PERMISSION ISSUE

SUSE Product Topics SLES Configure-Administer
1

Hello. I’ve set up a SAMBA share but I can only write to it when I set all the permissions to 777. I’ve tried 775 and 755 but I still have the same issue. I can’t even write to the directories when I log in as root.

[CODE]NAME=“SLES”
VERSION=“12-SP1”
VERSION_ID=“12.1”
PRETTY_NAME=“SUSE Linux Enterprise Server 12 SP1”
ID=“sles”
ANSI_COLOR=“0;32”
CPE_NAME=“cpe:/o:suse:sles:12:sp1”
SUSE Linux Enterprise Server 12 (x86_64)
VERSION = 12
PATCHLEVEL = 1

This file is deprecated and will be removed in a future service pack or release.

Please check /etc/os-release for details about this release.

[/CODE]

The drive is mounted to /srv/data

UUID=cc858389-0b52-4ad1-8d3d-4d9ad7972dc7 swap swap defaults 0 0 UUID=057e2b05-75a1-43a5-a4b4-0bdafff306e9 / btrfs defaults 0 0 UUID=057e2b05-75a1-43a5-a4b4-0bdafff306e9 /boot/grub2/i386-pc btrfs subvol=@/boot/grub2/i386-pc 0 0 UUID=057e2b05-75a1-43a5-a4b4-0bdafff306e9 /boot/grub2/x86_64-efi btrfs subvol=@/boot/grub2/x86_64-efi 0 0 UUID=057e2b05-75a1-43a5-a4b4-0bdafff306e9 /opt btrfs subvol=@/opt 0 0 UUID=057e2b05-75a1-43a5-a4b4-0bdafff306e9 /srv btrfs subvol=@/srv 0 0 UUID=057e2b05-75a1-43a5-a4b4-0bdafff306e9 /tmp btrfs subvol=@/tmp 0 0 UUID=057e2b05-75a1-43a5-a4b4-0bdafff306e9 /usr/local btrfs subvol=@/usr/local 0 0 UUID=057e2b05-75a1-43a5-a4b4-0bdafff306e9 /var/crash btrfs subvol=@/var/crash 0 0 UUID=057e2b05-75a1-43a5-a4b4-0bdafff306e9 /var/lib/mailman btrfs subvol=@/var/lib/mailman 0 0 UUID=057e2b05-75a1-43a5-a4b4-0bdafff306e9 /var/lib/named btrfs subvol=@/var/lib/named 0 0 UUID=057e2b05-75a1-43a5-a4b4-0bdafff306e9 /var/lib/pgsql btrfs subvol=@/var/lib/pgsql 0 0 UUID=057e2b05-75a1-43a5-a4b4-0bdafff306e9 /var/log btrfs subvol=@/var/log 0 0 UUID=057e2b05-75a1-43a5-a4b4-0bdafff306e9 /var/opt btrfs subvol=@/var/opt 0 0 UUID=057e2b05-75a1-43a5-a4b4-0bdafff306e9 /var/spool btrfs subvol=@/var/spool 0 0 UUID=057e2b05-75a1-43a5-a4b4-0bdafff306e9 /var/tmp btrfs subvol=@/var/tmp 0 0 UUID=057e2b05-75a1-43a5-a4b4-0bdafff306e9 /.snapshots btrfs subvol=@/.snapshots 0 0 UUID=ffc2bdf9-57a6-468d-a2ef-93260c8fcc34 /home xfs defaults 1 2 UUID=c2f1e93c-475f-4aa0-b0dc-223fd53e15e0 /srv/data xfs defaults 1 2 

# smb.conf is the main Samba configuration file. You find a full commented
# version at /usr/share/doc/packages/samba/examples/smb.conf.SUSE if the
# samba-doc package is installed.
[global]
    workgroup = WORKGROUP
    passdb backend = tdbsam
    printing = cups
    printcap name = cups
    printcap cache time = 750
    cups options = raw
    map to guest = Bad User
    include = /etc/samba/dhcp.conf
    logon path = \\\\%L\\profiles\\.msprofile
    logon home = \\\\%L\\%U\\.9xprofile
    logon drive = P:
    usershare allow guests = No
    add machine script = /usr/sbin/useradd  -c Machine -d /var/lib/nobody -s /bin/false %m$
    domain logons = No
    domain master = No
    security = user
    wins support = No
 
[homes]
    comment = Home Directories
    valid users = %S, %D%w%S
    browseable = No
    read only = No
    inherit acls = Yes
 
[profiles]
    comment = Network Profiles Service
    path = %H
    read only = No
    store dos attributes = Yes
    create mask = 0600
    directory mask = 0700
    guest ok = No
 
[users]
    comment = All users
    path = /home
    read only = No
    inherit acls = Yes
    veto files = /aquota.user/groups/shares/
 
[groups]
    comment = All groups
    path = /home/groups
    read only = No
    inherit acls = Yes
 
## Share disabled by YaST
# [printers]
#   comment = All Printers
#   path = /var/tmp
#   printable = Yes
#   create mask = 0600
#   browseable = No
 
[print$]
    comment = Printer Drivers
    path = /var/lib/samba/drivers
    write list = @ntadmin root
    force group = ntadmin
    create mask = 0664
    directory mask = 0775
 
[netlogon]
 
[sscloud]
    inherit acls = Yes
    path = /srv/data
    read only = No
    guest ok = Yes
    inherit permissions = Yes
    create mask = 0640
    directory mask = 0750
 
[Nicole]
    inherit acls = Yes
    inherit permissions = Yes
    path = /srv/data/nicole
    read only = No
 
[evon]
    inherit acls = Yes
    path = /srv/data/evon
    read only = No
2

Hi,

when you’re able to write to a share (via its 777 permissions) on the client, as which user id does the file appear when looking at it via a local “ls -n” / “ls -l” (on the SaMBa server)?

This may well be a “user mapping” issue… it’s not about the user names, but about user ids. I guess that when you’re trying to write via the (mounted) share, the client user gets mapped to some other ID than whom the directory belongs to. And it’s independent from the invoking user - the effective user is associated with the mounting session, unlike with NFS. So if you mount the share using the Samba user “someone”, every write will act on behalf of “someone”, no matter which user is issuing the write operation on the client.

(Or I have misunderstood the issue.)

Regards,
J