Samba file permission issue with Microsoft Office

March 13th, 2007 Posted in Linux, Office, Windows XP

When hosting both windows user profiles and home directories from the same share within samba, files saved in Word and Excel (only Office XP or newer seem to be affected) become read only. Upon creating a document, the first save succeeds fine. If you look at the Unix permissions for the file, it shows read write and execute for the user (depending on your create mode in this case we’re using 7 for the user’s permissions). When you try to save the file again, it succeeds, but when you look at permissions, the write bit has been removed from the user’s permissions. Another save of the file will get you a sharing violation error from Excel or Word.

In our setup, we’ve just recently switched from one machine hosting roaming profiles for Windows and another hosting the rest of the file sharing services to a single server doing both. The problem stemmed from having bothprofile acls = yes and nt acl support = yes in smb.conf.

The odd behavior exhibited by Excel and Word stemmed from having both of those set to yes. The profile acls setting is required when hosting Windows roaming profiles. Windows will refuse to load the profile without it. NT acl support attemps to map Unix permissions to Windows NT access control lists, and is set to yes by default.

The solution is to disable NT acl support for the share. The permissions set by profile acls will still allow the user access to write to their files without having NT acl support enabled.

Here is our homes configuration in smb.conf for reference:
[homes]
read only = no
create mode = 0755
force create mode = 0755
preserve case = yes
short preserve case = yes
veto files = /.mail/
share modes = no
csc policy = disable
profile acls = yes
nt acl support = no





  1. One Response to “Samba file permission issue with Microsoft Office”

  2. By tretret on Jun 18, 2008

    I found this didn’t work.
    I needed to add posix locking = no

Post a Comment

Story Pulse

graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.

3,751 total reads, averaging 8 daily
stats powered by bsuite


Incoming searches for this post: samba office 2007 (20) - samba sharing violation (17) - samba file permissions (17) - samba nt acl support (16) - samba profile acls (13) - samba excel (12) - vista samba permissions (12) - office 2007 samba (12) - excel samba (9) - samba office 2007 read only (8) - samba file permission (7) - windows (7) - samba microsoft office (7) - vista samba profile (7) - microsoft office samba (7) - samba vista roaming profile (6) - samba permissions (6) - samba vista profile (6) - "nt acl support" (5) - samba profile permissions (5) - excel sharing violation (5) - samba excel read only (5) - office 2007 samba problem (5) - excel 2007 samba (5) - samba 2 vista (5) - ms office samba (5) - samba vista roaming profiles (4) - samba acl (4) - samba excel save (4) - samba windows file permissions (4) - samba vista permission (4) - all (4) - vista samba read only (4) - samba vista (4) - samba preserve permissions (4) - sharing violation samba (4) - microsoft office saves as read-only documents samba (4) - samba MS office (4) - nt acl support = No (3) - vista roaming profile samba (3) - excel 2007 sharing violation (3) - sharing violation Excel 2007 (3) - samba vista acl (3) - samba vista roaming (3) - excel samba permissions (3) - samba roaming profile permissions (3) - samba vista profiles (3) - samba roaming profiles permissions (3) - vista roaming profiles samba (3) - office samba (3) - "profile acls" (3) - samba roaming profiles vista (3) - samba profile permission (3) - samba file permissions changing on save (3) - samba profiles permissions (3) - sharing violation in excel (3) - samba excel 2007 (3) - samba profile vista (3) - samba office read only (3) - samba vista profile not saved (3) - nt acl support samba (3) - office 2007 samba read only (3) - samba permission (3) - samba preserve windows permission (3) - vista samba profiles (3) - samba office 2003 (3) - samba "nt acl support" (3) - samba microsoft office file locking (3) - "excel sharing violation" (2) - samba vista execute (2) - profile acls = yes (2) - microsoft office sharing violation (2) - samba preserve permission (2) - samba excel read only file (2) - samba roaming profile permission (2) - sharing violation in linux samba file sharing (2) - share permission error when saving linux (2) - samba "profile acls" (2) - vista samba acl (2) - samba office read-only (2) - vista samba roaming (2) - ACL Samba vista (2) - samba office permissions (2) - microsoft office 2007 samba (2) - sharing violation excel vista (2) - samba read-only (2) - samba permissions vista (2) - excell samba (2) - vista acl disable (2) - samba office 2007 problems saving files (2) - samba microsoft office read only (2) - samba roaming profile (2) - ms word samba (2) - profiles acls samba (2) - samba msoffice read only (2) - samba office file permissions (2) - excel read-only samba (2) - Samba + Sharing Violation (2) - windows vista samba profile (2) - FILE PERMISSIONS ON SAMBA SERVER (2) - samba profile acls (2) - saving excel 2003 sharing error (2) - samba file permission error (2) - roaming profiles suck (2) - DISABLE ACL VISTA (2) - samba office (2) - samba vista user profile (2) - vista samba roaming profiles (2) - office 2007 et samba (2) - samba+sharing violation (2) - samba permissions windows (2) - vista samba no permission (2) - "word 2007" samba (2) - samba permission error (2) - samba excel save problem (2) - "office 2007" read only samba (2) - Office 2007 + SAMBA (2) - samba preserve permissions microsoft office (2) - excel 2007 permissions (2) - samba acl excel (2) - samba acl office (2) - samba profiles permission (2) - samba excel word (2) - vista samba roaming profile (2) - windows SAMBA file permissions (2) - disable vista acl (2) - vista files samba execute (2) - Office 2007+Samba (2) - vista error samba share (2) - samba file sharing error (2) - samba file save permission (2) - samba save file error (2) - vista samba permission (2) - nt acl support = yes (2) - nt acl support (2) - vista will not load profile from samba (2) - Microsoft Word Samba (2) - samba profile acl (2) - +samba +files +permission (2) - Microsoft office file permission (2) - excel samba permission change (2) - samba saving error xp (2) - samba office 2007 save problem (2) - samba office 2007 issue (2) - Samba Shares for roaming Microsoft profiles (2) - samba File sharing violation problem (2) - samba file rights ms office (2) - samba excel file permission bug (2) - samba excel bug (2) - samba vista save profile (2) -