Apply permission on samba shared folder on W2K servers

[vwhk_1]

HI All,

I have a Redhat 7.2 runing samba 2.2 and configured samba to share folders. The folders is accessable by everyone (no permission set). The W2K servers will map a network driver while it startup (before user login) from samba shares. For example: if I have a samba share called "temp" and I then access this share from a windows 2000 server. Can I then go to the properties of this folder, click on the security tab and then add or remove users or groups from the NT domain that can have access that folder "temp". I encountered that if I try do this I can add users or groups from our domain (NT users) and specify what access each should have ie: read only or full control, but when I click on the "OK" or "Apply" button to apply these changes I get an error saying "Unable to save permission changes on folder. Access is denied" or the added user name is disappear.

I have some W2K servers (different workgroup)need to add the permission on the same samba shared folder "temp" Is it something that I need to do at samba server?

[Jerome Henry]

Definetely.

Samba shares permissions are to be set on samba server. When you set them up on 2k servers, they try to write on samba server, which they are not allowed to do.

J

[vwhk_1]

Any tools which I can install on Samba server, so that I can set the permissions.

[Jerome Henry]

The best tool for Samba is SWAT (samba web administrating tool) :
you can get it from your Redhat 7.2 CDs, or from

http://www.aucs.org/rpmcenter/rpms.html

Please be aware that more than half of replies to your questions stay unassigned, thus we dont know if our tips were useful to you or not... :]
Hope this helps

J

[Steven E. Protter]

A little integration will help.

Set up an account on the W2K server for the samba machine. Give it appropriate permissions. This will make the machine part of the Domain and make it possible for you to assign rights to Domain users on the Samba box(Linux, HP-UX, it matters not).

The next step is to look into providing common authentication for domain users, even when they are on the Samba shares.

LDAP is built into Linux, if you allow for it at install. Its an install option for HP-UX.

If you are using LDAP to authenticate Windows domain users, it can be used with some work to authenticate users and rights on the Unix side.

Its not easy, but the payoff is not having to run smbpasswd -a every time you force a user password change(its important to do that quite regularly).

There are documents on this topic, but they are on paper at my office. I'll see about getting something and posting it in later. Wednesday is busy for me.

SEP

[vwhk_1]

It will be very helpful if you can find the info. Thanks!