Samba file permission issue with Microsoft Office

March 13th, 2007 Posted in Linux, Office, Windows XP

When hosting both windows user profiles and home directories from the same share within samba, files saved in Word and Excel (only Office XP or newer seem to be affected) become read only. Upon creating a document, the first save succeeds fine. If you look at the Unix permissions for the file, it shows read write and execute for the user (depending on your create mode in this case we’re using 7 for the user’s permissions). When you try to save the file again, it succeeds, but when you look at permissions, the write bit has been removed from the user’s permissions. Another save of the file will get you a sharing violation error from Excel or Word.

In our setup, we’ve just recently switched from one machine hosting roaming profiles for Windows and another hosting the rest of the file sharing services to a single server doing both. The problem stemmed from having bothprofile acls = yes and nt acl support = yes in smb.conf.

The odd behavior exhibited by Excel and Word stemmed from having both of those set to yes. The profile acls setting is required when hosting Windows roaming profiles. Windows will refuse to load the profile without it. NT acl support attemps to map Unix permissions to Windows NT access control lists, and is set to yes by default.

The solution is to disable NT acl support for the share. The permissions set by profile acls will still allow the user access to write to their files without having NT acl support enabled.

Here is our homes configuration in smb.conf for reference:
[homes]
read only = no
create mode = 0755
force create mode = 0755
preserve case = yes
short preserve case = yes
veto files = /.mail/
share modes = no
csc policy = disable
profile acls = yes
nt acl support = no





  1. 6 Responses to “Samba file permission issue with Microsoft Office”

  2. By tretret on Jun 18, 2008

    I found this didn’t work.
    I needed to add posix locking = no

  3. By Gaijin on Oct 8, 2008

    Hello everybody.

    Very good post : I had exactly the same configuration (users’ PC - Windows XP SP2 Word Excel 2007 and directories - both home and users - in the same share with Samba 3.0) and the same pbs : ACL rights set up and locking users’ access when saving a Word document.

    In /etc/samba/smb.conf, nt acl support changed from yes to no, and Linux permissions are kept.
    Thank’s.

  4. By Matthias on Feb 9, 2009

    Thanks for that hint by Gaijin. It has solved exact my problem. :)

  5. By Hendro Wibowo on Apr 5, 2009

    Thank you very much!!

    Whole day scratching my hair for this problem, and it is finally solved by disabling the nt acl support in your blog.

    :)
    Hendro.

  6. By admin on Apr 5, 2009

    Hi Hendro,
    I’m glad I’ve been able to help.

  7. By Ieyasu on Aug 17, 2009

    You are my personal hero!

    Spent hours on this, thanks for the tip

Post a Comment

Story Pulse

graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.graph element.

11,701 total reads, averaging 10 daily
stats powered by bsuite


Incoming searches for this post: office 2007 samba (163) - samba office 2007 (79) - samba profile acls (76) - samba excel read only (50) - samba nt acl support (45) - samba sharing violation (44) - samba profiles permissions (44) - samba file permissions (39) - vista samba permissions (27) - excel samba (26) - samba excel (22) - samba preserve permissions (22) - samba microsoft office (21) - excel 2007 samba (21) - microsoft office samba (20) - excel 2007 sharing violation (19) - excel sharing violation (19) - samba office (19) - samba file permission (18) - samba office 2007 read only (18) - samba office read only (18) - ms office samba (18) - samba profile permissions (15) - samba excel 2007 (15) - office 2007 samba read only (15) - sharing violation samba (15) - office samba (14) - samba "nt acl support" (14) - word 2007 samba (14) - vista samba profile (13) - samba vista permissions (12) - samba profile acl (12) - samba excel sharing violation (12) - samba word read only (12) - windows (11) - samba permissions (11) - vista samba permission (11) - profile acls samba (10) - samba "profile acls" (10) - office 2007 samba problem (10) - samba profile permission (10) - vista samba read only (10) - samba vista read only (10) - samba microsoft office read only (9) - samba profiles permission (9) - nt acl support (9) - samba office 2003 (9) - microsoft office samba read only (9) - samba preserve permission (8) - samba acl office (8) - samba MS office (8) - samba Excel 2003 (8) - samba vista roaming profile (7) - sharing violation Excel 2007 (7) - "nt acl support" (7) - samba office permissions (7) - samba vista profile (7) - office samba read only (7) - samba word 2007 (7) - samba office 2007 (7) - samba microsoft access (7) - excel samba read only (7) - nt acl support = No (6) - samba office read-only (6) - samba acl (6) - samba windows file permissions (6) - samba vista permission (6) - all (6) - samba microsoft word (6) - nt acl support samba (6) - Microsoft Word Samba (6) - office 2007 samba permissions (6) - office 2003 samba (6) - samba and office 2007 (6) - word samba read only (6) - samba word read-only (6) - profile acls = yes (5) - samba vista acl (5) - samba vista roaming (5) - samba roaming profile permissions (5) - samba vista profiles (5) - samba roaming profiles permissions (5) - vista samba acl (5) - microsoft office 2007 samba (5) - samba excel save (5) - samba permissions vista (5) - Office 2007 + SAMBA (5) - Office 2007+Samba (5) - samba acl vista (5) - samba 2 vista (5) - samba permission (5) - samba nt acl (5) - microsoft office saves as read-only documents samba (5) - samba windows permissions (5) - samba excel permissions (5) - samba "office 2007" (5) - samba profiles acl (5) - samba office documents read only (5) - vista samba readonly (5) - samba permissions from windows (5) - samba word readonly (5) - excel samba save error (5) - office readonly samba (5) - samba vista roaming profiles (4) - samba roaming profile permission (4) - "profile acls" samba (4) - samba roaming profiles vista (4) - samba office2007 (4) - samba roaming profile (4) - samba vista (4) - samba and MS office (4) - nt acl support = yes (4) - "nt acl support" samba (4) - microsoft office permissions (4) - samba share violation (4) - samba excel files read only (4) - samba "preserve permissions" (4) - samba word excel (4) - samba office 2007 problem (4) - violation sharing samba (4) - samba office 2007 error (4) - microsoft access samba (4) - samba profiles acls (4) - samba excel read-only (4) - office 2008 samba (4) - samba read only office (4) - EXCEL SHARING VIOLATION ERROR (4) - office 2003 samba read only (4) - microsoft access 2007 samba (4) - samba windows profile share permissions (4) - samba preserve file permissions (3) - vista roaming profile samba (3) - microsoft office sharing violation (3) - samba office readonly (3) - excel samba permissions (3) - vista roaming profiles samba (3) - vista samba roaming (3) - samba profile not saved (3) - roaming profile acl (3) - samba vista no permissions (3) - samba office acl (3) - "profile acls" (3) - samba roaming profiles suck (3) - excell samba (3) - samba vista profil (3) - vista acl disable (3) - samba READ ONLY problem (3) - ms word samba (3) - vista samba read-only (3) - excel read-only samba (3) -