Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

Say I have a protected directory called Corp that only members of the unix group Corp can access and its mostly working with:

read list = @corp

write list = @corp

create mask = 0770

Problem is, when a user creates a file there, its setting the user and group ownership to them, e.g. when user1 creates foo1, it has the permissions 770 for user1:user1 and user2 can't access or edit the file.

Is there a way to make it user1:corp from samba settings or should I change the create mask to 0777 (which I've enabled temporarily after doing a chgrp -R corp on the shared directory)?

Users have SSH access to the server so the folder /svr/corp itself needs to be restricted, right now its set to 770.

share|improve this question

2 Answers 2

up vote 1 down vote accepted

You can use the force group directive in your share definition to force that a particular group be used for all files on that share.

share|improve this answer
    
unless i'm using it wrong, i thought it gives access to users who aren't even in the group access to it, cause it treats any samba client as part of that group –  wag2639 Mar 2 '10 at 18:13
1  
Prepend the group name with a '+' and it will only apply users who are actually in the group. See the man page for details. –  Zoredache Mar 2 '10 at 18:18

Set the setgid permission on the directory so that objects created there are created with the group ID of the directory set.

chmod 2770 /svr/corp

Any objects created within the directory will then be created with the gid of the /srv/corp directory.

share|improve this answer

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.