Samba upload folder won't open with 0766

dezza · 03-18-2005, 06:33 PM

I've recently reinstalled my server with Debian. When I got finished configuring Samba I realized that I couldn't reach my upload folder. If I set "create mode" to "0777" I can open it and upload just fine, but when I have my public set to 0744 (doesn't have execute too) I would like to know why I can't do the same with upload (I mean disallow execute), cause I won't give more permissions than needed.

A question while at the Samba thing. Can I make the users upload files to my upload folder but other people can't delete it?

Code:

[global]

  workgroup = linux
  server string = Samba Server %v
  
  log file = /var/log/samba/log.%m
  max log size = 50
  
  socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
  interfaces = lo eth0
  bind interfaces only = yes
  
  hosts allow = 127.0.0.1 192.168.
  hosts deny = 0.0.0.0/0
  
  security = share
  guest account = samba
  guest ok = yes

[public]

  comment = pub
  browseable = yes
  public = yes
  create mode = 0744
  guest ok = yes
  path = /home/samba/public
  writeable = no

[upload]

  comment = upload
  browseable = yes
  public = yes
  create mode = 0766
  guest ok = yes
  path = /home/samba/upload
  writeable = yes

cylix · 03-19-2005, 11:57 AM

If you are using share access + guest, everyone who connects will be recognized as guest and that is most likely mapped to user nobody. (check your smbusers file for the proper mapping).

Obviously user nobody will need access to the file and neither the group nor owner is nobody it will observe the restrictions set on"other."

Execute bit operates differently on directories. It's actually directory listing capabilities. So, if you strip the bit, you will remove access to the directory. (essentially, as far as samba is concerned).

Now write, but not delete...

I suppose you could have the actual samba directory as 0777 and simply use create mode to strip the the write bit.

So force create mode 0754
and force directory mode 0755

I found it was a much nicer setup to go to PDC and allow individual groups to manipulate files, but I leave my public directy truely public.

The samba documentation should be able to answer most questions.