Samba Share Write Permission Troubleshooting
A Samba administrator notices that Windows clients cannot access a shared directory. The share is defined in smb.conf as follows:
[shared]
path = /srv/samba/shared valid users = @staff browseable = yes read only = no
The /srv/samba/shared directory has permissions 755 and is owned by root:staff. Which is the most likely cause of the access issue?
Quick Answer
The answer is that the staff group lacks write permission on the directory. This is because the /srv/samba/shared directory has permissions 755, meaning only the owner (root) has write access, while the group staff has only read and execute (r-x). Even though the Samba share is set to read only = no, Samba enforces filesystem-level permissions, so the valid users = @staff group cannot create or modify files without group write permission on the directory. On the LPIC-2 exam, this question tests your understanding of the interaction between Samba share definitions and underlying Linux file permissions—a common trap is assuming that setting read only = no in smb.conf overrides directory permissions. Remember the key principle: Samba cannot grant more access than the filesystem allows. A helpful memory tip is "Samba serves what the filesystem gives"—always verify directory ownership and group write bits before troubleshooting Samba write issues.
⚠ Common exam trap
A common mix-up: candidates assume Samba's 'read only = no' alone grants write access, overlooking that Linux filesystem permissions are enforced independently and must also allow write for the effective user or group.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
The 'staff' group lacks write permission on the directory
The 'staff' group lacks write permission on the directory because the directory has permissions 755, which grants write access only to the owner (root). Even though the share is defined as 'read only = no', Samba enforces filesystem-level permissions. Since the 'valid users = @staff' restricts access to members of the staff group, they need write permission on the directory to create or modify files. The group 'staff' has only read and execute permissions (r-x), so write operations fail.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
The 'valid users' parameter is misspelled
Why it's wrong here
It is spelled correctly.
- ✗
The share is defined as browseable but not listed
Why it's wrong here
browseable=yes means it appears in network listings, that's fine.
- ✗
SELinux is blocking access and must be disabled
Why it's wrong here
SELinux could be an issue, but the most likely cause is directory permissions.
- ✓
The 'staff' group lacks write permission on the directory
Why this is correct
755 gives owner rwx, group r-x, others r-x. Group cannot write.
Go deeper
Related to this question
About these practice questions
Courseiva writes every LPIC-2 question from scratch — 507 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
Same concept, more angles
1 more way this is tested on LPIC-2
These questions test the same concept from different angles. Work through them to make sure you can recognise it however the exam phrases it.
Variation 1. Given the smb.conf exhibit, which share(s) allow write access to user 'alice' who is a member of the 'staff' group?
medium- A.share1 and share3
- B.share3 only
- ✓ C.share1 only
- D.share2 only
Why C: In the smb.conf exhibit, share1 has 'write list = @staff' which grants write access to all members of the staff group, including user alice. share2 has 'read only = yes' and no write list, so it is read-only for everyone. share3 has 'valid users = bob' and 'write list = bob', so only bob can write; alice is not listed and is not in the bob group, so she has no write access.
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This LPIC-2 practice question is part of Courseiva's free LPI certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the LPIC-2 exam.