Samba file permission issue with Microsoft Office

March 13th, 2007 Posted in Linux, Office, Windows XP

When hosting both windows user profiles and home directories from the same share within samba, files saved in Word and Excel (only Office XP or newer seem to be affected) become read only. Upon creating a document, the first save succeeds fine. If you look at the Unix permissions for the file, it shows read write and execute for the user (depending on your create mode in this case we’re using 7 for the user’s permissions). When you try to save the file again, it succeeds, but when you look at permissions, the write bit has been removed from the user’s permissions. Another save of the file will get you a sharing violation error from Excel or Word.

In our setup, we’ve just recently switched from one machine hosting roaming profiles for Windows and another hosting the rest of the file sharing services to a single server doing both. The problem stemmed from having bothprofile acls = yes and nt acl support = yes in smb.conf.

The odd behavior exhibited by Excel and Word stemmed from having both of those set to yes. The profile acls setting is required when hosting Windows roaming profiles. Windows will refuse to load the profile without it. NT acl support attemps to map Unix permissions to Windows NT access control lists, and is set to yes by default.

The solution is to disable NT acl support for the share. The permissions set by profile acls will still allow the user access to write to their files without having NT acl support enabled.

Here is our homes configuration in smb.conf for reference:
[homes]
read only = no
create mode = 0755
force create mode = 0755
preserve case = yes
short preserve case = yes
veto files = /.mail/
share modes = no
csc policy = disable
profile acls = yes
nt acl support = no





  1. 5 Responses to “Samba file permission issue with Microsoft Office”

  2. By tretret on Jun 18, 2008

    I found this didn’t work.
    I needed to add posix locking = no

  3. By Gaijin on Oct 8, 2008

    Hello everybody.

    Very good post : I had exactly the same configuration (users’ PC - Windows XP SP2 Word Excel 2007 and directories - both home and users - in the same share with Samba 3.0) and the same pbs : ACL rights set up and locking users’ access when saving a Word document.

    In /etc/samba/smb.conf, nt acl support changed from yes to no, and Linux permissions are kept.
    Thank’s.

  4. By Matthias on Feb 9, 2009

    Thanks for that hint by Gaijin. It has solved exact my problem. :)

  5. By Hendro Wibowo on Apr 5, 2009

    Thank you very much!!

    Whole day scratching my hair for this problem, and it is finally solved by disabling the nt acl support in your blog.

    :)
    Hendro.

  6. By admin on Apr 5, 2009

    Hi Hendro,
    I’m glad I’ve been able to help.

Post a Comment

Story Pulse

graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.

7,188 total reads, averaging 9 daily
stats powered by bsuite


Incoming searches for this post: samba office 2007 (56) - samba profile acls (47) - office 2007 samba (44) - samba file permissions (33) - samba sharing violation (30) - samba nt acl support (28) - vista samba permissions (21) - samba file permission (17) - excel samba (16) - samba excel (15) - samba excel read only (15) - samba microsoft office (14) - samba profiles permissions (14) - vista samba profile (12) - excel 2007 samba (12) - microsoft office samba (12) - excel sharing violation (11) - samba office read only (11) - samba "nt acl support" (11) - windows (10) - samba profile permissions (10) - samba permissions (10) - samba office 2007 read only (10) - samba preserve permissions (10) - samba profile acl (10) - samba excel 2007 (9) - vista samba permission (9) - excel 2007 sharing violation (8) - samba "profile acls" (8) - samba profile permission (8) - vista samba read only (8) - samba excel sharing violation (8) - word 2007 samba (8) - office 2007 samba problem (7) - samba vista profile (7) - sharing violation samba (7) - profile acls samba (6) - samba vista roaming profile (6) - "nt acl support" (6) - office samba (6) - samba windows file permissions (6) - samba microsoft office read only (6) - all (6) - office 2007 samba read only (6) - samba MS office (6) - ms office samba (6) - samba office 2007 (6) - sharing violation Excel 2007 (5) - samba vista profiles (5) - vista samba acl (5) - samba permissions vista (5) - samba office (5) - samba acl office (5) - samba profiles permission (5) - Office 2007+Samba (5) - samba 2 vista (5) - Microsoft Word Samba (5) - samba permission (5) - samba vista read only (5) - samba office 2003 (5) - samba "office 2007" (5) - samba word 2007 (5) - samba vista acl (4) - samba vista roaming (4) - samba vista roaming profiles (4) - samba roaming profile permissions (4) - samba roaming profiles permissions (4) - samba acl (4) - samba office permissions (4) - microsoft office 2007 samba (4) - samba excel save (4) - "profile acls" samba (4) - samba vista permission (4) - samba roaming profiles vista (4) - samba office2007 (4) - samba vista (4) - nt acl support samba (4) - samba vista permissions (4) - samba nt acl (4) - microsoft office saves as read-only documents samba (4) - samba and office 2007 (4) - samba microsoft access (4) - excel samba read only (4) - samba office documents read only (4) - samba permissions from windows (4) - nt acl support = No (3) - vista roaming profile samba (3) - samba preserve permission (3) - samba office readonly (3) - samba roaming profile permission (3) - excel samba permissions (3) - vista roaming profiles samba (3) - roaming profile acl (3) - "profile acls" (3) - samba roaming profiles suck (3) - excell samba (3) - samba vista profil (3) - vista acl disable (3) - samba roaming profile (3) - ms word samba (3) - vista samba file permissions (3) - samba file permissions changing on save (3) - samba profile acls (3) - roaming profiles suck (3) - sharing violation in excel (3) - DISABLE ACL VISTA (3) - vista samba roaming profiles (3) - samba profile vista (3) - vista samba no permission (3) - "word 2007" samba (3) - Office 2007 + SAMBA (3) - samba microsoft word (3) - samba vista profile not saved (3) - samba microsoft office read-only (3) - nt acl support = yes (3) - nt acl support (3) - samba preserve windows permission (3) - "nt acl support" samba (3) - samba office 2007 issue (3) - vista samba profiles (3) - office samba read only (3) - samba share violation (3) - samba microsoft office file locking (3) - office 2007 samba permissions (3) - samba windows permissions (3) - samba excel permissions (3) - samba office 2007 locking (3) - samba office 2007 permissions (3) - acls samba excel (3) - word samba read only (3) - samba office 2007 acl (3) - ms word 2003 file permission error (3) - SAMBA PROBLEM OFFICE 2007 (3) - samba 3.3.0 office read only (3) - samba word read only (3) - samba preserve file permissions (2) - "excel sharing violation" (2) - samba vista execute (2) - profile acls = yes (2) - microsoft office samba share (2) - microsoft office sharing violation (2) - samba excel read only file (2) - samba vista read-only (2) - sharing violation in linux samba file sharing (2) - share permission error when saving linux (2) - samba office read-only (2) - vista samba roaming (2) - ACL Samba vista (2) - samba profile not saved (2) - windows vista samba profiles (2) -