[NTLUG:Discuss] force group ownership

Paul Ingendorf pauldy at wantek.net
Mon Feb 4 19:01:43 CST 2002


Your best bet is to enable swat and work through this.

Edit /etc/xinit.d/swat

There are two lines in here you would change.  

1
only_from = localhost
Just comment this out like so
#only_from = localhost

2
disable = yes
needs to be set to no.
afterwards run the following.
/etc/init.d/xinetd restart

Now open your favorite web browser to http://<your ip to server here>:901/

Enter the username root and password is your root password.  Now you have a nice graphical way to edit the smb.conf file.  With this method you will also have access to the extensive online help features that will help you customize this to your needs.  The things that we don't know that could cause issue with your setup are as follows:

How are the users authenticating?
What mode is the server in?
How are the users assigned to the planning group?
How many users actually have accounts on t his machine?

I can see also that you are missing something that could potentially cause issues.

It is ok for the guest account to = nobody but then you need to either allow guest access to the share with 
guest ok = yes
or add the user guest or nobody to the valid users and read list as well as putting the planning users into the read write list.
Like so

[public]
   volume = Planning
   comment = Product Data
   path = /home/planning
   public = yes
   guest account = nobody
   guest ok = yes
   writable = no
   write list = @planning
   read list = nobody guest # I'm not sure which counts here put both and be safe
   force group = planning
   create mask = 0664 #changed this because do you really want the execute bit set.
   directory mask = 0775
   security mask = 0775

Now the question here is will this allow you to write to files in the dir as guest if your forcing the group.  The answer to that is you will probably have to experiment with it to make sure you have what you need.  Let me know if this doesn't work I don't currently have the facilities to check it out but it should work like you were asking for.  I do suggest that you get familiar with the swat interface though this will save you tons of time if you want to change things in the future.


-----Original Message-----
From: discuss-admin at ntlug.org [mailto:discuss-admin at ntlug.org]On Behalf
Of Bobby Wrenn
Sent: Monday, February 04, 2002 12:49 PM
To: discuss at ntlug.org
Subject: Re: [NTLUG:Discuss] force group ownership


I tried having a user connect at user ftp which does exist and as
"guest" which does not exist. both requested a password and would not
allow the connection.

Do I need to put the user in /etc/samba/smbuser?

Current smbuser file contains:

nobody = guest pcguest smbguest

I reset guest = nobody

_______________________________________________
http://www.ntlug.org/mailman/listinfo/discuss





More information about the Discuss mailing list