SMB: Verzeichnisse/Dateien immer als admin anlegen

Zitat von "Loewe81"

Ich habe jetzt gehört, dass es da wohl eine erweiterte Einstellung für den SMB-Server gibt, mit der ich ALLE Verzeichnisse/Dateien mit dem gleichen Benutzer/Gruppe anlegen kann. Daher meine drei Fragen:
- geht das wirklich

Ja

Zitat

force group (S)
This specifies a UNIX group name that will be assigned as the default primary group for all users connecting to this service. This is useful for sharing files by ensuring that all access to files on service will use the named group for their permissions checking. Thus, by assigning permissions for this group to the files and directories within this service the Samba administrator can restrict or allow sharing of these files.
In Samba 2.0.5 and above this parameter has extended functionality in the following way. If the group name listed here has a '+' character prepended to it then the current user accessing the share only has the primary group default assigned to this group if they are already assigned as a member of that group. This allows an administrator to decide that only users who are already in a particular group will create files with group ownership set to that group. This gives a finer granularity of ownership assignment. For example, the setting force group = +sys means that only users who are already in group sys will have their default primary group assigned to sys when accessing this Samba share. All other users will retain their ordinary primary group.
If the force user parameter is also set the group specified in force group will override the primary group set in force user.

Default: force group =
Example: force group = agroup

force user (S)
This specifies a UNIX user name that will be assigned as the default user for all users connecting to this service. This is useful for sharing files. You should also use it carefully as using it incorrectly can cause security problems.
This user name only gets used once a connection is established. Thus clients still need to connect as a valid user and supply a valid password. Once connected, all file operations will be performed as the "forced user", no matter what username the client connected as. This can be very useful.
In Samba 2.0.5 and above this parameter also causes the primary group of the forced user to be used as the primary group for all file activity. Prior to 2.0.5 the primary group was left as the primary group of the connecting user (this was a bug).

Default: force user =
Example: force user = auser

Alles anzeigen

Zitat von "Loewe81"

- wenn ja, wo und wie konfiguriere ich das bei meinem QNAP

Über die Konsole (SSH) oder WinSCP (SSH) als Remote-Explorer in der Datei "/etc/config/smb.conf".
Manuelle Änderungen am System sind auf EIGENE Gefahr

Zitat von "Loewe81"

- und gibt es so eine globale Einstellung auch für die Zugriffsrechte von neuen Verzeichnissen/Dateien

Ja, gibt es.

Stefan

Um auch die Zugriffsrechte für die ordner und Dateien festzusetzen, gibt es ebenfalls Paramter:

Zitat

force create mode (S)

This parameter specifies a set of UNIX mode bit permissions that will always be set on a file created by Samba. This is done by bitwise 'OR'ing these bits onto the mode bits of a file that is being created. The default for this parameter is (in octal) 000. The modes in this parameter are bitwise 'OR'ed onto the file mode after the mask set in the create mask parameter is applied.
The example below would force all newly created files to have read and execute permissions set for 'group' and 'other' as well as the read/write/execute bits set for the 'user'.

Default: force create mode = 000
Example: force create mode = 0755

force directory mode (S)

This parameter specifies a set of UNIX mode bit permissions that will always be set on a directory created by Samba. This is done by bitwise 'OR'ing these bits onto the mode bits of a directory that is being created. The default for this parameter is (in octal) 0000 which will not add any extra permission bits to a created directory. This operation is done after the mode mask in the parameter directory mask is applied.
The example below would force all created directories to have read and execute permissions set for 'group' and 'other' as well as the read/write/execute bits set for the 'user'.

Default: force directory mode = 000
Example: force directory mode = 0755

Alles anzeigen