System information

62 Deploying Samba on IBM Eserver BladeCenter
Each share definition starts with the share name in brackets “[]”. Below this name are the
parameters and values that define the share.
Share masks
When files are made available through a share, Samba must translate the UNIX permissions
into Windows permissions. Share mask are used for setting and controlling UNIX file and
directory permissions or modes. The most important parameters are explained in Table 4-6.
Table 4-6 Share mask parameters
Defining home directories
Samba has a special section called [homes] for defining user home directories. The home
directory for each user id is specified in /etc/passwd on the server.
When a client requests a connection to a file share, existing file shares are scanned for the
share. If a match is found, that share is used. If no match is found and there is a [homes]
share defined in the configuration file, the requested share is assumed to be a user name.
Samba then queries the password database for the name. If a matching entry is found, the
home directory for that ID is shared as home using the [homes] parameters. The home share
definition uses the same parameters as a normal share definition. An example of a home
share definition in the smb.conf configuration file is shown in Example 4-6 on page 63.
read list List of users that have read access to the share. Can include group names
using the @group syntax.
read only If set to yes, share is read only. Possible values are yes and no.
valid users List of users that can access the share.
Parameter Description
create mask Mask used for converting DOS modes to UNIX modes when creating files.
Value is 0744 if parameter is not set.
security mask Mask determines which UNIX modes bits a user can modify on a file from a
Windows client. Any mask bits set to 1 can be modified. Default is 0777.
force create mode Any permission bits set to 1 will be set on all files created in this resource.
The setting can be modified after the file is created. Default setting is 000.
force security
mode
Any mode or permission bits set to 1 will be set on all files and can not be
modified from a Windows client. Default setting is 000.
directory mask Mask used for converting DOS permissions to UNIX permission then
creating directories. Value is 0755 if parameter is not set.
directory security
mask
Mask used for determining which UNIX permission bits can be modified by
a Windows NT client through the security dialog box. Value is 0777 if
parameter is not set.
force directory
mode
Any permission bits set to 1 will be set on all directories created in this
resource. Default setting is 000.
force directory Mask determines which UNIX permission bits on a directory can be modified
from a Windows client. Default setting is 0777.
Parameter Description