[Bug 228619] Re: samba group share not writable by group members

[dawning]

Ahaw! Sufficient digging has returned THE solution.

THE solution entails knowing what the hell you're trying to do (RTFM
FTW).

try this: "man smb.conf"

I just threw the following in my smb.conf to get totally uselessly open
perms on files created by users:

[global]
    <stuff>

[share1]
   <other stuff no one cares about>
   force create mode = 777
   force directory mode = 777
   force directory security mode = 777


Key info from the smb.conf man page:

....
create mode
          This parameter is a synonym for create mask.

       create mask (S)
          When a file is created, the necessary permissions are  calculated  according  to  the
          mapping  from DOS modes to UNIX permissions, and the resulting UNIX mode is then bit-
          wise ’AND’ed with this parameter. This parameter may be thought of as a bit-wise MASK
          for the UNIX modes of a file. Any bit not set here will be removed from the modes set
          on a file when it is created.

          The default value of this parameter removes the group and  other  write  and  execute
          bits from the UNIX modes.

          Following  this  Samba  will  bit-wise ’OR’ the UNIX mode created from this parameter
          with the value of the force create mode parameter which is set to 000 by default.

          This parameter does not affect directory masks. See the parameter directory mask  for
          details.

          Note  that  this  parameter  does not apply to permissions set by Windows NT/2000 ACL
          editors. If the administrator wishes to enforce a mask on access control lists  also,
          they need to set the security mask.

          Default: create mask = 0744

          Example: create mask = 0775

......

       directory mode
          This parameter is a synonym for directory mask.

       directory mask (S)
          This  parameter  is  the octal modes which are used when converting DOS modes to UNIX
          modes when creating UNIX directories.

          When a directory is created, the necessary permissions are  calculated  according  to
          the  mapping  from DOS modes to UNIX permissions, and the resulting UNIX mode is then
          bit-wise ’AND’ed with this parameter. This parameter may be thought of as a  bit-wise
          MASK for the UNIX modes of a directory. Any bit not set here will be removed from the
          modes set on a directory when it is created.

          The default value of this parameter removes the ’group’ and ’other’ write  bits  from
          the UNIX mode, allowing only the user who owns the directory to modify it.

          Following  this  Samba  will  bit-wise ’OR’ the UNIX mode created from this parameter
          with the value of the force directory mode parameter. This parameter is set to 000 by
          default (i.e. no extra mode bits are added).

          Note  that  this  parameter  does not apply to permissions set by Windows NT/2000 ACL
          editors. If the administrator wishes to enforce a mask on access control lists  also,
          they need to set the directory security mask.

          Default: directory mask = 0755

          Example: directory mask = 0775

....

-- 
samba group share not writable by group members
https://bugs.launchpad.net/bugs/228619
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to samba in ubuntu.