Server :: Setting Up Samba On Ubuntu - Permissions?
May 20, 2010
I'm attempting to set up a Samba share on my lab's small server (Ubuntu Server Edition, 10.04). It looked easy enough, but the share that I set up didn't allow anyone to actually put anything on it: no uploading stuff, etc. (You can still upload files via the command line, so I implemented the unix extensions = no fix). The share is writeable and visible, and anyone can access it (according to the Samba GUI). According to the smb.conf:
The other Windows machines in the lab see the new server and its share automatically, although they can't make changes to it, like create a new folder in the share. Most of my lab uses Snow Leopard (OS X 10.6), and a few others use Windows. I can connect to the server using my MacBook either through the terminal or Finder -> Go -> Connect to server -> smb://blah.someplace.edu without problems.
I can do pretty much anything via the command line, but not through the Finder! If I want to create a new folder, it gives me an old-school error message (stupid blue face): "The operation can't be competed because you don't have the necessary permission." If I want to drag-and-drop a file from my desktop to the Share folder, I get a pop-up window (lock + blue face): "Type your password to allow Finder to make changes." If I do, then I get another pop-up: "One or more items can't be copied to "Share" because you don't have permission to read them. Do you want to copy the items you are allowed to read?"
First let me say that Lubuntu is a lightweight version of Ubuntu, so there is not much point in loading it up with unnecessary packages. If you just want to share printers on a Linux network, you don't need Samba. And if you just want a way that users can "push" files to others on a network, use Giver (+ Avahi) as this is a better option. Especially as it sorts out file permissions for you.
To enable file sharing on a Lubuntu 10.10 machine, go to Preferences > Synaptic Package Manager and add the following:- * samba * system-config-samba * gvfs-bin * gvfs-backends ...accepting any dependancies, 11 packages in total.
I suggest you re-boot now. As an initial test, go to file manager (pcmanfm) and enter:- smb://localhost You should see the local print$ folder listed.
To access folder shares remotely * open file manager (pcmanfm) * enter the IP address or computer name of the machine you wish to access e.g. smb://192.168.0.99 or smb://print-server
To share a folder:- Go to: Preferences > Samba (enter password when requested) In the Samba Configuration screen:- * File > Add Share * use Browse... to select folder to be shared * Tick "Visible" and (if required} "Writable" * In the "Access" select "Allow access to everyone" Set the Linux permissions:- * locate the folder to share in file manager * right click on the folder and select Properties > Permissions * set the required permissions, e.g. Other: Read & Write (to allow anyone full access)
I am experiencing strange difficulties with Samba. The permissions aren't set correctly, when creating a file or a folder on the mounted samba share.
My smb.conf looks as follows: Code: [shareOffice] path = /home/shareOffice writable = yes browseable = yes create mode = 0777 directory mask = 0777 force create mode = 0777 force directory mode = 0777
Now if I create a regular file on the folder: Code: touch testFile; ls -l The permissions turn out to be: Code: -rwxr-xrwx 1 simon share 0 2011-06-28 21:42 testFile
Why the w bit on the group is missing? If I play around with the create mode / force create mode, I get every other possible permission output --- except the write access for group members.
This is a interesting confusing problem.Ok I have group with 3 users.I have a folder in /home with owner as root, and group that has read/write permissions.However if a user opens up a file and saves it via samba, the owner changes to the user, and the group members only have read permissions on the file.
I have a Samba server running on a box where I login to admin as user: FRED The Samba users are SUE JOE - Read only for specified paths (media playback access only user) SUE can read/write to any directory under the share: Media
So all that is working fine. As long as I do file operations remotely as SUE everything works remotely. How can I make it to where everything SUE does over Samba FRED automatically has permissions to edit when logged in locally (or SSH)? Also, remember, Joe needs to be able to read where specified.
I have a file server setup with samba integrated with swat management. The server isn't a domain controller. The file server is working well with the shares all working correctly except for one problem. I would like the users be able to manage the folder permissions from a windows PC. This can be done from a login as the root user if need be but, the key is that the system be manageable from the windows PC.
I have followed the instructions of multiple how to's but still get and error that access is denied when trying to apply permissions. I am able to search the server for users to add and the names resolve. What are the configurations that I should be looking at where the NT permissions in samba are configured. nt acl support is set to yes and any other acl settings used produce the same result.
So I am trying to setup a Samba server to share out our SAN environment to our windows clients. This is my first time playing with samba, so running into quite a few obsticals along the way.
