Franske ITC-2480 Lab 7 - Revision history

BenFranske: Update to mjnk version

2021-12-03T19:59:19Z

Update to mjnk version

BenFranske: /* Prerequisites */

2019-10-01T00:33:20Z

Prerequisites

← Older revision		Revision as of 00:33, 1 October 2019
Line 7:		Line 7:
	# Make sure you have an up-to-date list of packages on your system using the '''apt update''' system		# Make sure you have an up-to-date list of packages on your system using the '''apt update''' system
	# Make sure you have all the latest software upgrades on your system using the '''apt upgrade''' method		# Make sure you have all the latest software upgrades on your system using the '''apt upgrade''' method
			# This lab sets up Samba with anonymous guest access which is not supported by Windows 10 anymore. You can work around this (directions for doing so are below) but you can't work around it on IHCC campus managed PCs so this lab really requires access to a PC which you have full administrative control over.

	== Install Samba ==		== Install Samba ==

BenFranske: /* Setup a Guest Share */

2018-05-09T06:43:56Z

Setup a Guest Share

← Older revision		Revision as of 06:43, 9 May 2018
Line 33:		Line 33:
	<li>You have now created the public share. In order to make the share take effect you need to restart the Samba service on your machine with the '''service smbd restart''' command. Note, restarting services requires administrative permission.</li>		<li>You have now created the public share. In order to make the share take effect you need to restart the Samba service on your machine with the '''service smbd restart''' command. Note, restarting services requires administrative permission.</li>
	<li>To test this share, go into ''/srv/Guest-Files'' and create a text file and enter some information. We will use this file to test the read-only settings of the share.</li>		<li>To test this share, go into ''/srv/Guest-Files'' and create a text file and enter some information. We will use this file to test the read-only settings of the share.</li>
	<li>At this point, we should be ready to test out our configuration. On your Local Computer, open up the run dialog box, and enter \\172.17.50.xx (The IP you setup for the static address of your VM), and press enter. You should see a share folder called Guest Share. Open it up, and see if your text file is in the share. Open up the file, and try to edit and save the file. What error do you get?</li>		<li>At this point, we should be ready to test out our configuration. On your Local Computer, open up the run dialog box, and enter \\172.17.50.xx (The IP you setup for the static address of your VM), and press enter. You should see a share folder called Guest Share. Open it up, and see if your text file is in the share. Open up the file, and try to edit and save the file. What error do you get?
			* '''Special NOTE for Windows 10 Client PCs:''' If the computer your are using to try and connect to this share is running Windows 10 version 1709 or later [https://support.microsoft.com/en-us/help/4046019/guest-access-smb2-disabled-by-default-in-windows-10-server-2016 Microsoft has disabled SMB guest share access] You have a few different options for completing this:
			*# Use an earlier version of Windows (remember you'll need to install OpenVPN and be connected to ITCnet) such as Windows 10 before version 1709, Windows 8, or Windows 7 to attempt to connect to the share.
			*# Follow the instruction on the above Microsoft page to re-enable guest share access on your Windows 10 version 1709 or later system using the group policy editor (requires Windows 10 Professional or Enterprise)
			*# Use the registry editor to set the key [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\LanmanWorkstation\Parameters] "AllowInsecureGuestAuth" to dword:1 (Note: editing your registry can cause your system not to boot and other unexpected behavior, so be careful and be sure of what you are doing)</li>
	</ol>		</ol>

BenFranske at 05:42, 20 February 2018

2018-02-20T05:42:02Z

BenFranske: /* Share Home Directories */

2018-02-20T05:19:40Z

Share Home Directories

← Older revision		Revision as of 05:19, 20 February 2018
Line 37:		Line 37:

