[Risolto]Permessi negati nelle sottocartelle Samba

Installazione, configurazione e uso di Ubuntu come server: web, ftp, mail, news, proxy, dns e altro.
Avatar utente
owl199
Prode Principiante
Messaggi: 10
Iscrizione: martedì 3 maggio 2016, 8:44
Desktop: Cinnamon
Distribuzione: Linux Mint 17.3 x86_64
Sesso: Maschile
Località: Unna /Germania

[Risolto]Permessi negati nelle sottocartelle Samba

Messaggio da owl199 »

Quindi dopo tanti anni di assenza dal forum mi ripresento.Un saluto a tutta la comunitá.
Il mio problema é molto strano:nell'azienda dove lavoro(in Germania) ho costruito un server cannibalizzando vari piccí in disuso per farmi una banca dati personale ed una sottospecie di intranet, che ovviamente non usa nessuno oltre me.
Tutto funzionava alla perfezione(web e condivisioni varie ed eventuali), sino a che un giorno non si poteva farci piú nulla.Panico.Ora ho cambiato un pó di permessi e perlomeno posso salvarci dei file e leggerli.Peró:se creo una nuova cartella ok!Se dentro a quella cartella ne voglio creare un'altra....nisba, niente permessi.
Non ho piú idee, dopo vari chown e chmod, dovrei poterci fare quello che voglio, e invece niente.Qualche idea dalla comunitá?
Posto un pó di output.
Grazie.

Codice: Seleziona tutto

wolf@ls-1404:~$ ls -l
insgesamt 36
drwxrwsrwx  2 batman users 4096 Mär  1 18:24 daten
drwxrwxrwx  7 batman users 4096 Mai  2 12:08 dati
drwxrwxrwx  2 batman users 4096 Nov 14 16:06 images
-rwxrwxrwx  1 batman users 3397 Nov 20 16:28 index.html
-rwxrwxrwx  1 batman users   19 Nov 13 17:32 info.php-back
drwxrwxrwx  2 batman users 4096 Nov 14 16:06 js
drwxrwxrwx  2 batman users 4096 Mai  2 17:46 repository
drwxrwsrwx 11 batman users 4096 Mai  4 10:55 splatter
drwxrwxrwx 13 batman users 4096 Mai  3 14:52 www
wolf@ls-1404:~$ 
e:

Codice: Seleziona tutto

==================================================================
#
# Sample configuration file for the Samba suite for Debian GNU/Linux.
#
#
# This is the main Samba configuration file. You should read the
# smb.conf(5) manual page in order to understand the options listed
# here. Samba has a huge number of configurable options most of which 
# are not shown in this example
#
# Some options that are often worth tuning have been included as
# commented-out examples in this file.
#  - When such options are commented with ";", the proposed setting
#    differs from the default Samba behaviour
#  - When commented with "#", the proposed setting is the default
#    behaviour of Samba but the option is considered important
#    enough to be mentioned here
#
# NOTE: Whenever you modify this file you should run the command
# "testparm" to check that you have not made any basic syntactic 
# errors. 

#======================= Global Settings =======================

[global]
	usershare max shares = 100
	public = yes
	socket options = TCP_NODELAY
	guest account = batman
	dns proxy = no
	syslog = 0
	unix password sync = yes
	log file = /var/log/samba/log.%m
	logon script = logon.cmd
	passdb backend = tdbsam
	wins support = true
	workgroup = WORKGROUP
	obey pam restrictions = yes
	force group = users
	usershare allow guests = yes
	directory mode = 775
	bind interfaces only = no
	winbind use default domain = yes
	valid users = batman,wolf,@sambashare,@users,@wolf
	path = /home/wolf/daten
	panic action = /usr/share/samba/panic-action %d
	create mode = 775
	passwd chat = *Enter\snew\s*\spassword:* %n\n *Retype\snew\s*\spassword:* %n\n *password\supdated\ssuccessfully* .
	max log size = 1000
	passwd program = /usr/bin/passwd %u
	winbind trusted domains only = no
	os level = 20
	pam password change = yes
	server string = %h server (Samba, Ubuntu)
	server role = standalone server
	writeable = yes
	map to guest = bad user
	force user = batman

## Browsing/Identification ###

# Change this to the workgroup/NT-domain name your Samba server will part of

# server string is the equivalent of the NT Description field

# Windows Internet Name Serving Support Section:
# WINS Support - Tells the NMBD component of Samba to enable its WINS Server

# WINS Server - Tells the NMBD components of Samba to be a WINS Client
# Note: Samba can be either a WINS Server, or a WINS Client, but NOT both

# This will prevent nmbd to search for NetBIOS names through DNS.

#### Networking ####

# The specific set of interfaces / networks to bind to
# This can be either the interface name or an IP address/netmask;
# interface names are normally preferred

# Only bind to the named interfaces and/or networks; you must use the
# 'interfaces' option above to use this.
# It is recommended that you enable this feature if your Samba machine is
# not protected by a firewall or is a firewall itself.  However, this
# option cannot handle dynamic or non-broadcast interfaces correctly.



