2
I have a desktop running Ubuntu Server 12.04 with samba installed to share files to multiple Windows computers in the house.
I have a folder /test which has it's permissions set like so:
drwxrwsrwx 2 alex nodel 4096 Feb 17 15:39 /test
I have set GID so all files and folders created in this folder will have the group nodel (alex is my admin account and is the only member of the nodel group, I also have standard user izzie)
Here is my samba smb.conf:
[global]
workgroup = WORKGROUP
server string = %h server (Samba, Ubuntu)
netbios name = Acacia
dns proxy = no
log file = /var/log/samba/log.%m
max log size = 1000
syslog = 0
socket options = TCP_NODELAY
panic action = /usr/share/samba/panic-action %d
security = user
encrypt passwords = true
passdb backend = tdbsam
large readwrite = yes
dos charset = CP850
unix charset = UTF8
display charset = LOCALE
obey pam restrictions = yes
unix password sync = yes
passwd program = /usr/bin/passwd %u
pam password change = yes
guest account = nobody
map to guest = bad user
wins support = yes
usershare max shares = 100
usershare allow guests = yes
[Test]
comment = test
path = /test
nt acl support = yes
browseable = yes
writeable = yes
create mask = 0570
force create mode = 0570
directory mask = 0570
force directory mode = 0570
The share forces all new files and folders to be created with group write only (shown below)
dr-xrws--- 2 alex nodel 4096 Feb 17 15:39 New folder
dr-xrws--- 2 izzie nodel 4096 Feb 17 15:39 New folder (2)
When user izzie creates a new file she can't delete it, nor can she delete ones I create (this is exactly what I want). However, alex can't delete them either, even though I am part of the group nodel and group has full permissions. This is all in the Windows environment, doing this on the server enables me to delete them without sudo and logged in as alex.
If some context helps, this will be used for a video share where I want users to add there videos but not be able to delete them once they are in there, they only need read and execute as they will only be playing the videos.
Is there something I have done wrong to disable group writing in windows or is there something you have to activate to make it work?
So, my long-winded question is...How do I get group write permissions working on windows?