Networking :: Samba - Permissions Of Shared Directory And Directories Above It?
Oct 20, 2009
I am running Ubuntu 9.04, and wish to share a folder to be accessed without logging in via Windows Vista. If I set up the share through the nautilus right-click menu and enable "Guest Account", the share is inaccessible. The folder shows up, but it fails to mount. Vista says that it can see the computer, but not the shared folder.
The folder is
/home/william/shared
The only way I can get it to work is if I change the permissions of the folder /home/william to allow Others to access files.
I want to update all the machines in the network from a central repository which is on my master server and whose archive directory is shared through samba.I searched in the man page of sources.list and found that there is an option for this but can't able to implement this. Can anybody kindly tell me the way to do the same.
After what feels like weeks have tinkering around trying to get a Samba file server set up, I've finally given up! I have 4 drives and 2 groups:
1) Dev - Available to all users in both groups (normal and admin) 2) Misc - Available to users in admin group only 3) Admin - Available to users in admin group only 4) Accounts - Available to users in admin group only
Drives 1 and 2 are working fine, with the correct access rights. Drives 3 and 4 can be browsed by admins only, but no changes can be made at all - files & directories can't be renamed/moved/deleted. What is most confusing is that Drive 2 is set up exactly the same as Drives 3 and 4. The process I went through to get them working:
I've got a small issue that when a Windows user creates a new folder through Windows Explorer (from the menu or by right clicking) the new folder is only accessible to that particular user. Example: user SABKAR (member of the HR group) creates a new folder called MarcTestMenu in a shared Samba directory through Windows Explorer:
[Code]....
At this point user MORAMY cannot copy a file or open the directory MarcTestMenu. MORAMY gets a 'not accessible' error message in Windows. If I su to the Samba box and issue this command:
[Code]...
how I can get the correct default permissions when users create directories through Windows?
I would like to have a directory Code: /home/shared Where all human users have r/w permission for all files and sub-directories under this path. Can I achieve this buy just setting the permissions correctly or do I need to do something else?
I am trying to setup 2 individual FTP users. They should both have access to the same directory. They both need to be able to read/write into the directory. But, I want them not to be able to write to each other's files (e.g. delete, remove, rename, etc.).
So let's say the shared directory is: /home/ftp/shared/
UserA needs read/write access to /home/ftp/shared/. UserA should only have write access to his own files. UserB also needs read/write access to /home/ftp/shared/. UserB should only have write access to his own files.
It would be a unix box of sorts, but that is the only restriction. I could use whatever software. I am currently thinking pure-ftpd or vsftp but I am open to all ideas.
I have a fileserver running openSUSE 11.2 and samba services for file access from MS Windows based workstations. My question relates to changing default permissions on files and directories created from the windows clients.
Following are extracts of the /etc/samba/smb.conf file :
Even with the above entries, sometimes there are files and directories created by the windows clients having permission
In my samba configuration, I have a strange share. Share name: MyPrinter Shared folder: /var/spool/samba comment = lp read only = No print ok = Yes The spool directory /var/spool/samba has been shared as a printer. What will be the harm caused by it? (I don't know who shared such). And I also wanted to know the security issue due to it..
I am looking into encrypting some data on a Fedora samba server. I'm not entirely sure the best way to do this. The server is currently running Fedora 5 but it can be updated if necessary.
I would prefer if the server could be booted up and that no interaction at the server itself have to be done so that users can access their shares.
Is there a way for the data to be encrypted on the server but when the user access the share over samba that it can be accessed?
The research i have done so far seems to point towards methods more intended for a desktop setup. Such as entering passwords at bootup or when opening folders.
I am the IT Manager at a research facility. We have a fairly unique network configuration in order to support all of the different projects we have going on. We have Red Hat, Ubuntu, Windows XP/Vista/7, Windows Servers 2003, Ubuntu servers, Red Hat servers, and even a few Netgear ReadyNAS and Buffalo Terastations. Over the last few years, I have been migrating all of my users and accounts to a single ACL list, which I chose to be a Windows AD 2003 server. 95% of my users work on Windows platforms and just use ssh tunnels to develop on our linux boxes.
However, i ran in to a problem with our Linux boxes not being able to symbolic link on my Windows 2003 file shares. Of course, this is a problem with Windows not supporting symbolic links. I know 2008 does support this feature, but given the economy and the budget restraints, we cannot afford to purchase the updates we would need, so now I am moving all of my shares to a Ubuntu 10.04 server using Samba. I have joined the server to my AD domain successfully, i can login using my AD credentials, and even assign ownership and group permissions using AD users/groups.
Here is my question.
I would like to keep the AD permission schemes intact. I have several shares that contain folders that have individual permission settings. For example, I have a /shared directory that contains about 50 different folders. Some of these folders I allow my users to write data to, some just read, and others I deny access to complete groups and just allow key groups to access (for example, personnel data should only be accessed by the Administrative staff).
Is there a way to make this work?
