Topic: Default permissions on i-bays

[judgej]

I seem to be having some problems with i-bay permissions, but I'm not sure whether it is a bug, my misunderstanding, or something else.

I am trying to create simple file-sharing i-bays, but am finding that users cannot write to those i-bays. The permissions set up for one of the i-bays is as follows:

4 drwxrwsr-x   2 root mygroup  4096 Sep  6 18:14 files
4 drwxrwsr-x   2 root mygroup  4096 Oct 26 10:15 html

I'm not interested in the html folder, just the 'files' folder, since I'm just sharing files.

The privileges set up for that i-bay are:

write: group; read: everyone

The group is 'mygroup'.

A user (also a member of the group 'mygroup') is unable to write to the i-bay. Something here does not look quite right. Should the i-bay folders not be owned by the pseudo-user created for the i-bay (e.g. the 'myibay' user), rather than root? Should the owner permissions not have the sticky-bit set? I'm just casting my mind back to how I'm sure SME5 and SME6 used to work.

Obviously I'll raise this as a bug if necessary, but I'm just asking here first.

[judgej]

Related to this - or perhaps my main permissions problem - is that after creating an i-bay, I cannot write to that i-bay from Windows XP until after the XP machine has been rebooted. Rebooting the server makes no difference, it is the client machine that has to be restarted. Why should that be so? I'm not using workgroup logins, just simple file shares.

[Edit: actually, it seems that disabling the LAN connection and the reenabling it again on XP is enough to be able to start writing to the i-bays. Weird XP. It never used to do this. If I believed in conspiracy, I could easily accept that a recent MS update, so ensure network compatibility with Vista, may have accidently broken XP's protocol talking to Samba. Just accidently, of course.]

[byte]

What you really need to do is once you've created your group and set your ibay up to allow only that group you will find the users that are in that group will need to simply log off and log on.

This has always been the way in windows world to basically re authenticate against the SME Server.

[judgej]

What you really need to do is once you've created your group and set your ibay up to allow only that group you will find the users that are in that group will need to simply log off and log on.

I guess I'm seeing this problem because I'm not using domain logins, just simple file shares, so there is actually no way to log out. Even logging out of the user did not fix the problem, because the network is still running in the background. Disabling the network connection and reenabling it was the closest to logging out and in of a domain, and seems to do the trick.