#### Debugging/Accounting ####

# This tells Samba to use a separate log file for each machine
# that connects

# Cap the size of the individual log files (in KiB).

# If you want Samba to only log through syslog then set the following
# parameter to 'yes'.
#   syslog only = no

# We want Samba to log a minimum amount of information to syslog. Everything
# should go to /var/log/samba/log.{smbd,nmbd} instead. If you want to log
# through syslog you should set the following parameter to something higher.

# Do something sensible when Samba crashes: mail the admin a backtrace


####### Authentication #######

# Server role. Defines in which mode Samba will operate. Possible
# values are "standalone server", "member server", "classic primary
# domain controller", "classic backup domain controller", "active
# directory domain controller". 
#
# Most people will want "standalone sever" or "member server".
# Running as "active directory domain controller" will require first
# running "samba-tool domain provision" to wipe databases and create a
# new domain.

# If you are using encrypted passwords, Samba will need to know what
# password database type you are using.  


# This boolean parameter controls whether Samba attempts to sync the Unix
# password with the SMB password when the encrypted SMB password in the
# passdb is changed.

# For Unix password sync to work on a Debian GNU/Linux system, the following
# parameters must be set (thanks to Ian Kahan <<kahan@informatik.tu-muenchen.de> for
# sending the correct chat script for the passwd program in Debian Sarge).

# This boolean controls whether PAM will be used for password changes
# when requested by an SMB client instead of the program listed in
# 'passwd program'. The default is 'no'.

# This option controls how unsuccessful authentication attempts are mapped
# to anonymous connections

########## Domains ###########

#
# The following settings only takes effect if 'server role = primary
# classic domain controller', 'server role = backup domain controller'
# or 'domain logons' is set 
#

# It specifies the location of the user's
# profile directory from the client point of view) The following
# required a [profiles] share to be setup on the samba server (see
# below)
;   logon path = \\%N\profiles\%U
# Another common choice is storing the profile in the user's home directory
# (this is Samba's default)
#   logon path = \\%N\%U\profile

# The following setting only takes effect if 'domain logons' is set
# It specifies the location of a user's home directory (from the client
# point of view)
;   logon drive = H:
#   logon home = \\%N\%U

# The following setting only takes effect if 'domain logons' is set
# It specifies the script to run during logon. The script must be stored
# in the [netlogon] share
# NOTE: Must be store in 'DOS' file format convention

# This allows Unix users to be created on the domain controller via the SAMR
# RPC pipe.  The example command creates a user account with a disabled Unix
# password; please adapt to your needs
; add user script = /usr/sbin/adduser --quiet --disabled-password --gecos "" %u

# This allows machine accounts to be created on the domain controller via the 
# SAMR RPC pipe.  
# The following assumes a "machines" group exists on the system
; add machine script  = /usr/sbin/useradd -g machines -c "%u machine account" -d /var/lib/samba -s /bin/false %u

# This allows Unix groups to be created on the domain controller via the SAMR
# RPC pipe.  
; add group script = /usr/sbin/addgroup --force-badname %g

############ Misc ############

# Using the following line enables you to customise your configuration
# on a per machine basis. The %m gets replaced with the netbios name
# of the machine that is connecting
;   include = /home/samba/etc/smb.conf.%m

# Some defaults for winbind (make sure you're not using the ranges
# for something else.)
;   idmap uid = 10000-20000
;   idmap gid = 10000-20000
;   template shell = /bin/bash

# Setup usershare options to enable non-root users to share folders
# with the net usershare command.

# Maximum number of usershare. 0 (default) means that usershare is disabled.

# Allow users who've been granted usershare privileges to create
# public shares, not just authenticated ones

#======================= Share Definitions =======================

# Un-comment the following (and tweak the other settings below to suit)
# to enable the default home directory shares. This will share each
# user's home directory as \\server\username

[printers]
   comment = All Printers
   browseable = no
   path = /var/spool/samba
   printable = yes
   guest ok = no
   read only = yes
   create mask = 0700

# Windows clients look for this share name as a source of downloadable
# printer drivers
[print$]
   comment = Printer Drivers
   path = /var/lib/samba/printers
   browseable = yes
   read only = yes
   guest ok = no
# Uncomment to allow remote administration of Windows print drivers.
# You may need to replace 'lpadmin' with the name of the group your
# admin users are members of.
# Please note that you also need to set appropriate Unix permissions
# to the drivers directory for these users to have write rights in it
;   write list = root, @lpadmin


[DATEN]
	unix extensions = no 
	writeable = yes
	force group = users
	valid users = batman,wolf,@users
	path = /home/wolf/splatter
	guest account = batman
	directory mode = 0777
	public = yes
	create mode = 0777
	follow symlinks = yes
	force user = batman
        force group = users