Environment: SLES 10.3 Samba 3.0x (Original RPMs in distro)
My end goal is to allow anyone in our Active Directory environment to access the shared folders from Samba and map the File permissions to 755 and Directory to 777.First I tried just using Kerberos client and winbind and added it to the AD domain. This worked, but mapped the wrong UIDs (the standard 10000 series). Also the permissions were mapped all wrong.Then I had the great idea to use the Server for NIS on windows 2008, it makes the PDC run a NIS domain that is conjoined to AD. This really didnt work at all. I loaded the AD schema with the correct UIDs and all that good stuff, but didnt seem to take.
So how would any of you approach this?Should I keep trying the NIS config, or use Kerb and winbind? Can a box be part of a NIS domain and AD at the same time?
I have set up a computer to use as a file server using Samba. I attached a 1TB hard disk to it and had the system to mount it automatically. I have 4 user accounts which will be able to access this network share. An administrator account is called "server". I'll call them user1, user2 user4. This is the folder structure:
+-/mnt/FILES +-BACKUP backup files (accessible only to "server" user) +-MUSIC music1.mp3 (read only files for all users) music2.mp3
[Code]...
I don't know which groups I should create. I'm having a hard time setting file/folder permissions. And I wanted to know how to set Samba so that it won't ask for a password when accessing public/group files, but asks for it when accessing private user files.
I have two NFS mounted dirs that the users want specific permissions set upon creation of dirs/files, independent from any other machine on the network.
I am currently trying to replace my Windows Server with a CentOS 5.3 box running nfsd for file serving. I have it all up and running however I cant see anyway of securing user access rights to the shares as all you need to access them is just clone the User ID of a user authorized to access the share of any Linux system which seems a bit insecure to me? I was wondering if there was any advice on securing access to server shares in CentOS.
The current situation:there is a samba PDC with ~50 XP workstations, all working fine for the last two years.The goal:Cycle older hardware back into production by installing ubuntu on them. These workstations must authenticate against the domain, and must automatically mount a public, a user, and a department share that contains folders with various group permissions.The added challenge:Since the office where this lan is located is closed for the next week or so, the ubuntu workstation I am testing with is connecting via a site-to-site VPN. This is soon to be mandated as a requirement anyway, so if not done now it will have to be done later anyway. I mention this since it *may* be something that could be interfering with the success of my mission, however, given what does work, I do not think this is my culprit.
What does work:Thanks to winbind, I can log into the ubuntu workstation via gdm with my domain credentials, and thanks to pam_mount my shares do mount correctly. I take this to mean my pam conf files are correct, along with nsswitch.conf.wbinfo -p, -a, -t, and -u work on the workstation. getent passwd returns DOMusers.listwbinfo -p, -t, -Y, -S, -G, -n, -s, etc, all work on the PDC. getent passwd returns a list from /etc/passwd and getent group returns a list from /etc/group.A remotely controlled windows workstation on the lan works as expected.
It appears that winbind is not able to parse the group permissions at all, not for the user, nor for the folders.The hope:is that someone can say that this problem of group permissions not being recognized has a typical cause (though several hours/days of google searching has revealed no such thing). However, I can provide a great deal of supporting information, as I have gone through documentation and testing extensively (though not extensively enough, apparently). For my own sanity, I put most things I tried into a text document so I could review it and look for errors in judgment, that doc ended up being some 1500 lines long, and doesn't include conf files. Rather than flooding this post, if someone is up for reviewing it, I can definitely make it and further supporting info available...
In my work I want to build up a Linux based network, where windows and linux clients are going to share a Thecus network drive.Each client will have specific permissions for accessing the samba shares. I have installed Ubuntu SRV 10.4 with gui and webmin.
I'm trying to set up an old computer that was donated to my by an aunt to hold my external hard drives and use it as a file server so i can use them from anywhere within my house. However I can not seem to get the samba server to broadcast/be seen by my ubuntu installation, nor my windows installation.
I've read the manual, to an extent, but I feel as if I am missing something. All I want is to have it to where I can just type in \server and bring up my files to access without having to worry about passwords.
