Topic: Ibay permission issue

[Tejaswini]

Hi,
All my ibays are accessible by all the users even though they don't have permission to access.

To test the issue, I just created a new user. Even if this user does not have permission for ANY ibays, still it gets access to all ibays. 

Please help.

[Stefano]

please explain..

how do you setup your ibays?

is the new user member of a group?

[Tejaswini]

Thanks for quick reply.

No ibay has "Everyone" Permission.

The new user is not a member of ANY Group.

[byte]

No ibay has "Everyone" Permission.

The new user is not a member of ANY Group.

If the test ibay has "Everyone" permission set as read/write then that's no surprise that the user can have access.

Try setting up groups to restrict user access to ibays and make sure you log off user and log on user at the client end to re authenticate.

[Tejaswini]

I have NOT set "Everyone" to any ibays....Its group read and write only...Although if the user is not a member of the group he can access the ibay.

[Stefano]

ok.. did you follow byte's advice?

try to re-expand the smb.conf template and to restart smb service..

anything strange in the logs?

[piran]

Please help.

http://wiki.contribs.org/SharedFolders

[byte]

I have NOT set "Everyone" to any ibays....Its group read and write only...Although if the user is not a member of the group he can access the ibay.

Show:

db accounts show <ibayname>
db accounts show <groupname>

Where group name is the group set to ibay name.

[Tejaswini]

db accounts show accdata
    accdata=ibay
    CgiBin=disabled
    Gid=5010
    Group=accounts
    KeepVersions=disabled
    Name=accounts data
    PasswordSet=no
    PublicAccess=none
    RecycleBin=enabled
    Uid=5010
    UserAccess=wr-group-rd-group

[root@newdellsme1 ~]# db accounts show accounts
accounts=group
    Description=accounts staff
    Gid=5002
    Members=ashwinraj,girish,psekar,purohit,ravisunny,rkpurohit,swamy,veeresh
    Uid=5002

[Tejaswini]

Other than accounts group users,any other group users can access accdata ibay....

[StuC]

Are the users Windows clients with Workgroup or Domain log-on?
Can they see their home folder OK and not "admin"?

[Tejaswini]

Windows clients are members of the SME domain.

I didn't understand your 2nd Q. If I have understood your question to some extend then the user is able access his home directory. When I log in as a user it can see only it's home directory not any others.

[byte]

[root@newdellsme1 ~]# db accounts show accounts
accounts=group
    Description=accounts staff
    Gid=5002
    Members=ashwinraj,girish,psekar,purohit,ravisunny,rkpurohit,swamy,veeresh
    Uid=5002

So the user that CAN access the "accdata" is NOT in the above "members" correct ? If so that should work out of the box.  Can you log on to the console and type:

cd /home/e-smith/files/ibays/

then type:

ll -ls accdata

?

I notice you also have recycle bin enabled, there is a bug see:

Bug 1734

[Tejaswini]

[root@newdellsme1 ibays]# ll -ls accdata
total 12
4 drwxrws---   2 root  accounts 4096 Dec  8  2006 cgi-bin
4 drwxrws---  59 swamy accounts 4096 Sep 24 11:28 files
4 drwxrws---   2 root  accounts 4096 Jun 22  2007 html
[root@newdellsme1 ibays]#

[janet]

Tejaswini

As per bug 1734 try modifying and then saving accdata ibay
then again run
ll -ls accdata
show us the results