browse and read it). Ideally Id like all the users to have full access to all the folders in this share regardless of who made the folders. I have found that if I use the chmod -R 777 command on this folder then all the users can write to any newly created folders and delete them if they wish (which is what I want but I don't want to have to do that every 2 seconds).

Does anyone have any suggestions on what I can do, what I'm doing wrong, or possibly a good set of documentation that discusses the intricacies of getting samba to jive with linux user/group rights? I would really appreciate any information I could get.

Possibly found the problem
 

I may have found the problem. It seems in the smb.conf file I entered both valid users = john mary...etc, and writelist = @groupname, it is possible that both entries were conflicting. Ive now removed the valid users = john mary...etc line and the problem appears resolved. I would however still appreciate any input or any information from anyone who has dealt with a similar situation. Id also like to hear anyones recommendations on documentation I might possibly consult to explain linux security, specifically user and group access rights. Currently I am only guessing based on knowledge I have of Windows NT user and group access rights.

I would add these directives to the share
force group = yourgroup
create mask = 0754

This will allow the users to create files and edit each others with the ownership remaining the same.

Make sure the directory has these permissions to start with.

-tom

YAY!
 

THANK YOU SO MUCH!!!! That did it!! Youre the man I cant thank you enough!!!!