From d00b6f125fd98d1842cba57c7b509d52470c82d7 Mon Sep 17 00:00:00 2001
From: Jelmer Vernooij New in the Samba 2.0.4 release is the ability for Windows
- NT clients to use their native security settings dialog box to
- view and modify the underlying UNIX permissions.11.1. Viewing and changing UNIX permissions using the NT
security dialogs
Note that this ability is careful not to compromise the security of the UNIX host Samba is running on, and @@ -100,11 +98,11 @@ CLASS="SECT1" >
From an NT 4.0 client, single-click with the right
+>From an NT4/2000/XP client, single-click with the right
mouse button on any file or directory in a Samba mounted
drive letter or UNC path. When the menu pops-up, click
on the Properties entry at the bottom of
- the menu. This brings up the normal file properties dialog
- box, but with Samba 2.0.4 this will have a new tab along the top
- marked Security. Click on this tab and you
+> and you
will see three buttons, There is an NT chown command that will work with Samba
and allow a user with Administrator privilege connected
- to a Samba 2.0.4 server as root to change the ownership of
+ to a Samba server as root to change the ownership of
files on both a local NTFS filesystem or remote mounted NTFS
or Samba drive. This is available as part of the "Add"
- button will not return a list of users in Samba 2.0.4 (it will give
+ button will not return a list of users in Samba (it will give
an error message of "The remote procedure call failed
@@ -500,13 +497,14 @@ CLASS="SECT1"
> Note that with Samba 2.0.5 there are four new parameters
- to control this interaction. These are : create mask
parameter to provide compatibility with Samba 2.0.4
- where this permission change facility was introduced. To allow a user to
- modify all the user/group/world permissions on a file, set this parameter
+> parameter. To allow a user to modify all the
+ user/group/world permissions on a file, set this parameter
to 0777. Next Samba checks the changed permissions for a file against
@@ -602,8 +599,7 @@ CLASS="PARAMETER"
>force
create mode parameter to provide compatibility
- with Samba 2.0.4 where the permission change facility was introduced.
+> parameter.
To allow a user to modify all the user/group/world permissions on a file
with no restrictions set this parameter to 000. force directory mode parameter to provide
- compatibility with Samba 2.0.4 where the permission change facility
- was introduced.11.3. Viewing file ownership
11.4. Viewing file or directory permissions
11.4.1. File Permissions
11.4.2. Directory Permissions
11.5. Modifying file or directory permissions
11.6. Interaction with the standard Samba create mask
parameters
In this way Samba enforces the permission restrictions that an administrator can set on a Samba share, whilst still allowing users @@ -691,37 +685,13 @@ CLASS="PARAMETER" CLASS="PARAMETER" >force directory security mode = 0
As described, in Samba 2.0.4 the parameters :
create mask
force create mode
directory mask
force directory mode
were used instead of the parameters discussed here.