samba configuration many to one Unix account

[Richard Marshall]

I need to setup a samba environment that will
map one unix share to multi. users on two NT domains.

The NT domains are a trusted pair and I need to grant read only access to domain A while granting read/write access to domain b.

I have set up security = domain but having problems mounting the share to all 450 users in the correct read-only or read/write mode depending on which NT domain the are in.

The Unix share is a singal directory in which we want to store jpeg images. The unix account exist and I do not want to spend time mapping 400 windows user accounts to a single unix account.

Any help is appreciated

[Ivan Coenegrachts]

A while ago, I worked for a company where they had a similar problem. If I remember well, they solved it by creating different groups in /etc/netgroup, each having their own permissions. Disadvantage was that it works with hostnames, not with usernames.

[Richard Marshall]

Thanks, I will take a look at netgroup options

[mark alexander]

A couple of notes:

Samba has an 'add user script' (and 'delete user script') option that can be used when security=domain that allows smb to create a UNIX account on the fly when they authenticate properly via a domain controller.

There are also variables that are expanded in the smb.conf on a per connect basis that you may find usefull. %g (and the slightly different %G) provides the primary group of the connecting user. Using these, you can include group specific access information pretty much anywhere in smb.conf by using an include, e.g.

include /etc/smb.conf.%g

Sorry I can't be more specific, but your options are really unlimited. See the man page on smb.conf for more information.

mwa