I can assign uid and gid manually per folder in Samba, but i would like to have the possibility to add multiple users and groups with permissions to folders, which I do not believe can be done with the standard chown commands. Currently, I can see the folder permissions from my Windows box, but when I try to edit the permission settings, it defaults back to full access. So my AD permissions are not being saved.
I want to make a webserver with multiple users allowed to login through SFTP to a specific folder, www.Multiple users are added, lets say user1 and user2, and all of them belonging to the www-data group. The www directory has an owner www-data and a group www-data.
I have used chmod -R 775 on the www folder, but after I try to create a folder test through my SFTP server (using Filezilla) the group of the directory created has only r and x permissions, and I am not able to log in with the second user user2 and create a directory within www/test due to a lack of w permission to the group.
I also tried using chmod 2775 on www directory, but without luck. Can somebody explain to me, how can I make it so that a newly created directory inherits the root directory group permissions?
i am in need of linux help. iam at college and i need this back/restore script to pass this final part of an assessment. i require a backup script that will not only backup but also restore files to the relevent directories. e.g. users are instructed to store all wordprocessor files in a directory named wp. so i am needing to create a backup directory and 3 directories within that and some files within the 3 directories and then back them up ot restore them. l know i should/have to do this myself by been trying to get/understand info for the last few days and came up with zero.
I'm trying to configure a per user samba login for full access to the user's home directory.Mounting the shared directory works flawless when mounting from Windows. I can read, write, create without problems. However, when mounting from Linux the shared space is readonly.
I am trying to access a shared printer from one Ubuntu PC to another.
On the Server PC, I have the printer working, I have set it to shared, and I have set the server setting to Publish shared printers. I can see and use the printer fine from a windows PC.
On my Ubuntu Client PC, I have samba installed, including smbclient, and all other samba components I can think of. I can see other computers on my home workgroup (Windows and Ubuntu fine). I can also add a printer connected to my windows PC. However I cannot find the printer connected to the other ubuntu PC.
I see the instruction in the Samba guide saying
"Now enter your Ubuntu Samba Print Server (set up as above) IP address in the box on the left titled "smb://"."
However I do not have fixed ip addresses, so what am I supposed to enter in the box. If I enter nothing I can browse the network and can see the host computer, but the printer is not displayed. I can also see the printer connected to the windows PC. How do I 'see' the Ubuntu printer?
I have a Linux Box running Fedora 13, it has Samba installed, and I have configured it, I also have a Windoze 7 PC, I want to be able to access the Windoze PC's files from my Linux Box, and vice versa, but when I try to open the Windoze PC in the network on my Linux Box, it asks for my Username and Password, I enter them, the box goes away then pops back up asking for them again... and on the Windoze PC, I find my Linux on the network, open it, it asks for my username and password, I enter them, and it lets me in, but then when I try opening my shared folder, it gives me: "You do not have permission to access \LINUX Shared Folder. Contact your network administrator to request access".
I'm trying to set up a Samba printer in Debian linux. The printer is being shared by a computer running windows vista. Some of the information I've got in the process. Sharing seems to be working, the printer seems to be detected and authenticating (I've tried invalid values and the utility I'm using to set things up says it cannot verify when I use invalid values, but with things as they are it claims everything checks out).
When I go into CUPS it says it detects the printer and everything is working. However, printing a test page causes the job to be immediately complete and nothing happens. It seems that the job is getting lost somewhere in the process. Could it be a firewall issue? I feel like the right ports must be unblocked since I can query the computer and verify the printer, etc. I have a laptop with vista which I installed a printer on and was able to print to that computer just fine. So it doesn't seem to be a Vista thing.
Code: Domain=[OFFICECOMPUTER] OS=[Windows Vista (TM) Home Premium 6000] Server=[Windows Vista (TM) Home Premium 6.0] Sharename Type Comment --------- ---- ------- ADMIN$ Disk Remote Admin C$ Disk Default share D$ Disk Default share HP Deskjet D1500 series Printer HP Deskjet D1500 series IPC$ IPC Remote IPC print$ Disk Printer Drivers session request to 192.168.0.10 failed (Called name not present) session request to 192 failed (Called name not present) session request to *SMBSERVER failed (Called name not present) NetBIOS over TCP disabled -- no workgroup available
I have created a shared folder via nautilus. I can not access it, because it asks me for user name and password again and again. I'm sure both username and password are exactly right. But I can not access the folder. Only when I check "Allow guest user access" it will allow me to access my data, Which is not secure enough for me.
I have a shared directory on another machine but I can't get it to mount as a samba share. The permission denied doesn't say where/which permission is denied. Is it on the remote on on the local machine? The remote has sharing enabled for the shareddocs directory and after I have mkdir'ed the local mount point I open it's permissions too. The verbose response from mount.cfis looks like this:
mount.cifs kernel mount options: unc=//192.168.1.102shareddocs,domain=WORKGROUP,ver=1,rw ,username=clive,,,,,,,,,,,ip=192.168.1.102,pass=** ****** mount error(13): Permission denied Refer to the mount.cifs( manual page (e.g. man mount.cifs)
I currently have samba set up to share to XBMC. One of my shares contains many folders. But the permissions aren't given to access those folder only the container folder.
