Samba questions

Permissions

[RussellC]

I currently have a Samba share on my network that is just a big share that can be accessed by Windows Authentication. I have the users set up on the Linux machine with the same passwords that they have for Windows. I know there is a better way to to this.

What I want to do it set up groups and have the users in different groups so they can only access certain directorys within the share. I know how to set up users and groups in Linux but I am unsure how to set this up with Samba. Can anyone point me in the right direction? Thanks.

[RussellC]

I think I am finding that this is going to be next to impossible without making multiple shares due to the fact that the drive being shared is vfat and permissions dont work the same on it as ext3.

[MattyMoose]

What you want to do, from what you've described, is to enable extended ACLs in your filesystem and enable winbind.

And yes, you're out of luck if you're not using a domain, since basically everything is a giant share with no real network authentication. Set up a Domain Controller (in Samba, even), and have your clients authenticate to that.

Then what I do is change the permissions on the filesystem itself with setfacl (this is a FreeBSD 5 system), which I've set up with nsswitch and winbind.