	== Share Home Directories==		== Share Home Directories==
	# Now we are going to setup Home ~~Folders~~. By default ~~they are~~ enabled, but write access is not~~. Notice what other folders~~ are ~~enabled in Samba by default~~.		# Now we are going to setup Home Directory Sharing. By default this is enabled, but write access is not and no users are setup.
	# First it must be noted that Samba requires separate user accounts from the system, just like MySQL. So first, we are going to add your user account.		# First it must be noted that Samba requires separate user accounts from the system, just like MySQL. So first, we are going to add your user account.
	# To do this, we are now going to use Webmin to configure the shares.		# To do this, we are now going to use Webmin to configure the shares. Notice also what other shares are enabled in Samba by default when looking at the Webmin page for Samba.
	# On the Webmin Samba configuration page, click ''Samba Users''. Notice how none are currently defined. Go back, and then click Convert Users. This is the tool we will use to convert/copy the local Unix user accounts to Samba accounts.		# On the Webmin Samba configuration page, click ''Samba Users''. Notice how none are currently defined. Go back, and then click ''Convert Users''. This is the tool we will use to convert/copy the local Unix user accounts to Samba accounts.
	# Leave the Unix users to convert option set to all except listed users and UID ranges with the option of -499. This will add all user accounts with a UID of 500 or more to Samba. Lower UID values are typically used on Debian systems as service accounts (like ''www-data'') who should not have Samba permissions.		# Leave the Unix users to convert option set to all except listed users and UID ranges with the option of -499. This will add all user accounts with a UID of 500 or more to Samba. Lower UID values are typically used on Debian systems as service accounts (like ''www-data'') who should not have Samba permissions.
	# Now on the bottom, select "No password". We are doing this as we will define unique passwords for each user. Then click Convert Users when ready.		# Now on the bottom, select "No password". We are doing this as we will define unique passwords for each user. Then click Convert Users when ready.

BenFranske at 05:16, 20 February 2018

2018-02-20T05:16:42Z

← Older revision		Revision as of 05:16, 20 February 2018
Line 13:		Line 13:
	# Under the servers tab, notice how Samba does not show up. This is because we just installed the package.		# Under the servers tab, notice how Samba does not show up. This is because we just installed the package.
	# On the bottom of the left toolbar, click refresh modules. After a minute, it should refresh the page. Now look under the servers tab again. Does samba now show up?		# On the bottom of the left toolbar, click refresh modules. After a minute, it should refresh the page. Now look under the servers tab again. Does samba now show up?
	== Setup a Guest ~~Folder~~ ==		== Setup a Guest Share==
	<ol>		<ol>
	<li>The first thing we are going to do is we are going to create a guest share. This share will allow for all users, even those who have not authenticated, to read files.</li>		<li>The first thing we are going to do is we are going to create a guest share. This share will allow for all users, even those who have not authenticated, to read files.</li>
Line 36:		Line 36:
	</ol>		</ol>

	== Share Home ~~Folders~~ ==		== Share Home Directories==
	# Now we are going to setup Home Folders. By default they are enabled, but write access is not. Notice what other folders are enabled in Samba by default.		# Now we are going to setup Home Folders. By default they are enabled, but write access is not. Notice what other folders are enabled in Samba by default.
	# First it must be noted that Samba requires separate user accounts from the system, just like MySQL. So first, we are going to add your user account.		# First it must be noted that Samba requires separate user accounts from the system, just like MySQL. So first, we are going to add your user account.
Line 53:		Line 53:
	#* Note: To use another user account in a samba share, you may have to logout and then back in on your local machine.		#* Note: To use another user account in a samba share, you may have to logout and then back in on your local machine.

	== Setup a Group Share ~~Folder~~ ==		== Setup a Group Share ==
	<ol>		<ol>
	<li>Now we are going to setup a group folder share that will allow for all samba users to read and write to the folder.</li>		<li>Now we are going to setup a group folder share that will allow for all samba users to read and write to the folder.</li>

BenFranske: /* Setup a Group Share Folder */

2018-02-20T04:49:52Z

Setup a Group Share Folder

← Older revision		Revision as of 04:49, 20 February 2018
Line 54:		Line 54:

