Server :: SAMBA To Share Network HDD With Permissions To Clients?
Jan 12, 2011
In my work I want to build up a Linux based network, where windows and linux clients are going to share a Thecus network drive.Each client will have specific permissions for accessing the samba shares. I have installed Ubuntu SRV 10.4 with gui and webmin.
I have a fileserver running openSUSE 11.2 and samba services for file access from MS Windows based workstations. My question relates to changing default permissions on files and directories created from the windows clients.
Following are extracts of the /etc/samba/smb.conf file :
Even with the above entries, sometimes there are files and directories created by the windows clients having permission
I have set up a computer to use as a file server using Samba. I attached a 1TB hard disk to it and had the system to mount it automatically. I have 4 user accounts which will be able to access this network share. An administrator account is called "server". I'll call them user1, user2 user4. This is the folder structure:
+-/mnt/FILES +-BACKUP backup files (accessible only to "server" user) +-MUSIC music1.mp3 (read only files for all users) music2.mp3
I don't know which groups I should create. I'm having a hard time setting file/folder permissions. And I wanted to know how to set Samba so that it won't ask for a password when accessing public/group files, but asks for it when accessing private user files.
I have the problems with transfer speed between samba and Windows XP clients.
Samba server configuration: Quad Core 6600 CPU. 4 Gb RAM OpenSUSE 11.2 with kernel "220.127.116.11-0.1-desktop" Samba - samba-3.5.1-1.1.i586 Test: 4 GB File copying. One file.
Transfer speed from Samba Server to Windows 7 and XP clients: (Windows clients copy file from Server share -> to local drive) From Server to Windows 7 client 1: 85-90 Mb/sec From Server to Windows 7 client 2: 90-100 Mb/sec From Server to XP1 client 3 75-100 Mb/sec
Transfer speed from Windows 7 and XP clients TO Samba Server: (client copy file from local drive -> to server Share) From Server to Windows 7 client 1: 12-20 Mb/sec From Server to Windows 7 client 2: 30-35 Mb/sec From Server to Windows XP client 1 20-27 Mb/sec
(Copying file from Windows local drive to Windows remote share) From Window 7 client 1 TO Windows XP client 1 40-50 Mb/sec From Window 7 client 2 TO Windows XP client 1 50-60 Mb/sec
Copying file from Windows 7 client 2 share -> TO Windows XP client 1 show me 100-120 Mb/sec speed permanent. Copying file from Linux hosts to NFS server is stable 50-90 Mb/sec bidirectional.
This part of my smb.conf file Code: # version at /usr/share/doc/packages/samba/examples/smb.conf.SUSE if the # samba-doc package is installed. # Date: 2009-10-27 [global] log level = 1 debug level = 0 max log size = 50 .....
I have very slow write speed when copying file from Windows clients to Samba Share. Samba speed is slower than Windows native clients connections ?
I feel ashamed for even asking this, since it seems like there's about 3 samba questions here every day. However after an hour of searching, I keep finding strange variants that aren't what I need.
My Goal: Create a single file share on an Ubuntu Server - share it via samba to Windows clients that are on a domain with active directory. It sure would be nice if AD authentication would work - so users don't have to type in a linux user/passsword each time they want to access the share.
In my adventures, I've found the following items (which may overlap)
1. Joining the server to a Windows Domain
2. Turning the server into a Windows Domain Controller
3. Authentication with LDAP (still not quite sure how/what this would do)
4. Stuff with Kerberos
5. Lots of people bickering about Samba 3/4 & how it's impossible to make Samba a PDC.
I'm not sure if I need to make the ubuntu server a domain controller or not...all I want to do is create a file share and share it on the domain...I don't need to make the ubuntu server a domain controller for that, right? Maybe just a member? Maybe nothing at all?
I guess if I want to authenticate stuff correctly (or forward authentication requests? Not sure), I probably need to join the ubuntu server to the domain...I think.
