Permissions for User/Groups

[olli2003]

Dear all,
I've a strange problem, may be one of you can help me.
I need to have read/write permissions for a Samba user.
This user, named "SMB" must update or read files from AIX directory. Now the problem: That file is produced by a SAP system and has SAP:sys rw-rw----. In this case the SMB user has no permissions for the file. Now I've added the user "SMB" to the group "sys". I thought it works well now,
but it least it's not working in this way. At all the SMB has permissons if I change to rw-rw-r-- :-(
Please help!
Thanks for all,
Regards
Oliver

 

[olli2003]

Hello
It's me again. May be it's a problem that the "SMB" is a samba user...cause if a logon as "SMB" directly in the AIX environment, the permissions working good.
Strange, and I don't know???

All the best and thanks!

Regards
Oliver

 

[olli2003]

Sorry...One more Update ;-)

I've found in the samba.conf another workgroup, I think was given by...I don't know...
Can I change here to the workgroup "sys" f. ex. or can I a second workgroup in the current row?

Thanks a lot!

Oliver

 

[khalidaaa]

In my case we are naming the AIX user account as the account that is in the smb.conf!

and strange enough it is given in the "guest account" field in smb.conf?!?

 

[RodKnowlton]

khalidaaa, The "guest account" setting is for the name of the local account (preferably an unprivileged one) that is used for certain Samba tasks, as well as for accessing any shares marked as "guest ok = YES".

ollie2003, Adding "force group = +sys" to the appropriate share should take care of this for you. It'll force all access to the share to use sys as its primary group, but only if the user is already in the sys group (remove the '+' if you want users outside of the sys group to also be allowed access as sys group). Note: the '+' functionality is only available in Samba 2.0.5 and above.

- Rod




IBM Certified Advanced Technical Expert pSeries and AIX 5L
CompTIA Linux+
CompTIA Security+

Wish you could view posts with a fixed font? Got Firefox & Greasemonkey? Give yourself the option.

 

[olli2003]

Hi Rod,
thanks for the help! yes, you're right with the force option. I've done with force user, it's also a possibility.
All the Best!

Kind Regards
Oliver