I have a samba server setup and working, to authenticate users to a DOMAIN that is running on another samba machine. I don't think Samba is part of my issue, but I'm trying to be thorough. I have been asked to setup shares for different departments with the following folder structure: (using art dept as example)
Art Public Private Protected
Public, anyone can read and write Private, only people in the group DOMAIN\Art can enter, and they have full control of files inside Protected, anyone can read, only members of group DOMAIN\Art can write.
I have set a very unrestricted share permission in samba, and was trying to lock it down with the file permissions. From the smb.conf:
[art] comment = Art Dept files path = /dat/art browseable = yes read only = no valid users = @DOMAIN\everyone read list = write list = @DOMAIN\everyone admin list = @DOMAIN\art', @'DOMAIN\Domain Admins
I have set the folder permissions correctly: (I think)
drwxrws--- 2 root DOMAIN\art 4096 Jun 6 16:54 private drwxrwsr-t 2 root DOMAIN\art 4096 Jun 6 17:09 protected drwxrwsrwx 2 root DOMAIN\everyone 4096 Jun 6 16:55 public
Basically, Public and Private work the way I want, however, with protected, I am having some issues. By default a user not in the group "domain\art" can only read in that folder. they cannot create new documents, etc. however, if anyone in the correct group creates a file, or a folder, the permissions are set to 744. So, If User1 is in the domain\art group, and creates a file in the protected folder, anyone can change it. rwxrw-rw- 1 DOMAIN\User1 DOMAIN\art 4.3K Jun 6 17:09 newdb.txt
How can I force that folder (protected) to propagate the permissions 775 on all new files and subdirectories inside that folder?
I have tried setting the sticky bit:
chmod g+s protected chmod a+s protected
and it doesn't seem to help. Any other ideas?