[KLUG Members] RE:Concerns about updating samba

[Peter Buxton]

On Tue, Feb 11, 2003 at 03:21:38PM -0500, Bob Kanaley wrote:

> I think the first part of Peter's message probably refers to using the
> NT/2K/XPP built-in accounts like Backup Operators, Power Users,
> Replicators, Users, Guests, etc that have pre-defined access rights so
> that all you have to do is assign a user to the predefined group that
> corresponds to her job function.

Yes. Them. I don't understand them. :-)

I noticed the smbgroupedit(8) command and tried to use it. One problem:
I modified some groups such as:

Power Users (S-1-5-32-547) -> company
Print Operators (S-1-5-32-550) -> -1

Now, I set Power users to a Unix group and discovered I couldn't set the
Unix group back to "-1", as smbgroupedit seemed to lack an -x option. I
noticed that this interfered with the proper operation of the Samba
groups. Group "company" only is allowed access to the general share, and
file creation permissions are set to g+rw to ensure smooth access, but
while this was set, the group permissions were not being set (0700) and
fellow share members could not edit each other's files.  Unable to
delete the group as I had tried, I simply set Power Users to "nogroup".
This restored proper perm bit handling.

Okay, so I was a bit hasty, or, as some would say, stupid. But what
exactly did I set there, what did it do, and why am I unable to set it
back?

-- 
AIX is Unix from the universe where Spock has a beard.