	== Setup a Group Share Folder ==		== Setup a Group Share Folder ==
	# Now we are going to setup a group folder share that will allow for all samba users to read and write to the folder.		<ol>
	# Now back in the Webmin Samba configuration panel, we are going to create a new share. Under ''shares'', select the ''Create a new file share'' link.		<li>Now we are going to setup a group folder share that will allow for all samba users to read and write to the folder.</li>
	# Use the following base configuration:		<li>Now back in the Webmin Samba configuration panel, we are going to create a new share. Under ''shares'', select the ''Create a new file share'' link. Use the following base configuration:
	<pre>Share Name: Share-Files		<pre>Share Name: Share-Files
	Directory to share: /srv/Group-Share		Directory to share: /srv/Group-Share
Line 66:		Line 66:
	Browsable: yes		Browsable: yes
	Share Comment: group share folder		Share Comment: group share folder
	</pre>		</pre></li>
	# Once the share is setup, click it to edit it. Once you are at the Edit File Share page, click File Permissions. Notice how the New Unix file and New Unix directory are set to 755 by default, even though we set the share to use 775 to create the directory. This is done for security purposes.		<li>Once the share is setup, click it to edit it. Once you are at the Edit File Share page, click File Permissions. Notice how the New Unix file and New Unix directory are set to 755 by default, even though we set the share to use 775 to create the directory. This is done for security purposes.</li>
	# Now set the ''New Unix file'' and ''New Unix directory'' mode to 775, and set ''Force Unix group'' to users. You can now press save. We do this to allow authenticated users to modify and edit files that may have been added by other users.		<li>Now set the ''New Unix file'' and ''New Unix directory'' mode to 775, and set ''Force Unix group'' to users. You can now press save. We do this to allow authenticated users to modify and edit files that may have been added by other users.</li>
	# Now we will need to enable write access to the folder. On the Edit file share page again, click Security and Access Control. Now set the Writable option to Yes, and press save.		<li>Now we will need to enable write access to the folder. On the Edit file share page again, click ''Security and Access Control''. Now set the ''Writable'' option to ''Yes'', and press save.</li>
	# At this point, you can test the share exactly the same way we did with the home folder share. Notice though how this share is set to browsable, so it shows up in the root share folder. Go ahead and create a file through your host computer. Then use PuTTY to look at the user and group assigned to the files you created.		<li>At this point, you can test the share exactly the same way we did with the home folder share. Notice though how this share is set to ''browsable'', so it shows up in the root share folder. Go ahead and create a file through your host computer. Then use PuTTY to look at the user and group assigned to the files you created.</li>
	# It is important to note that even if a user has read or write permission in Samba they must ''also'' have permission to read or write the file/directory on the underlying Linux filesystem. Many problems with making Samba work can be traced to permissions errors where a user does not have correct permission to work with a file or directory either by the Samba software ''or'' by the filesystem.		<li>It is important to note that even if a user has read or write permission in Samba they must ''also'' have permission to read or write the file/directory on the underlying Linux filesystem. Many problems with making Samba work can be traced to permissions errors where a user does not have correct permission to work with a file or directory either by the Samba software ''or'' by the filesystem.</li>
			<li>Finally, take a look at your ''smb.conf'' file and see what changes Webmin made in order to setup your group share.</li>
			</ol>

BenFranske: /* Share Home Folders */

2018-02-20T04:46:40Z

Share Home Folders

← Older revision		Revision as of 04:46, 20 February 2018
Line 45:		Line 45:
	# When you are done, go to the Samba Users page again. Notice how your user account is now listed. From here you can now add passwords to the different user accounts you added in the last step. Be sure to set the passwords for each user you intend to connect with.		# When you are done, go to the Samba Users page again. Notice how your user account is now listed. From here you can now add passwords to the different user accounts you added in the last step. Be sure to set the passwords for each user you intend to connect with.
	# Lastly we are going to setup write access to home folders, so you will be able to add files to your home directory over samba.		# Lastly we are going to setup write access to home folders, so you will be able to add files to your home directory over samba.
	# On the ~~samba~~ config page, under Shares, click the home share. Next click Security and Access Control. Now set the Writable option to Yes, and then click save.		# On the Samba config page, under ''Shares'', click the ''home share''. Next click ''Security and Access Control''. Now set the ''Writable'' option to ''Yes'', and then click save.
	# Now go back to the Samba config page, and click the Restart Samba Servers option at the bottom. We do this to force samba to load the new configuration. You can also wait a minute or two if you don't want to disconnect any connected users.		# Now go back to the Samba config page, and click the Restart Samba Servers option at the bottom. We do this to force samba to load the new configuration. You can also wait a minute or two if you don't want to disconnect any connected users.
	# At this point, we should be ready to test out our configuration. On your Local Computer, open up run dialog box, and enter \\172.17.50.xx (Your IP you setup for the static address), and press enter. Notice how you do not see a home directory share because you are connected without any authentication. Now, in the top URL window, add \''username'' to the path, e.g. \\172.17.50.xx\user. You should now get a login popup. Login as your user, and you should be greeted with your home folder.		# At this point, we should be ready to test out our configuration. On your Local Computer, open up run dialog box, and enter \\172.17.50.xx (Your IP you setup for the static address), and press enter. Notice how you do not see a home directory share because you are connected without any authentication. Now, in the top URL window, add \''username'' to the path, e.g. \\172.17.50.xx\user. You should now get a login popup. Login as your user, and you should be greeted with your home folder.

