Problem with samba files ownership

[Guy Fraser]

IIRC you can set the sticky bits on the user and group.

chmod ug+s /home/data_cc

When a file is created in /home/data_cc it should now be owned by
the user and group that owns /home/data_cc.

I use this along with the mask and mode commands in the samba 
configuration file to restrict who can add directories and files 
and ensure that the created files have the same ownership and 
permissions no matter who puts them there.

Your setup seems overly liberal.

This is what I use:
---smb.conf---
# Global parameters
[global]
        workgroup = JUPITER
        netbios name = EUROPA
        server string = FreeBSD Samba Server
        unix password sync = yes
        encrypt passwords = Yes
        update encrypted = Yes
        restrict anonymous = Yes
#       ssl CA certFile = /usr/share/ssl/certs/ca-bundle.crt
        log file = /var/log/samba/log.%m.%U.%I
        max log size = 50
        debug uid = Yes
        socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
        character set = ISO8859-1
        os level = 66
        preferred master = Yes
        domain master = Yes
        wins support = Yes
        admin users = callisto
        create mask = 0644
        printing = cups

[homes]
        comment = Home Directories
        writeable = Yes
        browseable = No

[public]
        path = /var/backup/public-share/
        comment = Public file share area
        allow hosts = <list removed for privacy>
        create mask = 660
        write list = @public
        directory mask = 770

---

This is how I set the directory permissions.

---

drwxr-xr-x root wheel /var/backup/public-share

drwsrwsrwx root wheel /var/backup/public-share/Network Trash Folder
-r--r--r-- root wheel /var/backup/public-share/README.txt
drwsrwsrwx root wheel /var/backup/public-share/TheVolumeSettingsFolder
drwsr-sr-x root wheel /var/backup/public-share/Work

drwxrws--- root public /var/backup/public-share/Work/Documentation
drwxrws--- root public /var/backup/public-share/Work/Images
drwxrwx--- root wheel  /var/backup/public-share/Work/Misc
drwxrwxr-x root wheel  /var/backup/public-share/Work/Network
drwxrws--- root public /var/backup/public-share/Work/Forms
drwxrws--- root public /var/backup/public-share/Works/Products
drwxrwsr-x root public /var/backup/public-share/Work/Software
drwxr-xr-x root wheel  /var/backup/public-share/Work/Special

drwsrws--- root wheel  /var/backup/public-share/Work/Special/Secret
drwxrws-wx root wheel  /var/backup/public-share/Work/Special/moderated
drwxrwsr-x root wheel  /var/backup/public-share/Work/Special/readonly
drwxrws--- root public /var/backup/public-share/Work/Special/user-ro

---

As you can see by changing the group and permission a number of 
unique qualities can be configured. Users who belong to wheel 
have extensive privileges, users who belong to public have limited 
access, and users who don't belong to either group have very 
restricted access. Where you see an "s" instead of an "x" in a 
directories permissions it means the owner or group associated to the 
"s" is applied to any file or directory created in that directory.

This may be more complicated than you need because these directories
are also shared with netatalk. This is so that Macintosh, Windows 
and Unix/Linux machines have the same privileges depending on the 
user not the platform.

Hope this helps.

On Fri, 2005-07-01 at 11:40 +0000, mike wrote:
> I have a file-server running FC3, which is running in share mode (XP
> home machines)
> 
> I can mount shares and write files except for one major problem - all
> files are created with owner/group of nobody. This applies on bioth XP
> and FC3 machines. The same problem applies whether using smb or cifs
> 
> This causes problems especially sending mail
> 
> Any idea what is wrong?
> 
> This is my relevant smb.conf
> 
> [global]
> 	workgroup = brec
> 	wins support = yes
> 	netbios name = DATA_CC
> 	server string = breccc
> 	security = SHARE
> 	obey pam restrictions = Yes
> 	password server = None
> 	pam password change = Yes
> 	passwd program = /usr/bin/passwd %u
> 	passwd chat = *New*password* %n\n *Retype*new*password* %n\n
> *passwd:*all*authentication*tokens*updated*successfully*
> 	unix password sync = Yes
> 	log level = 3
> 	log file = /var/log/samba/%m.log
> 	max log size = 0
> 	socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
> 	name resolve order = wins lmhosts hosts bcast
> 	os level = 50
> 	preferred master = Yes
> 	domain master = Yes
> 	dns proxy = No
> 	ldap ssl = no
> 	create mask = 0777
> 	force create mode = 0777
> 	force security mode = 0777
> 	directory mask = 0777
> 	force directory mode = 0777
> 	force directory security mode = 0777
> 	guest ok = yes
> 	hosts allow = 192.168.1.4, 192.168.1.50,192.168.1.6, 127.0.0.1,
> 192.168.1.7,192.168.1.6
> 
> 	idmap uid = 16777216-33554431
> 	idmap gid = 16777216-33554431
> 	template shell = /bin/false
> 	winbind use default domain = no
> 
> [datacc]
> 	comment = shared data files for connecting communities
> 	path = /home/data_cc
> 	writeable = yes
> 	inherit permissions = Yes
> 
-- 
Guy Fraser
Network Administrator
The Internet Centre
1-888-450-6787
(780)450-6787