Samba permissions (yes again !)

Question

Hello
I have been struggling with a permission issue with Samba my whole afternoon, and it really (I mean really) starts to upset me.
The user I am testing with is a member of the group nobody.
I have a share defined as it :
security = share
[public]
path = /home/smbshare
public = yes
only guest = yes
writable = yes
printable = no
create mask = 0775
force create mode = 0775
The permissions on my smbshare folder (and the files within) are :
drwxrwsr-x 10 nobody nobody 4096 Jun 5 17:35 smbshare
When I am using dolphin to browse my share, everything is working as expected. I do not have to enter a pwd and I can create, rename, delete without any problems.
For instance if I go to :
smb://127.0.0.1/public/Pictures/
And create a file with Dolphin, the permissions are exactly what I want :
-rwxrwxr-x 1 nobody nobody 2 May 20 16:33 test-dolphin.txt
Now, I want to mount the folder in my user home directory. I am not using Dophin anymore, I do everything from the terminal.
$ sudo mount -t cifs //127.0.0.1/public/Pictures /home/myuser/Pictures/
$ cd Pictures/
$ touch test-konsole.txt
touch: cannot touch `test-konsole.txt': Permission denied
But the file is created anyway... with the incorrect permissions (rwxr-xr-x instead of rwxrwxr-x)
-rwxr-xr-x 1 nobody nobody 0 Aug 28 19:01 test-konsole.txt
I am not an expert with the samba setup, so what am I missing here ?
Thanks!
Last edited by Cobaltounet (2011-08-28 23:03:31)

Answer 1

The "user" nobody is a very special account, I know that much, and will not work with most apps that a user would need to start.  It's a non-login user account which is used for security purposes to deny an attacker a proper login shell.  I'm pretty sure Samba treats the account & user group "nobody" in a special fashion, at least that's what is in my memory.  You might want to check the Samba website's official documentation about this.