BenFranske: /* Setup a Guest Folder */

2018-02-20T04:45:01Z

Setup a Guest Folder

← Older revision		Revision as of 04:45, 20 February 2018
Line 34:		Line 34:
	<li>To test this share, go into ''/srv/Guest-Files'' and create a text file and enter some information. We will use this file to test the read-only settings of the share.</li>		<li>To test this share, go into ''/srv/Guest-Files'' and create a text file and enter some information. We will use this file to test the read-only settings of the share.</li>
	<li>At this point, we should be ready to test out our configuration. On your Local Computer, open up the run dialog box, and enter \\172.17.50.xx (The IP you setup for the static address of your VM), and press enter. You should see a share folder called Guest Share. Open it up, and see if your text file is in the share. Open up the file, and try to edit and save the file. What error do you get?</li>		<li>At this point, we should be ready to test out our configuration. On your Local Computer, open up the run dialog box, and enter \\172.17.50.xx (The IP you setup for the static address of your VM), and press enter. You should see a share folder called Guest Share. Open it up, and see if your text file is in the share. Open up the file, and try to edit and save the file. What error do you get?</li>
			</ol>

	== Share Home Folders ==		== Share Home Folders ==

BenFranske: /* Setup a Guest Folder */

2018-02-20T04:44:44Z

Setup a Guest Folder

← Older revision		Revision as of 04:44, 20 February 2018
Line 14:		Line 14:
	# On the bottom of the left toolbar, click refresh modules. After a minute, it should refresh the page. Now look under the servers tab again. Does samba now show up?		# On the bottom of the left toolbar, click refresh modules. After a minute, it should refresh the page. Now look under the servers tab again. Does samba now show up?
	== Setup a Guest Folder ==		== Setup a Guest Folder ==
	# The first thing we are going to do is we are going to create a guest share. This share will allow for all users, even those who have not authenticated, to read files.		<ol>
	# To help you better understand samba, this first share will be configured from PuTTY and command line. First, change into the ''/etc/samba/'' directory and view a directory listing. In here we have one main file, ''smb.conf'', which holds all of the Samba share and authentication settings. There may also be a few other files and directories which can be used for more advanced Samba features such as TLS certificate based authentication.		<li>The first thing we are going to do is we are going to create a guest share. This share will allow for all users, even those who have not authenticated, to read files.</li>
	# Now with your favorite text editor, open up ''smb.conf'' with administrative permission.		<li>To help you better understand samba, this first share will be configured from PuTTY and command line. First, change into the ''/etc/samba/'' directory and view a directory listing. In here we have one main file, ''smb.conf'', which holds all of the Samba share and authentication settings. There may also be a few other files and directories which can be used for more advanced Samba features such as TLS certificate based authentication.</li>
	# Scroll to the bottom of the file, and notice how shares are defined. They all have a similar format such as:		<li>Now with your favorite text editor, open up ''smb.conf'' with administrative permission.</li>
			<li>Scroll to the bottom of the file, and notice how shares are defined. They all have a similar format such as:
	<pre>		<pre>
	[Share Name]		[Share Name]
	comment = Share Comment		comment = Share Comment
	options....</pre>		options....</pre></li>
	# Where options are the different configuration settings. Lets try creating the guest share folder from the config file manually.		<li>Where options are the different configuration settings. Lets try creating the guest share folder from the config file manually.</li>
	# Exit out of nano, and create the folder ''/srv/Guest-Files'' as root. This will be the folder we are sharing.		<li>Exit out of nano, and create the folder ''/srv/Guest-Files'' as root. This will be the folder we are sharing.</li>
	# Now open up ''/etc/samba/smb.conf'' in a text editor again as root, and go to the bottom of the file.		<li>Now open up ''/etc/samba/smb.conf'' in a text editor again as root, and go to the bottom of the file.</li>
	# Enter the following:		<li>Enter the following:
	<pre>[Guest Share]		<pre>[Guest Share]
	comment = Public File Share		comment = Public File Share
	public = yes		public = yes
	path = /srv/Guest-Files</pre>		path = /srv/Guest-Files</pre></li>
	# You have now created the public share. To test this share, go into ''/srv/Guest-Files'' and create a text file and enter some information. We will use this file to test the read-only settings of the share.		<li>You have now created the public share. In order to make the share take effect you need to restart the Samba service on your machine with the '''service smbd restart''' command. Note, restarting services requires administrative permission.</li>
	# At this point, we should be ready to test out our configuration. On your Local Computer, open up the run dialog box, and enter \\172.17.50.xx (The IP you setup for the static address of your VM), and press enter. You should see a share folder called Guest Share. Open it up, and see if your text file is in the share. Open up the file, and try to edit and save the file. What error do you get?		<li>To test this share, go into ''/srv/Guest-Files'' and create a text file and enter some information. We will use this file to test the read-only settings of the share.</li>
			<li>At this point, we should be ready to test out our configuration. On your Local Computer, open up the run dialog box, and enter \\172.17.50.xx (The IP you setup for the static address of your VM), and press enter. You should see a share folder called Guest Share. Open it up, and see if your text file is in the share. Open up the file, and try to edit and save the file. What error do you get?</li>

