Samba4 creating share and setting permissions without windows tools

dllo · 07-30-2014, 08:43 AM

Hello,

I need a way to set permissions to share folder without to use RSAT, I've not found anything about that.

The samba wiki said that

---------------------
Change permissions on folders of a share

Changes of permissions are done using the classic *nix tools 'chmod', 'chown' and 'chgrp'.

Example:

Code:

# mkdir /srv/samba/Demo/Example/
# chown foobar:DemoGroup /srv/samba/Demo/Example/
# chmod 2770 /srv/samba/Demo/Example/

-------------------

I created a group DemoGroup with "samba-tool group add DemoGroup"
Then, when I did

Code:

chown foobar:DemoGroup /srv/samba/Demo/Example/

I got this error

Code:

chown: invalid group: "DemoGroup"

What must I do to allow groups created by samba-tool works with chown??

How can I do to assign permissions to a shared folder from command line using the power of samba4?

Thank you in advance

Spatior · 07-30-2014, 11:37 AM

HI Dllo,

I'm going to take a guess here, try creating the group in the box, old style:

Code:

groupadd DemoGroup

and of course add the desired user to it

dllo · 07-30-2014, 12:05 PM

Thank you, but ... samba-tool add group?? What's the point of samba-tool? I don't want to add users and groups to old style.
Should have something that can I do with samba-tool or similar, to add permissions to a shared folder, so on.

Spatior · 07-30-2014, 12:28 PM

Hi,

Indeed it's a little redundant but at least until SAMBA 3 it was the way it worked, you added user and groups "virtually" to SAMBA but those needed to exist in the OS, otherwise they were not recognized.

you may see samba tools (not only smaba-tool) as security administration programs, it will only allows OS user groups to access the samba services/shares.

dllo · 07-30-2014, 03:05 PM

Spatior

samba4 don't use the local user or group indeed is not necessary to create it.

Spatior · 07-30-2014, 03:44 PM

Hi Dllo,

Didn't know that.

I tried to find some documentation about this in SAMBA 4 but no luck, I haven't played so much with this new version so I must read more and if found something I'll get back here.