topic Re: SAMBA access question in Operating System - HP-UX

SAMBA access question

Luis Toro — Fri, 21 Jan 2005 10:29:24 GMT

Hello,

Is there a way to allow "delete only" access on a samba share ?
We have a directory on an HPUX server, that is mounted on a Windows server. A process on the Windows side needs to read the file(s), and then delete it once its complete with the processing. We've restricted the access by server IP, and Windows account. But the only options I see as far as access type goes are read-only, or all-access. We would like to make sure that files are not written to the samba share.

Thanks

Re: SAMBA access question

Uday_S_Ankolekar — Fri, 21 Jan 2005 10:35:33 GMT

There is an option called delete readonly option. This allows read only files to be deleted. Chack man pages of smb.conf for more.

-USA..

Re: SAMBA access question

Florian Heigl (new acc) — Fri, 21 Jan 2005 10:56:12 GMT

samba implements windows acls if You want it to. honestly I never tried it myself, but it is ought to work. Have a look at a windows 2000 box:
Right click some folder -> security settings -> advanced -> perminssion -> view / modify

There is a 'delete' and a 'list folder and view data' permission option.

In short: Activate ACL support with samba (recompile if it's missing), create a user account for the windows user account that is to access the unix box, and set the permissions. I don't know if this can done using samba only or if You need to use a privileged full-access user account for that. (You can remove that accounts right afterwards)

Good luck :)

Re: SAMBA access question

Luis Toro — Fri, 21 Jan 2005 15:10:49 GMT

We would prefer to control the access on the UNIX side. We tried setting "delete readonly = yes" and we did not get the behavior we're looking for. What I also noticed was that even with full access on the share, we could not delete any files on the samba share. We could update them, but not delete. We made the file permissions 666, and we still had the problem. The only way to delete the file was to open up the directory to 777. Any thoughts ? Is this normal ?
Thanks