	== Share Home Folders ==		== Share Home Folders ==

← Older revision		Revision as of 05:42, 20 February 2018
Line 40:		Line 40:
	# First it must be noted that Samba requires separate user accounts from the system, just like MySQL. So first, we are going to add your user account.		# First it must be noted that Samba requires separate user accounts from the system, just like MySQL. So first, we are going to add your user account.
	# To do this, we are now going to use Webmin to configure the shares. Notice also what other shares are enabled in Samba by default when looking at the Webmin page for Samba.		# To do this, we are now going to use Webmin to configure the shares. Notice also what other shares are enabled in Samba by default when looking at the Webmin page for Samba.
	# On the Webmin Samba configuration page, click ''Samba Users''. Notice how none are currently defined. Go back, and then click ''Convert Users''. This is the tool we will use to convert/copy the local Unix user accounts to Samba accounts.		# On the Webmin Samba configuration page, click '''Samba Users'''. Notice how none are currently defined. Go back, and then click '''Convert Users'''. This is the tool we will use to convert/copy the local Unix user accounts to Samba accounts.
	# Leave the Unix users to convert option set to all except listed users and UID ranges with the option of -499. This will add all user accounts with a UID of 500 or more to Samba. Lower UID values are typically used on Debian systems as service accounts (like ''www-data'') who should not have Samba permissions.		# Leave the Unix users to convert option set to all except listed users and UID ranges with the option of -499. This will add all user accounts with a UID of 500 or more to Samba. Lower UID values are typically used on Debian systems as service accounts (like ''www-data'') who should not have Samba permissions.
	# Now on the bottom, select "No password". We are doing this as we will define unique passwords for each user. Then click Convert Users when ready.		# Now on the bottom, select '''No password'''. We are doing this as we will define unique passwords for each user. Then click '''Convert Users''' when ready.
	# When you are done, go to the Samba Users page again. Notice how your user account is now listed. From here you can now add passwords to the different user accounts you added in the last step. Be sure to set the passwords for each user you intend to connect with.		# When you are done, go to the Samba Users page again. Notice how your user account is now listed. From here you can now add passwords to the different user accounts you added in the last step. Be sure to set the passwords for each user you intend to connect with.
	# Lastly we are going to setup write access to home folders, so you will be able to add files to your home directory over samba.		# Lastly we are going to setup write access to home folders, so you will be able to add files to your home directory over samba.
	# On the Samba config page, under ''Shares'', click the ''home share''. Next click ''Security and Access Control''. Now set the ''Writable'' option to ''Yes'', and then click save.		# On the Samba config page, under ''Shares'', click the ''home share''. Next click ''Security and Access Control''. Now set the ''Writable'' option to ''Yes'', and then click save.
	# Now go back to the Samba config page, and click the Restart Samba Servers option at the bottom. We do this to force samba to load the new configuration. You can also wait a minute or two if you don't want to disconnect any connected users.		# Now go back to the Samba config page, and click the Restart Samba Servers option at the bottom. We do this to force samba to load the new configuration. You can also wait a minute or two if you don't want to disconnect any connected users.
	# At this point, we should be ready to test out our configuration. On your Local Computer, open up run dialog box, and enter \\172.17.50.xx (Your IP you setup for the static address), and press enter. Notice how you do not see a home directory share because you are connected without any authentication. Now, in the top URL window, add \''username'' to the path, e.g. \\172.17.50.xx\user. You should now get a login popup. Login as your user, and you should be greeted with your home folder.		# At this point, we should be ready to test out our configuration. On your Local Computer, open up the run dialog box, and enter \\172.17.50.xx (Your IP you setup for the static address), and press enter. Notice how you do not see a home directory share because you are connected without any authentication. Now, in the top URL window, add \''username'' to the path, e.g. \\172.17.50.xx\user. You should now get a login popup. Login as your user, and you should be greeted with your home folder.
	#* NOTE: If your user is unable to login you may have forgotten to set a Samba password for the user as directed above. You need to set a password for each user within Samba.		#* NOTE: If your user is unable to login you may have forgotten to set a Samba password for the user as directed above. You need to set a password for each user within Samba.
