I'm a newbie with SAMBA

We need to have user be able to change permissions on files to 755 or 700


We have a mount

nasfs001:/ifs/isilon-regn/stholdco/nfs/intwebqa/fs02 400G 55G 346G 14% /htdocs



htdocs is where all the content is for the various web sites

within htdocs there are sub directories that have their own samba share created. when files are being dragged and dropped in to the share the permissions are changed to 777

Some files need to be ran as 755 or 700 etc, so we need to be able to change the permissons.



Root does allow us to change ownership of files but not the permission (chmod).

Even when the owner of the files can't change ownership or permission.


Is there a way of setting up the share to allow chmod?


this is how the drives are set up now

one share has interherit on and one does not. Neither can chmod the files



isilon-regn-1# cd /ifs/isilon-regn/stholdco/nfs/intwebqa/fs02
isilon-regn-1# ls -led
drwxrwxrwx + 26 889 888 639 Jun 20 13:33 .
OWNER: user:889
GROUP: group:888
CONTROL:dacl_auto_inherited,sacl_auto_inherited
0: user:889 allow dir_gen_read,dir_gen_write,dir_gen_execute,std_write_dac,delete_child
1: group:888 allow dir_gen_read,dir_gen_write,dir_gen_execute,delete_child
2: everyone allow dir_gen_read,dir_gen_write,dir_gen_execute,delete_child,object_inherit,container_inherit
3: group:Administrators allow inherited dir_gen_all,object_inherit,container_inherit,inherited_ace
4: user:889 allow inherited dir_gen_all,inherited_ace
5: creator_owner allow inherited dir_gen_all,object_inherit,container_inherit,inherit_only,inherited_ace
6: group:Users allow inherited dir_gen_read,dir_gen_execute,object_inherit,container_inherit,inherited_ace
7: group:Users allow inherited std_synchronize,add_file,add_subdir,container_inherit,inherited_ace

isilon-regn-1# cd /ifs/isilon-regn/stholdco/nfs/intwebdev/fs02
isilon-regn-1# ls -led
drwxrwxrwx + 25 889 888 625 May 11 09:27 .
OWNER: user:889
GROUP: group:888
CONTROL:dacl_auto_inherited,sacl_auto_inherited
0: user:889 allow dir_gen_read,dir_gen_write,dir_gen_execute,std_write_dac,delete_child
1: group:888 allow dir_gen_read,dir_gen_write,dir_gen_execute,delete_child
2: everyone allow dir_gen_read,dir_gen_write,dir_gen_execute,delete_child
3: group:Administrators allow inherited dir_gen_all,object_inherit,container_inherit,inherited_ace
4: user:889 allow inherited dir_gen_all,inherited_ace
5: creator_owner allow inherited dir_gen_all,object_inherit,container_inherit,inherit_only,inherited_ace
6: group:Users allow inherited dir_gen_read,dir_gen_execute,object_inherit,container_inherit,inherited_ace
7: group:Users allow inherited std_synchronize,add_file,add_subdir,container_inherit,inherited_ace

I don't know squat about samba, but I find this documentation about samba users and security. HTH

I discourage my clients from using SAMBA for these kinds of applications. I recommend WinSCP3 and sftp access instead: it does allow you to set permissions.

Windows and Linux permissions and ACL sets differ greatly, and few tools translate properly. SAMBA is crippled this way simply because SMB/CIFS (upon which SAMBA is based) has no way to resolve the differences. WinSCP3 using sftp does.