[WWW]
	force group = users
	delete readonly = no
	follow symlinks = yes
	directory mode = 0777
        create mode = 0777
	writeable = yes
	browseable = yes
	unix extensions = no 
	path = /home/wolf/www
	force user = batman
	valid users = batman,@users
Ultima modifica di owl199 il lunedì 9 maggio 2016, 9:43, modificato 1 volta in totale.
Avatar utente
thece
Tenace Tecnocrate
Tenace Tecnocrate
Messaggi: 12949
Iscrizione: lunedì 23 aprile 2007, 14:16
Distribuzione: Debian 12 (Bookworm) - KDE

Re: Permessi negati nelle sottocartelle Samba

Messaggio da thece »

:ciao:

se non ho capito male è questo che non ti riesce

cat /etc/passwd | egrep 'thece|user'

Codice: Seleziona tutto

thece:x:1000:1000:TheCe,,,:/home/thece:/bin/bash
user01:x:1001:1001:User01,,,:/home/user01:/bin/bash
user02:x:1002:1002:User02,,,:/home/user02:/bin/bash
cat /etc/group | egrep users

Codice: Seleziona tutto

users:x:100:thece,user01,user02
ls -l /

Codice: Seleziona tutto

...
drwxrwxr-x   3 thece users  4096 mag  4 16:15 users
...
/etc/samba/smb.conf (estratto)

Codice: Seleziona tutto

[users]
        comment = Users
        path = /users
        available = yes
        browseable = yes
        writeable = yes
        guest ok = no
        guest only = no
        valid users = @users
        force user = thece
        force group = users
        directory mask = 0775
        create mask = 0664
pdbedit -L

Codice: Seleziona tutto

thece:1000:TheCe
user02:1002:User02
user01:1001:User01
ls -l /users/

Codice: Seleziona tutto

drwxrwxr-x 3 thece users 4096 mag  4 16:31 test_01
-rw-rw-r-- 1 thece users    0 mag  4 16:31 test_01.txt
drwxrwxr-x 3 thece users 4096 mag  4 16:51 test_03
-rw-rw-r-- 1 thece users    0 mag  4 16:51 test_03.txt
ls -l /users/test_01

Codice: Seleziona tutto

drwxrwxr-x 2 thece users 4096 mag  4 16:31 test_02
-rw-rw-r-- 1 thece users    0 mag  4 16:31 test_02.txt
ls -l /users/test_03

Codice: Seleziona tutto

drwxrwxr-x 2 thece users 4096 mag  4 16:51 test_04
-rw-rw-r-- 1 thece users    0 mag  4 16:51 test_04.txt
- le directory e i file test_01, test_02, test_01.txt e test_02.txt li ho creati da un PC Windows collegandomi allo share \\SERVER_SAMBA\users come utente user01

- le directory e i file test_03, test_04, test_03.txt e test_04.txt li ho creati da un PC Windows collegandomi allo share \\SERVER_SAMBA\users come utente user02

in pratica qualsiasi utente (di sistema e di Samba) appartenente al gruppo di sistema user è in grado di collegarsi allo share \\SERVER_SAMBA\users e qui dentro creare directory e file, che verranno creati come di proprietà dell'utente thece, gruppo users, con i permessi 777 per le directory, 664 per il file
Avatar utente
owl199
Prode Principiante
Messaggi: 10
Iscrizione: martedì 3 maggio 2016, 8:44
Desktop: Cinnamon
Distribuzione: Linux Mint 17.3 x86_64
Sesso: Maschile
Località: Unna /Germania

Re: Permessi negati nelle sottocartelle Samba

Messaggio da owl199 »

Infatti.Il server é una rete windows senza DC(workgroup).A mio parere, loggandomi come batman@users, dovrei avere pieni poteri su quelle directory(dati&web sono quelle che mi interessano), e invece posso salvarci dei singoli files, creare una cartella, ma non crearci una sottocartella in cui infilarci dei file.Questo lo posso fare solo via FTP. :muro:
Avatar utente
thece
Tenace Tecnocrate
Tenace Tecnocrate
Messaggi: 12949
Iscrizione: lunedì 23 aprile 2007, 14:16
Distribuzione: Debian 12 (Bookworm) - KDE

Re: Permessi negati nelle sottocartelle Samba

Messaggio da thece »

A me sembra di averti postato tutte le informazioni necessarie di un esempio completo e funzionante della funzionalità che vuoi realizzare, non ti resta che fare le dovute verifiche e correzioni. Hai ancora qualche dubbio da sciogliere?
Avatar utente
owl199
Prode Principiante
Messaggi: 10
Iscrizione: martedì 3 maggio 2016, 8:44
Desktop: Cinnamon
Distribuzione: Linux Mint 17.3 x86_64
Sesso: Maschile
Località: Unna /Germania

Re: [Risolto]Permessi negati nelle sottocartelle Samba

Messaggio da owl199 »

Molte grazie, ho risolto rifacendo le cartelle condivise(boh).
Scrivi risposta

Ritorna a “Ubuntu su server”

Chi c’è in linea

Visualizzano questa sezione: Google [Bot] e 19 ospiti