Re: samba newbie: setting permissions?

[Patrick Kirk <patrick@kirks.net>]

On Thu, 2002-02-21 at 17:26, Lars Jensen wrote: 
>[snip]
> 
> The other user should just be able to run (execute and read) files. 
> 
http://ie.samba.org/samba/docs/man/smb.conf.5.html#WRITELIST

The key thing is to have it shared with a list of users who have write
access.  The relevant section of the man page is above. 
> 
> How do I do this? All the sample smb.conf I have been able to dig up deals
> with the situation where all users have the same rights.
> 
> What kind of security would I use (share, user, server)?
security=user 

> How would I set the permissions?
set the appropriate create mode in the shares section 
> Do I need to change the UNIX permissions also?
The UNIX permission s cannot be less than the samba permissions. 
> 
> Another question I have is once I have set up a share, and users have
> certain rights, does this give the users the same rights in all 
> subdirectories of the share also?
Yes. 

> 
> Thanks for your help,
i
With your permission, I'm attaching an example from my own system. 
> Lars.
> 
> %%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%
> Lars Jensen, Truckee Meadows Community College, Reno NV 89512-3999. 
> Tel: 775.673.7113 E-mail: jensen@scsr.nevada.edu
> 
> 
> -- 
> To UNSUBSCRIBE, email to debian-user-request@lists.debian.org 
> with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org

[global]
	workgroup = KIRKS.NET
	netbios name = ENTERPRISE
	server string = %h server (Samba %v) # Not very difficult 
	encrypt passwords = Yes
	smb passwd file = /etc/samba/sambapasswd	
	syslog = 0
	max log size = 1000
	log file = /var/log/samba/%m.log
	log level = 2
	socket options = IPTOS_LOWDELAY TCP_NODELAY SO_SNDBUF=4096 SO_RCVBUF=4096
   	name resolve order = host lmhosts wins bcast
   	dns proxy = yes
	invalid users = root
	interfaces = eth0 192.168.0.0/255.255.255.0 127.0.0.1/24
	bind interfaces only = yes
	guest account = patrick
	map to guest = bad password
   	printing = cups
   	load printers = yes

[patrick]
	comment = Patrick Home directory
	path = /home/patrick
        read only = No
        create mask = 0644
        directory mask = 0775
        browseable = Yes
	guest ok = no

[data]
	comment = Data Files and Backups
	path = /home/data
	read only = No
	create mask = 0644
	directory mask = 0775
	browseable = Yes
        guest ok = yes

[system]
	comment = System and Installation Files
	path = /home/system
	read only = No
	create mask = 0644
	directory mask = 0775
	browseable = Yes
        guest ok = yes

[www]
	comment = Web Pages
        path = /home/www
        read only = No
        create mask = 0644
        directory mask = 0775
        browseable = Yes
	guest ok = Yes
	write list = ayser

[Printer]
    	comment = HP 870 Cxi
	print command = /usr/bin/lp %s    	
	available = yes
	directory = /tmp
    	printable = yes
    	public = yes
    	writable = yes
    	create mode = 0666
    	browseable = yes
    	guest ok = yes
    	guest account = patrick