Topic: Ibay permission issue

[Tejaswini]

If u dont mind...can u explain me how to modify that ibay....I din't get how to modify that...

[janet]

Tejaswini

Open server manager, click information bays, click modify next to the ibay in question, click save

No need to actually change anything, but you must click save

[Tejaswini]

I got same result.

[root@newdellsme1 ibays]# ll -ls accdata/
total 12
4 drwxrws---   2 root  accounts 4096 Dec  8  2006 cgi-bin
4 drwxrws---  59 swamy accounts 4096 Sep 25 11:18 files
4 drwxrws---   2 root  accounts 4096 Jun 22  2007 html

[janet]

Tejaswini

I would ask what do you actually mean by "access the ibays" ?

All users will be able to see all ibays, but not actually access and open files unless they are members of the group that the ibay belongs to.

Can your users actually open and save files in the ibay they should not have access to ?

Please show the complete output of
cat /etc/samba/smb.conf

After that you could do
signal-event post-upgrade
signal-event reboot

and see if access changes

[Tejaswini]

Users can access and open the files although they are not members of the group that the ibay belongs to.

Here is the output of /etc/samba/smb.conf

[homes]
comment = Home directory
browseable = no
guest ok = no
read only = no
writable = yes
printable = no
create mode = 0660
force create mode = 0660
directory mode = 0770
force directory mode = 0770
path = /home/e-smith/files/users/%S/home
   root preexec = "/usr/local/bin/generate_netlogon /home/e-smith/files/samba/netlogon/netlogon.template /home/e-smith/files/users/%U/home/netlogon.bat %U %m %a %T"
vfs objects = recycle
  recycle:exclude_dir=/tmp|/temp|/cache
  recycle:repository=Recycle Bin
  recycle:versions=False
  recycle:keeptree=True
  recycle:touch=True
  recycle:exclude=*.tmp|*.temp|*.o|*.obj|~$*

[printers]
comment = All Printers
path = /var/spool/samba
browseable = no
guest ok = no
writable = no
printable = yes
use client driver = yes

[netlogon]
comment = Network Logon Service
path = /home/e-smith/files/samba/netlogon
guest ok = yes
writable = yes
browseable = no

[print$]
comment = Printer drivers
path = /home/e-smith/files/samba/printers
guest ok = yes
browseable = yes
writable = no


[Primary]
comment = Primary i-bay


path = /home/e-smith/files/ibays/Primary
read only = no
writable = yes
printable = no
inherit permissions = yes
create mode = 0640


force group = shared




[accdata]
comment = accounts data


path = /home/e-smith/files/ibays/accdata/files
read only = no
writable = yes
printable = no
inherit permissions = yes
create mode = 0660


force group = accounts


vfs objects = recycle
  recycle:exclude_dir=/tmp|/temp|/cache
  recycle:repository=Recycle Bin
  recycle:versions=False
  recycle:keeptree=True
  recycle:touch=True
  recycle:exclude=*.tmp|*.temp|*.o|*.obj|~$*


[assmdata]
comment = assembly data


path = /home/e-smith/files/ibays/assmdata/files
read only = no
writable = yes
printable = no
inherit permissions = yes
create mode = 0660


force group = assembly


vfs objects = recycle
  recycle:exclude_dir=/tmp|/temp|/cache
  recycle:repository=Recycle Bin
  recycle:versions=False
  recycle:keeptree=True
  recycle:touch=True
  recycle:exclude=*.tmp|*.temp|*.o|*.obj|~$*


[common]
comment = common data


path = /home/e-smith/files/ibays/common/files
read only = no
writable = yes
printable = no
inherit permissions = yes
create mode = 0660


force group = shared


vfs objects = recycle
  recycle:exclude_dir=/tmp|/temp|/cache
  recycle:repository=Recycle Bin
  recycle:versions=False
  recycle:keeptree=True
  recycle:touch=True
  recycle:exclude=*.tmp|*.temp|*.o|*.obj|~$*


[comptest]
comment = data testing


path = /home/e-smith/files/ibays/comptest/files
read only = no
writable = yes
printable = no
inherit permissions = yes
create mode = 0660


force group = test




[designdata]
comment = design data


path = /home/e-smith/files/ibays/designdata/files
read only = no
writable = yes
printable = no
inherit permissions = yes
create mode = 0660


force group = design


vfs objects = recycle
  recycle:exclude_dir=/tmp|/temp|/cache
  recycle:repository=Recycle Bin
  recycle:versions=False
  recycle:keeptree=True
  recycle:touch=True
  recycle:exclude=*.tmp|*.temp|*.o|*.obj|~$*


[glpi]
comment = ibay for glpi and ocs inventory


path = /home/e-smith/files/ibays/glpi
read only = no
writable = yes
printable = no
inherit permissions = yes
create mode = 0660


force group = admin




[inspdata]
comment = inspection data


path = /home/e-smith/files/ibays/inspdata/files
read only = no
writable = yes
printable = no
inherit permissions = yes
create mode = 0660


force group = inspection


vfs objects = recycle
  recycle:exclude_dir=/tmp|/temp|/cache
  recycle:repository=Recycle Bin
  recycle:versions=False
  recycle:keeptree=True
  recycle:touch=True
  recycle:exclude=*.tmp|*.temp|*.o|*.obj|~$*


[iso9001-2000]
comment = iso


path = /home/e-smith/files/ibays/iso9001-2000/files
read only = no
writable = yes
printable = no
inherit permissions = yes
create mode = 0664


force group = iso9001




[processdata]
comment = processdatas


path = /home/e-smith/files/ibays/processdata/files
read only = no
writable = yes
printable = no
inherit permissions = yes
create mode = 0664


force group = process




[proddata]
comment = production data


path = /home/e-smith/files/ibays/proddata/files
read only = no
writable = yes
printable = no
inherit permissions = yes
create mode = 0664


force group = production


vfs objects = recycle
  recycle:exclude_dir=/tmp|/temp|/cache
  recycle:repository=Recycle Bin
  recycle:versions=False
  recycle:keeptree=True
  recycle:touch=True
  recycle:exclude=*.tmp|*.temp|*.o|*.obj|~$*


[progdata]
comment = program data


path = /home/e-smith/files/ibays/progdata/files
read only = no
writable = yes
printable = no
inherit permissions = yes
create mode = 0660


force group = programmers


vfs objects = recycle
  recycle:exclude_dir=/tmp|/temp|/cache
  recycle:repository=Recycle Bin
  recycle:versions=False
  recycle:keeptree=True
  recycle:touch=True
  recycle:exclude=*.tmp|*.temp|*.o|*.obj|~$*


[securitydata]
comment = security data


path = /home/e-smith/files/ibays/securitydata/files
read only = no
writable = yes
printable = no
inherit permissions = yes
create mode = 0660


force group = security


vfs objects = recycle
  recycle:exclude_dir=/tmp|/temp|/cache
  recycle:repository=Recycle Bin
  recycle:versions=False
  recycle:keeptree=True
  recycle:touch=True
  recycle:exclude=*.tmp|*.temp|*.o|*.obj|~$*


[vendordata]
comment = vendor data


path = /home/e-smith/files/ibays/vendordata/files
read only = no
writable = yes
printable = no
inherit permissions = yes
create mode = 0640


force group = vendor


vfs objects = recycle
  recycle:exclude_dir=/tmp|/temp|/cache
  recycle:repository=Recycle Bin
  recycle:versions=False
  recycle:keeptree=True
  recycle:touch=True
  recycle:exclude=*.tmp|*.temp|*.o|*.obj|~$*

[janet]

Tejaswini

I got same result.

I was wonderig whether access ability changed after doing the ibay modify & save.

[janet]

Tejaswini

What version sme are you running ?
Your smb.conf is missing a whole Global section (compared to my sme7.4).
Did you install the Shared Folders contrib referred to earlier in this thread ?

I think this problem should be moved to bugzilla, it's getting out of hand here.
Please open a bug there and put a link to that bug in this thread, and please summarise what has already happened in this thread, with a link back to this thread.

Also attach the output of the following commands to your bug report

/sbin/e-smith/audittools/newrpms
/sbin/e-smith/audittools/templates

Please do not post any more answers here.

[Stefano]

I'll ask the moderator to close lock this 3ad after OP posted the bugzilla reference