Bug 1505 - Unexpected groups behaviour.
Summary: Unexpected groups behaviour.
Status: RESOLVED LATER
Alias: None
Product: Samba 3.0
Classification: Unclassified
Component: User/Group Accounts (show other bugs)
Version: 3.0.2a
Hardware: All Linux
: P3 normal
Target Milestone: none
Assignee: Samba Bugzilla Account
QA Contact: Samba QA Contact
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2004-07-04 07:24 UTC by Micha Kersloot
Modified: 2005-02-21 06:17 UTC (History)
0 users

See Also:


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Micha Kersloot 2004-07-04 07:24:40 UTC
Using samba in a mixed linux/win2000/winxp envirionment we use:
[MichaMarielle]
    force group = michamarielle
    valid users = +michamarielle
    read only = No
    create mask = 0770
    directory mask = 0770

Users are in the michamarielle group on the server. The michamarielle group is
not configured on the linux clients. If one user writes something on the share
another user is not able to read the documents (permision denied).

With windows clients, users can use each others documents!
Comment 1 Gerald (Jerry) Carter (dead mail address) 2005-02-07 07:06:26 UTC
is this a Samba issue or a cifsvfs/smbfs issues?
Comment 2 Lars Müller 2005-02-07 08:03:44 UTC
For me it looks like a ACLs issue.

Are you using (default) ACLs on the Linux server?

Is your NFS server and client ACLs capable?

For the CIFS clients you workaround the problem with the Samba configuration
(force group and mask settings).
Comment 3 Micha Kersloot 2005-02-07 08:28:04 UTC
(In reply to comment #2)
> For me it looks like a ACLs issue.
> 
> Are you using (default) ACLs on the Linux server?
> 
> Is your NFS server and client ACLs capable?
> 
> For the CIFS clients you workaround the problem with the Samba configuration
> (force group and mask settings).

The only workaround i've found so far . "Unix Extensions = no", but is seems
very strange for me that there is no way to turn it of on the client. Some
clients do share the user-base, but some don't, now I have to disable it globaly.
Comment 4 Gerald (Jerry) Carter (dead mail address) 2005-02-21 06:17:12 UTC
you can turn off ths unix extensions support in the cifs fs client 
via an entry in /proc/fs/cifs/ (can't remember which one right now).