Samba, Active Directory, and Permissions [SOLVED]

[BigBeer]

Ok here is the setup, it might make your head hurt.

I have samba joined to my Active Directory and mapping the AD users with winbind. <- Works good!

I am attempting to make a shared directory that any user can read, but only members of a certian AD security goup can write to.
I would like to preserve file ownership so only the user that created the file can write to it.
I also want people to be able to write to a sub dir that anyone creates, but I want to preserve file ownership inside that sub dir.

Examples:
Bob makes a file, Alice can read it.
Only Bob can make changes/del the file.
Bob and Alice can both write to share because the are in the same department.
If Bob makes a folder called "Reports" inside the share, Alice can save file(s) inside the folder, but only she can make changes/del the file(s).
Chuck, who isn't in the same department has read only access to everything.

Clear as mud ??

I have the following in my smb.conf

[BigBeer]

The strangeness continues....

If I chmod 700 a file in the directory, other users can not read it, but they can still delete it.

Maybe I am missing something in basic unix file permissions for the root directory.

[JeliJami]

it doesn't realy matter what the permissions of a file are, when it comes to deleting it:
as long as you have write permissions on the directory that holds the file, you can delete it

deleting does not change the file, but it changes the directory
hence, you need write permission on the dir
_________________
Unanswered Post Initiative | Search | FAQ
Former username: davjel

[BigBeer]

The answer for my situation was the sticky bit.

After I set it to the root directory, and added it to my dir create mask, my permissions acted like I expected.