help with samba file perms on sles 10 PDC

hello,
I'm running sles 10 setup with samba as PDC.

machines can login to it fine.

I've setup 2 groups (accounting and general) where users from general
can't see accounting files but users from accounting (made members of
both groups) can see everything.

the problem i'm having is when users create file, the files are made
with permission 0744. I don't want this because other members of the
group can't work (edit) files made by someone else.

I tried adding create mask 0777 but it still makes user files 744.
How can I get the user files to be made 777? I need samba to keep the
2 groups seperate but allow users to create files that any member of
that group can work on.


thanks,

Oskar



[global]
workgroup = FRANK
printing = cups
printcap name = cups
printcap cache time = 750
cups options = raw
map to guest = Bad User
include = /etc/samba/dhcp.conf
logon path = \\%L\profiles\.msprofile
logon home = \\%L\%U\.9xprofile
logon drive = P:
ldap admin dn = cn=Administrator,dc=franksupplyco,dc=com
ldap suffix = dc=frank,dc=com
ldap group suffix = ou=group
ldap user suffix = ou=people
security = user
encrypt passwords = yes
passdb backend = ldapsam:ldap://localhost smbpasswd
add machine script = /sbin/yast /usr/share/YaST2/data/add_machine.ycp %m$
domain logons = yes
idmap backend = ldap:ldap://localhost
ldap idmap suffix = ou=Idmap
ldap machine suffix = ou=Computers
local master = yes
wins support = yes
netbios name = fileserver
domain master = yes
preferred master = yes
os level = 65
[homes]
comment = Home Directories
valid users = %S
browseable = no
read only = No
inherit acls = Yes
guest ok = no
printable = no
[profiles]
comment = Network Profiles Service
path = %H
read only = No
store dos attributes = Yes
create mask = 0600
directory mask = 0700
browseable = yes
guest ok = no
printable = no
[users]
comment = All users
path = /home
read only = No
inherit acls = Yes
veto files = /aquota.user/groups/shares/
browseable = yes
guest ok = no
printable = no
[groups]
comment = All groups
path = /home/groups
read only = No
inherit acls = Yes
browseable = yes
guest ok = no
printable = no
create mask = 0777
[printers]
comment = All Printers
path = /var/tmp
printable = yes
create mask = 0600
browseable = no
guest ok = no
[print$]
comment = Printer Drivers
path = /var/lib/samba/drivers
write list = @ntadmin root
force group = ntadmin
create mask = 0664
directory mask = 0775
browseable = yes
guest ok = no
printable = no
[public]
comment = ANYONE
path = /home/public
writeable = yes
browseable = yes
guest ok = no
printable = no
public = yes
mail:/etc/samba #

.

Relevant Pages