After what feels like weeks have tinkering around trying to get a Samba file server set up, I've finally given up! I have 4 drives and 2 groups:
1) Dev - Available to all users in both groups (normal and admin) 2) Misc - Available to users in admin group only 3) Admin - Available to users in admin group only 4) Accounts - Available to users in admin group only
Drives 1 and 2 are working fine, with the correct access rights. Drives 3 and 4 can be browsed by admins only, but no changes can be made at all - files & directories can't be renamed/moved/deleted. What is most confusing is that Drive 2 is set up exactly the same as Drives 3 and 4. The process I went through to get them working:
i'm setting up a common public folder on a file server, but I seem to be getting some permission differently to what I expected. The folder is /temp which is a separate drive. The fstab entry is:
I can't seem to connect to it when using windows 7. Both are in the same workgroup (W0RKGR0UP) and I have set DHCP address for the ubuntu box. Is there any other thing that I would still need to edit ? My router address is 192.168.0.1 and the fixed ip for ubuntu box is 192.168.0.103.
I've got a situation where I would normally use NFS, but cannot. So in it's place I need to use a samba share (even though it's linux -> linux). I need it completely open and world writeable as if I had done an rw in an NFS export. I thought I had it as when logged in as a user I can edit delete etc. however the apache user seems to be struggling with creating files. Here's my smb.conf as it stands.
[global] workgroup = WGRP server string = Samba Server Version %v security = user passdb backend = tdbsam unix extensions = no
I'm trying to load a HP Proliant w/ Fedora 11 and setting up as a WFS using Samba. However, I'm a bit confused on how to do it. Right now I have 2 36.4GB drives in RAID 1+0 and 4 146.8GB drives in a RAID 5 config. I wanna use the smaller drive for the OS and the bigger drive for the storage. I've managed to load the OS fine, the problem is I can't figure out how to mount the 4 146.8GB drives as a single logical volume and set Samba to use it. Right now all the RAIDs are setup using the built-in Compaq Smart Array utility (or whatever it's called) that's built into the SCSI hardware or BIOS.
I have recently developed the need for having a file server and am interested in setting up my desktop as a Samba File Server. The problem is that I need to be able to access it from outside networks (physically I'm about 10 miles away from my home network),o I need to also set up some sort of DynDNS service so that I can access the server from anywhere.With this, with setting up a DynDNS, setting up Samba, and setting up my machine to be secure enough for these types of actions. (I just want to make sure it is secure enough since it will need to be detectable from the internet.)
Can anyone point me in the direction of setting up shares for windows machines on centos. I have found a few document but never managed to get it up and running correctly. I need to be able to get access to subfolder etc for different users. Is there any way of doing it with some sort of gui?
Im having trouble setting my SAMBA server correctly. I have two Win machines, one with WIN7 and one with XP. I have one Ubuntu machine and Ubuntu Server 10.04. My problem is that I can only acess files from the Win 7 Machine. When I try to map out the shared dirs on my serverI get asked for user and password, when I enter my creditensials it dosent help.. What to do? I used the sample smb.conf file and open for no restrictions..
I'm trying to set up quota limit in samba-3.0.33-3.15.el5_4.1 in CentOS 5.5, by means of the module vfs objects. In the samba howto [1] I found a very brief explanation, but it isn't working for me. The basic idea is to setup a user called 'quota2g' (uid 499) and setup the [homes] share, as it comes by default, to enforce the quota on each user share.quota2g:x:499:499:User quota 2GB:/home/quota2g:/bin/bash
I'm trying to set my openSUSE desktop up to use the printers on my office network via Samba. I managed to get it working in 11.2 but 11.3 is giving me some trouble.I am able to access the printers and use them but I have to enter my network credentials each time I print. In 11.2 I was able to "save" my username/password and was not required to do this. Are there any Samba packages I need to add in addition to the basic ones? There seems to be a lack of documentation on this particular subject, most is concerning Windows clients printing on Linux print servers.
I recently got an old computer to use as a server and I have a whole list of things I want to do on it, but I'm having difficulties.When I installed the server, I installed AMP, FTP, Samba, CUPS, and some other items. I made a user account called 'nessdan' which (currently!) is in these groups:
The www-data group was added because I wanted to FTP my site files into '/var/www/' . Okay, that ended up working out for me. This is where things got sticky. I installed PHPMyAdmin and the files went to '/usr/share/phpmyadmin/' . I wanted to install a new theme so I downloaded it onto my Laptop, then logged in via FTP but couldn't transfer files into there! It turns out the folder was owned by 'root' and was in the group 'root'. The only thing I could come up with was to change that folders permissions so the owner was 'nessdan' and the group 'admin'. I was going to do that to the entire /usr/share/ folder but I didn't know whether or not I should be changing the permissions in the first place.
