Samba file shares - ownership of folder accessible for 1 group verified by MS active direcctory
- by jackweirdy
I have a machine set up to share a folder /srv/sambashare, here's an exerpt of the config file:
[share]
path = /srv/sambashare
writable = yes
The permissions of that folder are set at 700 and it is owned by nobody:nogroup at the moment.
The problem I face is probably a simple one but I'm fairly new to Samba so I'm not sure what to do. The contents of the share should be accessible to a particular user who will authenticate with domain credentials, checked against Active Directory by kerberos.
I haven't got kerberos configured yet as I wanted to test the share as soon as samba was configured, albeit basically, to ensure that it works. I've noticed that I can only access & write to the share when the folder is either owned by the user logging in or made world writable.
The key issues are that this folder can't be world writable as it contains sensitive stuff, but at the same time can't be owned by a user or group since they come from the AD server.
Anyone know what I should do?
