Samba Security

[Cifs 9000]

I joined my samba server with ads windows2000.

i have one share directory test
Inside test directory i have around 10 directory. i want to give access to specific windows global group to particular directory
example: Global group name : accounts
group can access only share : test/acct10
and other has no access on that directory.
I don't want to create any user and local unix and samba group.
Please let me know if its possible . how can i do it from windows 2000 site.
should i need dedicate windows workstation for samba share because generally we are adding/removing user from groups.

[Geoff Wild]

Yes you can do it - but you can't adminster from Windows (well I guess you can - you could use SWAT via a web browser).

Try something like:

[test]
comment = Network Drive
path = /some/path/test
valid users = @accounts, @"DOMAIN+accounts"
read only = no
browseable = yes


I'm assuming your winbind separator = +



Rgds...Geoff

[Cifs 9000]

It means i cannot give permission from windows site. example.

1. login to windows domain as admin.
2. give share permission to specific group

[Cifs 9000]

i couldn't see the option of valid user in swat.

suppose domain : xyz

@"xyz+accounts"

accounts : windows group

[Cifs 9000]

thanks