			#* NOTE: On local systems running an operating system other than Windows follow whatever process you would normally use to connect to a Windows file share using the IP address of your VM as the server name.
	# Test creating and deleting a file to verify write access is working.		# Test creating and deleting a file to verify write access is working.
	# Now try to access a home share of another user that was added to samba. Notice how you do not have permissions. Try logging in with another user account to access a different home share.		# Now try to access a home share of another user that was added to samba. Notice how you do not have permissions. Try logging in with another user account to access a different home share.
Line 56:		Line 57:
	<ol>		<ol>
	<li>Now we are going to setup a group folder share that will allow for all samba users to read and write to the folder.</li>		<li>Now we are going to setup a group folder share that will allow for all samba users to read and write to the folder.</li>
	<li>Now back in the Webmin Samba configuration panel, we are going to create a new share. Under ''shares'', select the ''Create a new file share'' link. Use the following base configuration:		<li>Now back in the Webmin Samba configuration panel, we are going to create a new share. Under ''shares'', select the '''Create a new file share''' link. Use the following base configuration:
	<pre>Share Name: Share-Files		<pre>Share Name: Share-Files
	Directory to share: /srv/Group-Share		Directory to share: /srv/Group-Share
Line 67:		Line 68:
	Share Comment: group share folder		Share Comment: group share folder
	</pre></li>		</pre></li>
	<li>Once the share is setup, click it to edit it. Once you are at the Edit File Share page, click File Permissions. Notice how the New Unix file and New Unix directory are set to 755 by default, even though we set the share to use 775 to create the directory. This is done for security purposes.</li>		<li>Once the share is setup, click it to edit it. Once you are at the ''Edit File Share'' page, click '''File Permissions'''. Notice how the New Unix file and New Unix directory are set to 755 by default, even though we set the share to use 775 to create the directory. This is done for security purposes as it would only allow the owner to have modification privileges for the files and directories they create. We need to modify this so that all users on the system have full access to files in this share.</li>
	<li>~~Now set~~ the ''New Unix file'' and ''New Unix directory'' mode to 775, and set ''Force Unix group'' to users. You can now press save. We do this to allow authenticated users to modify and edit files that may have been added by other users.</li>		<li>Set the ''New Unix file'' and ''New Unix directory'' mode to 775, and set ''Force Unix group'' to ''users''. You can now press '''save'''. We do this to allow all authenticated users permission to modify and edit files that may have been added by other users.</li>
	<li>Now we will need to enable write access to the folder. On the Edit file share page again, click ''Security and Access Control''. Now set the ''Writable'' option to ''Yes'', and press save.</li>		<li>Now we will need to enable write access to the folder. On the ''Edit file share'' page again, click '''Security and Access Control'''. Now set the ''Writable'' option to ''Yes'', and press '''save'''.</li>
	<li>At this point, you can test the share exactly the same way we did with the home folder share. Notice though how this share is set to ''browsable'', so it shows up in the root share folder. Go ahead and create a file through your host computer. Then use PuTTY to look at the user and group assigned to the files you created.</li>		<li>At this point, you can test the share exactly the same way we did with the home folder share. Notice though how this share is set to ''browsable'', so it shows up in the root share folder. Go ahead and create a file through your host computer. Then use PuTTY to look at the user and group assigned to the files you created.</li>
	<li>It is important to note that even if a user has read or write permission in Samba they must ''also'' have permission to read or write the file/directory on the underlying Linux filesystem. Many problems with making Samba work can be traced to permissions errors where a user does not have correct permission to work with a file or directory either by the Samba software ''or'' by the filesystem.</li>		<li>It is important to note that even if a user has read or write permission in Samba they must ''also'' have permission to read or write the file/directory on the underlying Linux filesystem. Many problems with making Samba work can be traced to permissions errors where a user does not have correct permission to work with a file or directory either by the Samba software ''or'' by the filesystem.</li>
	<li>Finally, take a look at your ''smb.conf'' file and see what changes Webmin made in order to setup your group share.</li>		<li>Finally, take a look at your ''smb.conf'' file and see what changes Webmin made in order to setup your group share.</li>
	</ol>		</ol>