But let's say I do join it to the domain...then how to I create a file share that is authenticated via active directory rather than a local ubuntu server account? I see a dozen guides on joining the server to the domain, but nobody ever mentions sharing the folder over the domain.
The lines are also blurred between joining Ubuntu to the domain and making it a domain controller. What should I keep an eye out to avoid in these tutorials?
I get lost between the Kerberos/LDAP/Samba/WinBind etc...and I have a feeling I don't need all of these for something this simple.
I'm trying to setup a Samba network share with a Fedora Directory Server backend. This will be used primarily for Windows users to authenticate before accessing the share. I am using Fedora Core 10 and have all of the latest updates installed. When I try to connect from a Windows machine, I am prompted for a username and password. I enter the username and password of the account I created in Fedora Directory Server in OU=People. The credentials are rejected. At the same time in the log file I see this:
[2009/02/24 16:50:16, 3] auth/auth_sam.c:check_sam_security(282) check_sam_security: Couldn't find user 'Administrator' in passdb. [2009/02/24 16:50:16, 2] auth/auth.c:check_ntlm_password(318) check_ntlm_password: Authentication for user [Administrator] -> [Administrator] FAILED with error NT_STATUS_NO_SUCH_USER
Administrator is the user I created in Fedora Directory Server. If I perform an ldapsearch it will find the user as uid: Administrator so I know it is able to be looked up in FDS. But I'm guessing that's not the problem.
i have an old desktop that i have decided to use as a central point for localhost/website files. I have 2 laptops, a ubuntu and vista, and i want them both to be able to see the public_html folder on my desktop, and be able to create/update folders and files.
I have set up the samba sharing and that's working fine, but when i create folders using my laptop, they are not writeable to the desktop or other laptop because my laptop is the creator. Is there a way that I can set it so that whenever folders/files are created from either laptop, they have full permissions?
When I create a new folder on my ubuntu machine and share it with my windows 7 machine using 'net usershare add <dir> <path>', I can't get write perms in Win 7. It keeps giving me a "You need permission to perform this action'. I've chmod the folder to 777 but still no luck.
The funny thing is, it was all working fine until I tried to add a new usershare yesterday (Can't think what I've changed). I use this sharing method to share all of my development /var/www/ folders so I can work on them from my win machine.
I have had a few problems with my samba smb.conf, and it nuked and rebuilt yesterday. I'm fairly new to the Linux game, and this permissions problem has me baffled.
I am trying to set up a Samba share on one of my machines where I am the owner and a special group manages permissions for read-only access ( me:specialgroup ). If I log into the share as me, there is no problem (I have read/write privs as per usual). However, I am not able to log into the share using any of the group members (there is only one currently). That user is not able to access the share (failed to mount).
The folder (which is the share) is owned by me:specialgroup and the permissions have been forced down the folder. Samba is set to Share this folder with no guest or others write access.
How can I set permissions for users within the share? Example: I have a share called Programming and some user can create folders within it most others can not, can read the documents. How do I set permissions?
what I am trying achieve is read/write access for my MS domain account and read-only access for everyone else. In smb.conf I have this:
map to guest = bad user usershare allow guests = yes username map = /etc/samba/smbusers
I can access this fine with my MS domain account, what I can't work out is how to give others read-only access to the same share. I guess I could create a second share for the same folder with a different name and permissions, but that seems a bit clunky and I'd have to remember to pass on a different name to the one I am using. I also tried using the Nautilus right-click "Sharing options" and then setting the folder permissions. This works fine for giving others read-only access, but loses capitalisation of the share name and doesn't seem to recognise my MS domain account as being valid.
I'm trying to set up my samba server so that all the shares are visible to everybody but that some shares can only be accessed by certain users. I have a folder Video that everybody can access without a username or password. I now want to create a share that only I can access called webserver.
This is my samba.conf Code: [global] dns proxy = No netbios name = DATABOX guest account = nobody restrict anonymous = no browseable = yes server string = server workgroup = WORKGROUP public = yes security = share
[Video] Writeable = yes Path = /media/data/Video Public = yes
[webserver] Writeable = yes Public = no User = malteser Path = /media/data/Webserver
Windows does not let me enter a username or password. I'm pretty sure this used to work.
