Hello,

I want to setup a samba server as member of a workgroup, for example MYWORKGROUP. I want to share a folder, for example /share.
This share should be available to example.com domain clients only.

Can someone help me with that?

Go edit /etc/samba/smb.conf. It's very easy. Be sure to set workgroup = MYWORKGROUP in that file, and then go to the bottom: there should be a default example of how to share /tmp. Just edit that so it meets your requirements.

As for being available to domain clients only, using "hosts allow" and telling it what IP address range should work (like say your domain is on 10.1.1.1-10.1.1-255, set that to 10.1.1.0 which means everything 10.1.1.*).

There's a way to do it where they're authenticated using the domain controller but I have never worked with domains.

My main concern is the password. How to validate users?

Should it be security = share?

Is this correct?

[global]
workgroup = MYWORKGROUP
server string = Samba Server Version %v
security = domain
hosts allow = .example.com

[share]
comment = Public Stuff
path = /shared
public = no
writable = no
printable = no

Will that be fine?

security = user

This means that the windows users need to be all lower case and that their password needs to be identical from windows to linux. They also need to have an identical user account on the linux box. Say, for example, joe has a windows account and needs to use the samba shares. You would do the following

(as root)

adduser joe

(and follow prompts)

smbpasswd -a joe

(and input his password)

Now if this windows user does not put in a password when they click their icon to log into windows, you would instead:

security = user
null passwords = yes

then as root:

adduser joe

(password is simply enter key)

smbpasswd -an joe

I do not recommend using null passwords (i.e. have them add a windows password so they actually have to use a password when they log in) but I'm including it since some people's significant others may not want to use a password (as I have found with my wife lol).

As for the configuration, if you wanted to share something, make sure that the directory /shared already exists on the server. Then public=yes so that they can see the share. writeable=no means they won't be able to copy files to the public store, but at least they can see and read files in it. Otherwise it looks fine to me. I'd add browseable = yes so that they can browse the share directories.

Can you you please give the smb.conf lines?