But the the trend continues! I have my print server setup and working but I wanted the server to hold the Windows drivers, so I went to '/var/lib/samba/' to do some work but noticed that a lot of the files' permissions were locked down to read only and the owner and group were 'root' . I ended up doing a 'chmod 775' and changing the owner and group to 'nessdan' and 'admin', respectively. Well I transfered over the files but now the service nmbd isn't working. The good news is, I expected to mess something up along the way and had already planned on reinstalling Ubuntu Server 10.10. I've only had the server for 4 days now and I knew from the beginning I'd be wiping it clean. I want to know how to set this thing up proper and the biggest problem is getting access into folders so I can FTP into them.When I do wipe my PC clean and start anew, how should I go about the changes that I did before (PHPMyAdmin, Samba Driver Folder)?
I have just formatted a partition that had contained a windows OS, it is now formatted to ext4 and is dev/sda1 dev/sda2 contains my Ubuntu OS and all files although the empty partition shows up in Nautilus I cannot write to it as it is owned by root.I have done some research on changing the permissions on this, but am none the wiser!!
Enabling the root account is rarely necessary. Almost everything you need to do as administrator of an Ubuntu system can be done via sudo or gksudo. If you really need a persistent root login, the best alternative is to simulate a root login shell using the following command.I cannot find gksudo and do not know what commands to use in the terminal to achieve my goal. I am in totally unfamiliar territory here, and need some fairly simple explanation and guidance to be able to claim my empty partition so I can read from and write to it.
I wanna make a small web server for local use , I've installed apache, every thing works fine I'm the root
I wanna protect the folder that contain the htdocs files (www), i don't want any users that not in root group to access (not even read)
I changed the permission of the htdocs folder as next
Owner: www (apache user) per: creat , delete group: root per: creat , delete other: none
it only works on the main folder that i changed its permissions ! not all sub folders and files ! were my steps right ? and are their anyway to change all folders and files at once ?
I have a file server running a cronjob to reset file permissions on a regular basis. I was thinking, I wonder if there is a way to do the chmod and chown command in a single command, as I always have to do both on the same folder, the way that you can do "chown root:users Uploads" instead of having to do two separate commands for chown and chgrp.
Then I got to thinking, are these commands even necessary? Every file copied or moved into these folders by any user needs to be something like "chmod 750" and "chgrp root:users", so rather than running a cronjob to do these modifications at regular intervals, there ought to be a way to set the folder permissions so that any files contained within will have these permissions.
The problem arises because users create documents, then a supervisor with elevated privileges can move those documents into a shared folder, however the permissions are wrong, they are user1:user1 for the owner and group and the other users can't read the file until a cronjob changes the group to be users. This has actually been acceptable, but certainly there is a better way to do this.
2 computers, Ubuntu 10.04 and Ubuntu 8.04. I have 2 folders named In and Out. Out I have set up on 10.04 for guest use. I am able to transfer files to 8.04 from that folder. Trying to set up In for a specific user to modify files. This requires a login. Both computers have the same user name and both have the same password. I set the file permissions automatically from 10.04 when electing to share In for allowed modiying. When trying to access In using 8.04, a password request window is generated with the user name already showing, and the domain name filled in as "Workgroup". The user name that shows is my login name, by the way.
I have a problem with file permissions over samba. I am running a web server, and this web server needs to be able to delete a file. The php code is correct, because it works on other sites. The php code is failing when it deletes a file because it is being ran as the www-data user. And the permissions on the files that are created on the share are as follows:
ns$ ls -l -rwxr-xr-x 1 root root 129628 Feb 6 08:16 20110206071748532.pdf This directory is mounted on: /var/www/files/23982dbb7a454425ce17a22bedc00776/scanned/AEC_Scans This is done with the /etc/fstab file: //192.168.58.2/Scans /var/www/files/23982dbb7a454425ce17a22bedc00776/scanned smbfs username=administrator,password=somepass
one thing i can't seem to be able to do is give the guest account just these permissions: using firefox (or other browser) and using one file directory and using a text editor. means the guest can browse the net and sefe some infos form that - nothing more. the previous version had something like that, it was really easy for me, a noob, to do it with two or three clicks. if this possibiility exists, what to do. if it's not implemented... maybe it should be. 'cause many people let others use the computer but don't want any complications...