I have a samba shared folder in my flash disk. Yesterday I installed ubuntu 11.04 and now sharing is not working any more. I do the usual procedure (that worked so far), I right click my folder > sharing options and tick "share this folder" as well as "Allow others to create and delete files in this folder" but I dont get the usual messages asking to add permissions automatically.When I try to mount my folder in another pc with linux, I get permission denied and that the folder is only readable and in another, windows cannot find the network path to my folder.My folder has about 10.000 files. asking to add permissions automaticallyI created another folder on the same flash and when I create share I get the message asking to add permissions automatically but it is not visible either. I even cant see my folder in "my places" > network, so it is not a matter of the mounting command
I have set up a Samba share via my CentOS 5 server (the samba share is actually a mounted filesystem, not local machine space). I have been successful in adding permissions for my windows users within the smb.conf, but have an additional need that I cannot figure out. I would like for my Windows administrators to be able to create folders and assign permissions from their machines (and their Windows GUI). Ultimately I need the folders on the Samba share to behave correctly when Windows group permissions are applied by these administrators.
When the folders are created, the "Everyone" identity cannot be deleted and sometimes "Creator Owner" or "Creater Group" show up. I have seen several threads start down this path, but haven't seen a definite answer (I may have just missed it!).
I have a couple of user accounts where each member belongs to a group i have created: Each user access the share using their own user account credentials. How can I configure Samba in a way so that each modification done on the share gets the owner of the user and my group instead of the user and the users own group? I would also like the access rights to be 770 to each modification.
In other words, today each modification by "userA" get the owner "userA.userA" and I would like it to be "userA.MyGroup" with "rwxrwx---" permissions.
i have an Opensuse 10.3 server running samba and i just wanted to know how i could attach ms dos clients to samba if thats possible,i tried downloading TCP/IP software for dos but i could not find anything on the net that works.
My samba-shares are mounted in fstab. Everything works fine except for one small issue: when copying files from the local PC to the share the files are copied but the timestamps and permissions of the files are not. Instead a message "operation not permitted" appears. 'root' on the client can copy files WITH timestamp etc, a normal user cannot.
Below the line in fstab on the client and smb.conf on the server.
I've got my Samba shares up and running. I can stream files from the server, I can create files on the server, and I can copy files from the server.
Running a Windows program (from a Windows box) directly from the Samba server, however, is turning into a nightmare. I'm getting Access is Denied errors from the Windows box, yet I can copy/create/etc from the entire directory with no problems.
Are there any special permissions I need to run EXE files from a Windows box, located on a Samba share? I've already chmod'd everything to 777, and I show full access when ls -Z is used.
Learning samba. The samba on a server and the samba on clients arent the same conf. OK; but it pam/nsswitch is set to compat only, can the /etc/passwd be automatically updated from the server to the clients?
I just installed SLES 11.2 X86_64 and have SMB Server started after adding 2 lines to smb.conf:1. NTMLv2 = Yes2. name resolve order = wins bcast host lmhostsThere are also 02 new DWORD lines I add to Win7 clientsHKEY_LOCAL_MACHINESystemCurrentControlSetServicesLanManWorkstationParameters 1.DomainCompatibilityMode = 12. DNSNameResolutionRequired = 0Of course a few number of modifications I made from Yast to enable SMB Server and Client, and bcast as well. Now I am able to join my Linux Domain without error at first reboot from win7, but it seems spending a long time about 30 secs for auth. even I test on a very fast network system, all with core quad 3GHZ CPU and 4GB DDR2I would like to mention here that before I made the above changes I did a lot of different modifications onto my win7 clients (I found many suggestions online), and all seems mess up and never work; Then I had to reinstall win7 from scratch and just add 02 lines as above, but it works.
