Zentyal Forum, Linux Small Business Server

Zentyal Server => Installation and Upgrades => Topic started by: zoot on July 02, 2010, 01:21:28 pm

Title: Samba: non-admin users cannot write to shares [RESOLVED]
Post by: zoot on July 02, 2010, 01:21:28 pm
Hi there

I'm using an up-to-date system, running ebox 1.4.4.

I have added users to the 'everyone' group and given the 'everyone' group read and write access to the share /home/samba/shares/projects.

The problem:

WinXP users who are not admin users cannot write to the share, despite read/write being configured.

Samba config: http://www.pastie.org/1027959

Possible caveat (quotas on filesystems?):

Any clue as to why users can't write to the share, even though they're configured to have write access? Has ebox failed to update the LDAP DB properly?

Thanks
Title: Re: Samba: non-admin users cannot write to shares
Post by: zoot on July 05, 2010, 12:42:49 pm
Please could someone attempt to help. Let me know what other information I should share in order to trouble-shoot this.

Thanks.
Title: Re: Samba: non-admin users cannot write to shares
Post by: chivar on July 06, 2010, 10:17:22 am
im upping this thread :) im also experiencing this. what i temporarily did was make all users admin to their group and shared folder 
Title: Re: Samba: non-admin users cannot write to shares
Post by: cougarmaster on July 06, 2010, 03:44:11 pm
Hi guys,

    Have a look at this link would likely solve your problem.

    http://trac.ebox-platform.com/wiki/Document/HowTo/EnableACLs

Good luck
Eric
Title: Re: Samba: non-admin users cannot write to shares
Post by: zoot on July 06, 2010, 07:00:41 pm
Thanks Eric, finally a response :)

I'm not convinced that downgrading from 1.4.4-0ubuntu1~ppa1~hardy1 to 1.4.3-0ubuntu1~ppa1~hard1~acl1_all.deb would be the correct solution?

Surely the former already has ACLs? I ask this, because my samba partitions /home and /srv/nas are already mounted with ACL support.

I have done the above (remotely) despite my concerns and will test them tomorrow and report back.
Title: Re: Samba: non-admin users cannot write to shares
Post by: zoot on July 06, 2010, 07:04:01 pm
I see my hunch was correct. ACLs are already included in the version I had installed, so will revert. Here's the reference post:

http://forum.ebox-platform.com/index.php?topic=3814.0

... which means my issue is not resolved yet :(
Title: Re: Samba: non-admin users cannot write to shares
Post by: cougarmaster on July 06, 2010, 08:43:33 pm
Hi zoot,
    Sorry I can't be much help as I am not experienced enough to solve your problem. In my experience was I just followed the requirement set out and it worked flawlessly. I had to install many times before I got the hang of it as its more of a configuration than why it doesn't work. It should work but you may need to read more on samba configs and acl or buy some support from ebox which will help support them and get what you need working. Sorry for not being much help as I am still learning linux.

Good luck
Eric
Title: Re: Samba: non-admin users cannot write to shares
Post by: bero on July 08, 2010, 11:03:23 am
Forgive me for being hasty,  I've just glanced at this topic, but I wonder how the unix rights are configured. In order for samba to play well, both smb permissions and unix permissions have to be set up correctly.

The everyone group should be the owner of the projects folder and all subfolders and as a group it should have read, write and execute rights upon files and folders inside the projects folder.

Unix rights can be managed through console (I'd recommend Putty SSH client). Once logged in the console cd to /home/samba/shares.
Then ls -l and examine the output.

Should modifications be made, chmod and chown commands will do the job. Just google for the correct syntax.

br, Gasper
Title: Re: Samba: non-admin users cannot write to shares
Post by: zoot on July 08, 2010, 04:14:42 pm
I resolved my issue by adding the following repo to /etc/apt/sources.list

deb http://ppa.launchpad.net/ebox/1.4-proposed/ubuntu hardy main

and running:

apt-get update
apt-get dist-upgrade

So, now we're able to connect Windows XP machines, but absolutely nothing works with Windows 7, despite trying out the registry changes recommended on various forums. Will be downgrading that client machine to Windows XP... makes zero sense to waste additional time on a single workstation in an office.
Title: Re: Samba: non-admin users cannot write to shares [RESOLVED]
Post by: cougarmaster on July 10, 2010, 10:14:11 am
Hi zoot,
    There is a link to a patch that you need to apply for windows 7 access on ebox. Search you'll be able to find it as I just reinstalled my computer I don't have the links.

Good Luck
Eric
Title: Re: Samba: non-admin users cannot write to shares [RESOLVED]
Post by: zoot on July 12, 2010, 10:29:12 am
I have tried the various "confirmed to work" registry changes, including the one given by:

http://trac.ebox-platform.com/raw-attachment/wiki/Document/HowTo/Windows7Support/ebox-win7.reg

... to no avail. The Windows 7 PC simply times-out trying to connect to the ebox server and has exactly the above changes applied. It is however, able to connect to shares on other Windows XP PCs.
Title: Re: Samba: non-admin users cannot write to shares [RESOLVED]
Post by: sirexz on July 28, 2010, 02:49:11 pm
Same problem here, but I found what causes this problem!

I have a system user A, created with useradd and also user with same name A in eBox. When I check user A from console:
Code: [Select]
$ id A
uid=1000(A) gid=1000(A) groups=1000(A),4(adm),20(dialout),24(cdrom),46(plugdev),109(sambashare),113(lpadmin),114(admin),513(Domain Users)

Also there is user B created only from eBox:
Code: [Select]
$ id A
uid=2023(B) gid=1901(__USERS__) groups=1901(__USERS__),513(Domain Users)

New shared folder has these rights:
Code: [Select]
$ drw-rw--- 2 ebox __USERS__ 4096 2010-07-28 15:31 /home/samba/shares/boo

Both users (A and B) in eBox have same rights, but only B user can access boo share, because he has correct groups created by eBox.

So the problem is with system users. Don't know how to fix it and how to add an LDAP group tu system user?