I can browse the folders recursively with a windows Laptop
When I create a new folder on my ubuntu machine and share it with my windows 7 machine using 'net usershare add <dir> <path>', I can't get write perms in Win 7. It keeps giving me a "You need permission to perform this action'. I've chmod the folder to 777 but still no luck.
The funny thing is, it was all working fine until I tried to add a new usershare yesterday (Can't think what I've changed). I use this sharing method to share all of my development /var/www/ folders so I can work on them from my win machine.
I have had a few problems with my samba smb.conf, and it nuked and rebuilt yesterday. I'm fairly new to the Linux game, and this permissions problem has me baffled.
If I want to share a directory called /home/me, would I go to my /etc/exports file and share /home/me/* or would I share /home/me ? I am unsure of how to type this into the file.
I have created a shared folder in my ubuntu. And checked allow guest user access. I can access this folder with my other ubuntu computer connected trough LAN.The question is if anyone have my IP address can he/she access to my shared folder?Are samba shared folders shared over internet too? If so, This will be a very dangerous security problem.
I successfully installed Samba, but have problem with access to any shared folder on my secondary drive. If I try access secondary drive with admin user, everything is fine. If with another account try to access via samba to shared folder on partition with Ubuntu, everything is fine again. Every folder has set privileges to read&write to everyone, so shouldn't be problem here.
I have found that there are certain things on the web that I need to print, that simply refuse to work under linux. I have a samba printer server on one of my Slackware boxes and an M$ XP vm under Vbox that can access the server and see the printer. The only problem that I have is that it expects to download a driver from the server which isn't available and the HP driver installer won't install if it doesn't detect the printer. Short of relocating the printer to install the driver, does anyone know how to get the driver installed on the XP host? This is so much easier with my Slack boxes and CUPS!
I'm setting up a network between 2 pc's where the one should act like "file server" and a normal pc to surf on internet.called ORLA-DESKTOP and the other pc is called OLGA-DESKTOP a pc connecting to the server and automounting the shared folder to the desktop Both pc's run ubuntu 10.04 Lucid Lynx The shared folder is located on the server in /home/orla/svenson
ORLA-DESKTOP have 2 users "olga" and "orla" in a group called "svenson" OLGA-DESKTOP have 1 registered user "olga" also in group called "svenson"
users on ORLA-DESKTOP can read/write/append and so on and fully manage everything in the shared folder.But on OLGA-DESKTOP the user can make a file on the pc and then drag'n'drop the file the the shared folder, and can also delete files in the shared folder. but cannot create a file directly into the folder like on ORLA-DESKTOP I have 3 configuration files made. 2 for automounting, Located on OLGA-DESKTOP 1 for samba server configurations located on the server ORLA-DESKTOP
The first one is /etc/fstab
Code:
# /etc/fstab: static file system information. # # Use 'blkid -o value -s UUID' to print the universally unique identifier # for a device; this may be used with UUID= as a more robust way to name # devices that works even if disks are added and removed. See fstab(5).
[code]....
To sum it all up the real problem is that OLGA-DESKTOP can't append to files in the shared folder. but users on the server have no troubles doing it..
what I am trying achieve is read/write access for my MS domain account and read-only access for everyone else. In smb.conf I have this:
Code:
map to guest = bad user usershare allow guests = yes username map = /etc/samba/smbusers
[code].....
I can access this fine with my MS domain account, what I can't work out is how to give others read-only access to the same share. I guess I could create a second share for the same folder with a different name and permissions, but that seems a bit clunky and I'd have to remember to pass on a different name to the one I am using. I also tried using the Nautilus right-click "Sharing options" and then setting the folder permissions. This works fine for giving others read-only access, but loses capitalisation of the share name and doesn't seem to recognise my MS domain account as being valid.
First let me say that Lubuntu is a lightweight version of Ubuntu, so there is not much point in loading it up with unnecessary packages. If you just want to share printers on a Linux network, you don't need Samba. And if you just want a way that users can "push" files to others on a network, use Giver (+ Avahi) as this is a better option. Especially as it sorts out file permissions for you.
To enable file sharing on a Lubuntu 10.10 machine, go to Preferences > Synaptic Package Manager and add the following:- * samba * system-config-samba * gvfs-bin * gvfs-backends ...accepting any dependancies, 11 packages in total.
I suggest you re-boot now. As an initial test, go to file manager (pcmanfm) and enter:- smb://localhost You should see the local print$ folder listed.
To access folder shares remotely * open file manager (pcmanfm) * enter the IP address or computer name of the machine you wish to access e.g. smb://192.168.0.99 or smb://print-server
To share a folder:- Go to: Preferences > Samba (enter password when requested) In the Samba Configuration screen:- * File > Add Share * use Browse... to select folder to be shared * Tick "Visible" and (if required} "Writable" * In the "Access" select "Allow access to everyone" Set the Linux permissions:- * locate the folder to share in file manager * right click on the folder and select Properties > Permissions * set the required permissions, e.g. Other: Read & Write (to allow anyone full access)
