Samba configuration

Nr18 · 10-24-2006, 09:37 AM

Hi,

I'm just finishing a fress install om my new server :P

and i want to setup samba as well BUT:

I have one problem

i want 1 folder approachable for everyone

Code:

[global]
        workgroup = [Domainname]
        server string = Production Server
        security = share
        map to guest = Bad User
        guest account = production
        log file = /var/log/samba/%m.log
        max log size = 50
        load printers = No
        dns proxy = No
        cups options = raw

[files]
        path = /var/shares/files
        read only = No
        acl group control = Yes
        inherit permissions = Yes
        inherit acls = Yes
        inherit owner = Yes
        guest ok = Yes

and i want private folders for a group users like sales an development

Code:

[documents]
        path = /var/shares/documents
        read only = No
        acl group control = Yes
        inherit permissions = Yes
        inherit acls = Yes
        inherit owner = Yes
        valid users = sales
        guest ok = no

[domains]
        path = /var/domains
        read only = No
        acl group control = Yes
        inherit permissions = Yes
        inherit acls = Yes
        inherit owner = Yes
        valid users = development
        guest ok = no

Now do i have a Win2k3 domainserver with users ofcource

and i tried the following:

in smbusers:

development = user1 user2 user3
sales = user2 user4

but that didn't work so my question is is it posible and how do i do that?

chakkerz · 10-25-2006, 05:56 PM

don't you need an @ before a group name?

chakkerz · 10-25-2006, 05:57 PM

A la default config example:

Quote:

# A publicly accessible directory, but read only, except for people in
# the "staff" group
;[public]
; comment = Public Stuff
; path = /home/samba
; public = yes
; writable = yes
; printable = no
; write list = @staff

Nr18 · 10-26-2006, 05:54 AM

oke, but how do i sync my winNT domain with a samba server

because my windows user must be validated by the samba deamon and have to check if the user my read and write in a share

chakkerz · 10-26-2006, 06:38 AM

Your "security" setting determine where it get's its info from. Though depending on that setting you will have to do more work or give it more info.

If you want to test that this all works in principal configure it to use a local database and use smbpasswd to add some users ...

Depending on how your windows hosts are setup, if you have a Private Domain Controller and are using funky Active Directory stuff you can do your authentication via it. This however is well outside my depth of experience.