Differences between version 35 and previous revision of SambaNotes.
Other diffs: Previous Major Revision, Previous Author, or view the Annotated Edit History
| Newer page: | version 35 | Last edited on Monday, November 20, 2006 1:31:36 am | by BenStaz | Revert |
| Older page: | version 34 | Last edited on Monday, November 20, 2006 1:20:56 am | by BenStaz | Revert |
@@ -47,9 +47,15 @@
You may need more, depending on your pattern of usernames. This parameter tells samba to try at least $username_level initial caps in the supplied name. For example, I had a site where the username pattern matched Y~[0-2]name. In this case, I needed to set username level to 1, to catch the initial uppercase character. Needless to say this would not be necessary if Windows clients would behave and send the username exactly as provided...
!!Rules to Remember Regarding Permissions.
-For a user in group 'leech' for example, if he wants to access a samba share, then to browse and access files, all parent directories must have their group permissions set as read and execute and either him or one of the groups he is in should own them. If not, then a samba client will not be able to access the share. If the group permissions are set to execute only, then the user will not be be able to browse the share but they will be able to directly access files. ie : supply a full path.
+For a user in group 'leech' for example, if he wants to access a samba share, then to browse and access files, all parent directories must have their group permissions set as read and execute and either him or one of the groups he is in should own them. If not, then a samba client will not be able to access the share.
+
+Read permission ("r") means that you can list the directory- for example, use "ls" on it. But that's all it means
. If you only have read permission on a directory you can't cd to that directory, you can't copy files to that directory etc.
+
+You need execute permission ("x") if you want to read files in that directory, copy it elsewhere, or delete it.
+
+
If the group permissions are set to execute only, then the user will not be be able to browse the share but they will be able to directly access files. ie : supply a full path.
!!Print Queue in Windows 2000/XP shows "Access denied, unable to connect".
This drove me insane. I now have the answer:
