Public share read-only for guests, write-permission for user

Public share read-only for guests, write-permission for user

wdTST 18 May 2011 12:05

Hi,

I just got a new MBL 2TB.
What I want to do is modify the Public share, so anyone (guest user) can read, but not write. But some user accounts should have write access.

I tried modifying /etc/trustees.conf to
…:nobody:RBE:admin:RWBEX:*:DU

and the overall_share accordingly with
valid users = nobody, admin
read list = nobody
write list = admin

But this fails because the User "nobody" is unknown to the "UI" webapp.

Does anyone know, how I can achieve this?

Thank you!

Re: Public share read-only for guests, write-permission for user

boondoklife 19 May 2011 01:59

Ditch the web gui and edit the smb.conf directly and manage your own file permissions.

Here is how I am able to achieve exactly what you are looking for:

Public Share

Everyone can read and write

smb.conf
[Public]
comment = Public Storage
path = /shares/internal/public
hosts allow = 10.0.1.0/24
guest ok = Yes
public = Yes
writable = Yes
browseable = Yes
create mode = 0666
directory mode = 6777
force user = guest
force group = domainadmins
create mask = 0666

File permissions
u+rwxs,g+rwxs,o+rwx-s,-t
u+rw-xs,g+rw-xs,o+rw-xs,-t

Shared Share

Everyone can read and only members of the domainadmins group can write

smb.conf
[Shared]
comment = Shared
path = "/shares/internal/Shared"
hosts allow = 10.0.1.0/24
guest ok = Yes
read only = Yes
force group = domainadmins
force user = root
create mode = 0664
directory mode = 6775
write list = @domainadmins

File permissions
u+rwxs,g+rxsw,o+rx-ws,-t
u+rw-xs,g+rw-xs,o+r-wxs,-t

Private Share

Members of the domainadmins group can read and write

smb.conf
[Private]
comment = Private
path = /shares/internal/private
hosts allow = 10.0.1.0/24
read only = Yes
browsable = Yes
guest ok = No
force group = domainadmins
force user = root
create mode = 0660
directory mode = 6770
write list = @domainadmins

File permissions
u+rwxs,g+rwxs,o-rwxs,-t
u+rw-xs,g+rw-xs,o-rwxs,-t

NOTE
You will need to make sure you configure groups and users correctly on the server using adduser, addgroup, and smbpasswd. You will also need to make sure you have made a guest user on the server and mapped it in the smb.conf file. Check out the smb.conf manpages for more info.

---

http://www.bit.ly/boondoklife

Last edited on 19 May 2011 02:01 by boondoklife Show more

Re: Public share read-only for guests, write-permission for user

wdTST 19 May 2011 09:10

Works like a charm!

Thank you very much.

Re: Public share read-only for guests, write-permission for user

brunojcm 12 Jun 2012 04:23

I tried to do it changing as less as possible from the UI-generated config. I created a public share on the UI and just added these 3 lines in the end of each share in /etc/samba/overall_share:

  write list = myuserwithwriteaccess
  force user = myuserwithwriteaccess
  read only = yes

The share whole conf was like that:

## BEGIN ## sharename = Music #
[Music]
  path = /shares/Music
  comment = All my musics
  public = yes
  browseable = yes
  writable = yes
  guest ok = yes
  map read only = no
  write list = myuserwithwriteaccess
  force user = myuserwithwriteaccess
  read only = yes
## END ##

Of course, myuserwithwriteaccess is some user of the MBL.

Re: Public share read-only for guests, write-permission for user

rmauri 30 Jan 2013 14:40

i want to achieve something else but am not sure if this would work.

Namely, I want to make the Public share private. I can not move all the files and loose the torrent links and all.

So wold that work if I would simply edit:

smb.conf
[Public]
comment = Public Storage
path = /shares/internal/public
hosts allow = 10.0.1.0/24
guest ok = No
public = No
writable = Yes
browseable = Yes
create mode = 0666
directory mode = 6777
force user = myusername
force group = domainadmins
create mask = 0666

Or is my logic over simple?

Thank you for your comments!