And neither does giving him a "solution" that doesn't achieve what they have stated as a critical design objective. What is even worse is that you have said: "here do this", which they appear to have blindly done thinking that it "solved" their problem. With all due respect, that was completely negligent on your part. While your revised "solution" may begin to address the security concerns, it is still not compatible with the architecture that the OP has shown to be using.

Managing and administering a Linux system is a big responsibility, especially when you choices and actions impact others. Along with that responsibility comes the duty to understand the consequence of ones actions. The only way to gain that understanding is to read, learn, and research. It has been my unfortunate experience that far too many "newbies" try to run complex servers without understanding how to operate and secure them. Instead they grab for GUI tools like Webmin that hide the implementation details from them and leave them floundering when things go wrong.

thanks to you both norway and pensulat for advising me ...i read all your view about this subject.i understand also what norway is tring to say.
here is my smb.conf file:--
workgroup = MYGROUP
security = share
cups options = raw
[user1]
path = /home/user1
writeable = yes
; browseable = yes
valid users = user1


by this configuration iam able to share domain user and their file with fileserver folder.now they will save their file in share folder of samba which get auto sync in fileserver..

i tried winbind configuration but its not sucessfull.by just changing security = share my issue is solve.

then also iam not totally free because now question arrise is of security from hacker and also from others domain user.

well when i checked form window user and domain user accessing share of file server it prompt me to assign user name and password to enter into directories.so i this security for directories from other user is working.

but now i wanna move all user to smbuser and password to smbpasswd....

if i uncomment this
username map = /etc/samba/smbusers
then would it work.and didnot effect the current configuration...

Centos123, the more I think about your situation and what you are trying to accomplish I am coming to the conclusion that you would be well served by different short and long term approaches. In the short term, you could rely on using special SMB users and creating SMB Passwords for users to access a simple share. In the long term, I think you will want to migrate to a more advanced system that uses directory indexing and inter-server authentication with trust domains. Samba is quite capable of handling both of these scenarios, but one is much more complex to set up than the other and I am not sure your quite ready for the more complex setup.

Seeing your posts over the last few months, I can tell that you have been making a lot of progress in improving you understanding and capabilities in administering a Linux system. You are certainly to be commended for this effort. The fact is that it is something that takes years and years to achieve a mastery of and even then there will be many parts that are completely unknown. Please always be cautious about someone handing you a configuration and saying, "do this". Unless you research and understand what the commands and configurations do, you may be setting yourself up for a bad situation.

What I might suggest to you is a free book called Samba by example: link. There is also a PDF version. It starts out showing implementations of simple shares and discusses the parameters required to work with them. It then builds upon this, implementing more complex scenarios up to and including domain controllers. It is not something you will be able to swallow in one or two sittings, but it might be a good guide to help you along with your goal.

Norwayz again.. I tried so hard not to be offtopic but this polite rudeness of yours just makes you look like Lord Uptight and maybe someday will put you in a position to be someone else's boss and then you will have more people hating you along with your wife. So far you've only showed some oratorical skills and some grandpa like advices so let it go.

Oh please do go on, tell us more. Not only do give out really poor technical advice that borders on being reckless, you resort to name calling and insults.

iam able to join window user with fileserver but with some user iam getting problem.when i tried to access share directory from Run it error
//fileserver is not accessible. You might not have permission to use this network resource. Contact the administrator of this server to find out if you access permissions.

user name could not be found.

why is it?