Samba file shares - ownership of folder accessible for 1 group verified by MS active direcctory

Posted by jackweirdy on Super User See other posts from Super User or by jackweirdy
Published on 2012-07-09T20:36:07Z Indexed on 2012/07/09 21:18 UTC
Read the original article Hit count: 224

Filed under:

network-shares

|

samba

|

active-directory

|

kerberos

I have a machine set up to share a folder /srv/sambashare, here's an exerpt of the config file:

[share]
   path = /srv/sambashare
   writable = yes

The permissions of that folder are set at 700 and it is owned by nobody:nogroup at the moment.

The problem I face is probably a simple one but I'm fairly new to Samba so I'm not sure what to do. The contents of the share should be accessible to a particular user who will authenticate with domain credentials, checked against Active Directory by kerberos.

I haven't got kerberos configured yet as I wanted to test the share as soon as samba was configured, albeit basically, to ensure that it works. I've noticed that I can only access & write to the share when the folder is either owned by the user logging in or made world writable.

The key issues are that this folder can't be world writable as it contains sensitive stuff, but at the same time can't be owned by a user or group since they come from the AD server.

Anyone know what I should do?

© Super User or respective owner

Related posts about network-shares

Network shares do not mount.

as seen on Super User - Search for 'Super User'
My network shares were mounting fine yesterday.. suddenly they are not. They were mounting fine for the last two weeks or however long since I added them. When I run sudo mount -a I get the following error: topsy@monolyth:~$ sudo mount -a mount error(12): Cannot allocate memory Refer to the mount… >>> More
Windows user account just for accessing network shares on a Windows 7 machine

as seen on Super User - Search for 'Super User'
I would like my Xbox (Xbmc) to access my Windows 7 shares without having Guest accounts enabled and without using my Administrator account login details. I have tried making it an account called Xbox and this works fine but the Xbox account appears on the login page for Windows. Is there a way to… >>> More
Cannot access Network Shares on Windows Server 2008 running VisualSVN Server

as seen on Server Fault - Search for 'Server Fault'
Hi, I have installed VisualSVN server on Windows Server 2008. The server is part of a domain but not the domain controller, it is just a data server and now an SVN server. VisualSVN uses port 80 and can only be access from inside the network (i do i by going to the dns name of the server). However… >>> More
Cannot browse to network shares but can ping and RDP into machines on LAN

as seen on Super User - Search for 'Super User'
I am using Windows XP SP3. I cannot browse to network shares via explorer, using machine name or IP. I can ping all machines by name and connect via RDP by name with no problem. I have changed nothing on the LAN or any network settings on any machine since it was working ok. Does anyone have any suggestions… >>> More
Leopard Network Shares and browsing are unreliable

as seen on Super User - Search for 'Super User'
I have two macs, running Leopard 10.5.8. One is the 13" MBP connected via WiFi, and the other is a 24" 2008 iMac, connected via ethernet. There are at least another 6-10 machines (windows and mac) awake on the network (with shares) at any given time, yet there are plenty of times where I cannot see… >>> More

Related posts about samba

Unable to connect to Samba printer

as seen on Ask Ubuntu - Search for 'Ask Ubuntu'
I have a headless Ubuntu 12.04 server for files and printers. It shares files via Samba just fine. However, the HP PSC-750xi connected to the server via USB is not accessible from my Ubuntu 12.04 laptop. I can browse for it in the Printing control panel, but any attempt to authenticate my ID to the… >>> More
Samba folder is gone

as seen on Ask Ubuntu - Search for 'Ask Ubuntu'
I seem to have some issues sharing folders from my Ubuntu 12.04 machine to a Win7 machine. After playing around with the settings, I decided to revert to Samba's original setting by reinstalling it: sudo apt-get purge samba sudo rm -rf /etc/samba/ /etc/default/samba sudo apt-get install samba just… >>> More
Samba on OS X 10.6.4

as seen on Server Fault - Search for 'Server Fault'
I just updated from 10.6.3 to 10.6.4, and now my Samba shares won't mount and won't allow access into the directories. In the logs, I've started to get the following errors, any idea what might have gone wrong? 2010/06/25 15:54:27, 0, pid=13848] /SourceCache/samba/samba-235.4/samba/source/passdb/secrets… >>> More
OpenLDAP and Samba, can't log onto Samba share from Windows

as seen on Server Fault - Search for 'Server Fault'
The former jackass IT-guy that I'm taking over for had a Samba share setup on a Fedora server that uses our OpenLDAP server to authenticate users who want to log in from Windows. We recently added a new employee and I jumped through the LDAP hoops to add them to the system. However, I can't seem… >>> More
Windows 7 Samba issue

as seen on Server Fault - Search for 'Server Fault'
We have a strange samba issue affecting only one user. Our samba setup is as follow : Red Hat Enterprise Linux Server release 5.4 (Tikanga) - Samba Server Samba version 3.0.33-3.14.el5 - Samba version Domain Controller WIN2008R2 Standard -… >>> More