[TriLUG] samba issues in Shrike ( Red Hat Linux 9)

[Jeremy Portzer]

On Sun, 2003-08-24 at 15:38, spain at ncssm.edu wrote:
> I have successfully installed redhat 9.0 on my laptop using a custom
> installation option.. My goal is to use it as a workstation with some while
> running apache/mysql/php to do some web application development.. 

I think you probably mean Red Hat Linux 9.  There is no decimal or zero
in the version number.

> It's great so far but I'm having some difficulty in samba.. I'm basically
> sharing the /var/www/html (for wwwroot access for other users to place files
> in) and /home/apps (misc. file transfers) directories as public shares read
> and writable to all.. 
> 
> however, when I attempt to copy files to the wwwroot share, i get access
> denied errors.. I have created samba users and I log in using the samba user
> name and password, which also have a regular user acct on the box.. 

Did you give the 'regular user account' permissions to write to the
directory in question?  If not, then you should expect those errors.

> is there something I'm missing here?  should I be placing the user I'm using
> in the root group or be checking whom has access to the file directories
> that i'm copying to?  Please help

Don't add non-admin users to the root group.  You can make other groups,
though.  For example, you could make a "web" group for people who need
access to the web root.  Then add the necessary users to that group. 
You can modify users and groups with the "redhat-config-users" program,
or the standard utilities such as "usermod", "groupadd" , and
"gpasswd".  For example, I might do the following:
	groupadd -g 200 web
[creates the 'web' group with GID 200]
	chown -R root.web /var/www/html
[gives group ownership to 'web' for existing files and directories]
	find /var/www/html -type d | xargs chmod g+ws /var/www/html
[gives the "g+ws" permissions to every directory found under there; that
might not be what you want]
	gpasswd -a joe web
	gpasswd -a jane web
[those two commands add joe and jane to the web group.]

Note: I specified a group ID of #200 for the web group.  I tend to keep
organizational groups like this in the 200 range, so they don't get
mixed up in the 500 range that's used for each user's private group.

See any documentation on the "User Private Group" scheme for more info.
You may need to tweak with samba's configuration for umasks (the umask
should be 002) for the user private group scheme to work right.

Hope this helps,

Jeremy

-- 
/---------------------------------------------------------------------\
| Jeremy Portzer       jeremyp at pobox.com       trilug.org/~jeremy     |
| GPG Fingerprint: 712D 77C7 AB2D 2130 989F  E135 6F9F F7BC CC1A 7B92 |
\---------------------------------------------------------------------/
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 189 bytes
Desc: This is a digitally signed message part
URL: <http://www.trilug.org/pipermail/trilug/attachments/20030824/d590c92e/attachment.pgp>