I am having FC11 with an HP prineter attached my firewall is disabled I trying to print from my laptops after I have setup samba and shared the printer , It was working fine when I was installing FC4 and FC5 I am not sure what is missing when I tried to print from the XP box I got "Test pge failed to print" error what I have really noticed in the xp and vista box is that when I go to the printer settings inside control panel , pressing the ports tab and checking to what port I am printing I see that the port "\samba-serverprinter" is not created there this is the log
I use OpenSuse 11.3 and I successfully built a samba/openldap server. However the raoming profiles were not working so I removed the roaming profile part of the samba and the openldap using ldap account manager. I also rejoined a couple of the computers back to the domain successfully (it was not an instaneous join, it took a good minute or 2 to join each pc). Now I cannot cannot login to any of these computers with the domain credentials. I can share using the UNC path no problem and this was working find about 1 week ago.
On 1 of the computers Iw as able to finally get a log file saying this:
I want to replace Windows AD with SAMBA I want to know what policies restrictions I can get in SAMBA as compared to windows AD - whether it is possible to restrict clients not to change IP, access cdrom or control panel.
Actually i have to make one share folder on linux in such way that user should only read the documents from shared folder and they should not take prints of that folder.could any one telme what server i should use.?samba or nfs?how can i stop client users to stop taking prints from that shared folder.
On all of my xp clients no matter what the username is is I am continously getting the error saying that the profile cannot be found. I just built this domain recently and since day 1 the roaming profiles have not worked.
In the Windows network, there are 2 or more shares as follows:
I can access both shares in nautilus e.g. "smb://bla.bla.company.com/share $". The shares are mounted then in "home/user/.gvfs/". ok.
In one of shares, is a file-based repo, which I can access easily with svn.
Unfortunately when I try to checkout any normal folder from a share (as in MS$ with Tortoise), I fail...
What's more in the file-based repo, external references exist to other shares in the network, the name is as "file:///X:/folder/file.txt". SVN gives error messages about such references and does not access files (where "X:/" is also mounted, but as a "test$ to smb://bla.bla.company.com/test$" in "home/user/.gvfs/ ").
My questions: - what is the best solution to mount shares, so I can access all the SVN repos? - How can I access normal files and folders from a share with svn? - How can the problem with external file references in a file-based SVN repo can be solved? without to checkout/commit files "manually"... - Some checkouted scripts (Perl, etc.) use libs from shares: "Use lib qw(r:/tools/perl/lib/). how to get around this as well? - How can I change mount-names: "test$ on smb://bla.bla.company.com/test$" to something like "share-test$? - How can I change the mount location? in "home/user/SAMBA/" instead of "/home/user/.gvfs/"..
I had tried to use "fuse-smb": installed, created config, but when I run "fusesmb /home/user/SHARES/", i get an error message: smb.conf is missing.. Where can I get this config?
And one last question: Can someone recommend me a svn-gui? i have tried tried rabbitcvs, esvn and some others .. but all either do not work or crash.
I'm not sure, but maybe I can use svn and tortoise in wine, and checkout/commit the necessary files from/to "home/user/project/"? there raises the questions whether it is possible to install tortoise in wine and how to mount the shares on the wine? How to manage the hard-coded lib-names in some scripts...
have a server here running opensuse 11.3 that I need to access via network using samba. Samba is working so far and I can ping the serve and browse the shares from windows (WinXP) computers; but only via the IP.Now I've read up on samba on this forum and other sources, like the official samba documentation and compared my smb.conf with an older one on another server which works (and even copied this one over to the new one) - to no avail.I seem to be missing something and I just can't find it.Since the problem is probably not in the smb.conf (previously working one doesn't work on new server) - where else could I have screwed up?
On our fileserver, we primary use samba to share files to our users, but a few users have to use ssh/sftp to access the file server. In samba we have the shares setup so that permissions are forced to be the correct group owner and group read/write. The problem is those few who access via ssh/sftp. There files do not have the correct permissions. These people are not the most computer savvy, I'm dealing with biologist here. Is there some way to fix this or will I just have to setup a cron job to go through and set permissions periodically?