Discussion:
[Samba] Possible to make samba ignore file permissions?
Adam Kennedy
2003-12-01 17:03:35 UTC
Permalink
I'm stuck between a rock and a hard place.

Is there a way to setup samba to pretty much ignore file permissions, but
allow the write list of users to modify files in shares?

The problem I have, is users need permission through samba to modify web
pages, but they need to NOT have permission when they FTP in or through shell.

--
Northern Indiana ESC
Adam Kennedy - ***@niesc.k12.in.us
Linux Specialist / Network Administrator
Phone: (574) 254-0111 x113
Toll Free: 800-326-5642
Fax: (574) 254-0148
Troy.A Johnson
2003-12-01 17:03:36 UTC
Permalink
Adam,

On the share you could make all files
mode '644' and owned by user 'special'.
Then use:
force user = special
force create mode = 644
force directory mode = 755
and maybe some other 'force' type
parameters on that share. As long as
special isn't in the writelist, things might
work out for you. You could try
something similar with 'force group'.

Good luck,

Troy

P.S. -
man smb.conf
search for "force user" or "force group"
I'm stuck between a rock and a hard place.

Is there a way to setup samba to pretty much ignore file permissions, but
allow the write list of users to modify files in shares?

The problem I have, is users need permission through samba to modify web
pages, but they need to NOT have permission when they FTP in or through
shell.

--
Northern Indiana ESC
Adam Kennedy - ***@niesc.k12.in.us
Linux Specialist / Network Administrator
Phone: (574) 254-0111 x113
Toll Free: 800-326-5642
Fax: (574) 254-0148
--
To unsubscribe from this list go to the following URL and read the
instructions: http://lists.samba.org/mailman/listinfo/samba
Gémes Géza
2003-12-01 17:03:36 UTC
Permalink
Adam Kennedy ?rta:
| I'm stuck between a rock and a hard place.
|
| Is there a way to setup samba to pretty much ignore file permissions, but
| allow the write list of users to modify files in shares?
|
| The problem I have, is users need permission through samba to modify web
| pages, but they need to NOT have permission when they FTP in or
through shell.
|
| --
| Northern Indiana ESC
| Adam Kennedy - ***@niesc.k12.in.us
| Linux Specialist / Network Administrator
| Phone: (574) 254-0111 x113
| Toll Free: 800-326-5642
| Fax: (574) 254-0148
|
Sorry for saying that but I would suggest to try a non Samba aproach:
If your webserver is apache you could try mod_dav which would allow your
DAV enabled clients (MS Office 2000/XP, Win2k,XP, Liinux, etc.) to
read/write the DAV enabled directories. As you would need to chown that
directories to the user of your webserver, or if your filesystem suports
give the rwx right by acl. In this way your users could write to the
pages only through DAV and not via shell, ftp, etc.

Good Luck!

Geza Gemes

Loading...