I needed to share several directories with write permissions to some people and read permissions to others, so I had to
\ncreate all the necessary infrastructure for samba to work.
\nYou have to create unix users and groups to later map them to samba users and groups.
\nIn order to make this work with w95,w98, wxp, and w2k, I needed to use exactly the same usernames the people have
\nin their machines.
\nSo, if, to say, Bob signs in his machine with the user bobd, i need to create bobd in my samba server, as a unix account,
\nand then map it to a smb user. The password is not going to be the same as his windows password, this would require
\njoining the windows NT\/NT4 domain.
\nSaid that, we proceed to create the groups and users like this
\n# groupadd infra
\n# useradd -m -d \/home\/rdircio -g infra rdircio
\n# passwd rdircio
\nThen, to add the users in samba
\n# smbpasswd -a rdircio
\nTo map the unix groups we need to do
\n# net groupmap add ntgroup=”infra” unixgroup=infra type=d
\nAfter this, created the shared directories,inside \/shared ending up like this
\ndrwxrwxr-x 2 root infra 48 2006-01-03 12:20 cambios\/
\ndrwxr-xr-x 2 luis infra 48 2006-01-03 12:51 diagramas\/
\ndrwxrwxr-x 2 root infra 48 2006-01-03 12:17 inventario\/
\ndrwxrwxr-x 6 root inversion 240 2006-01-03 12:30 inversion\/
\ndrwxrwxr-x 10 root infra 280 2006-01-03 12:27 ismas\/
\ndrwxrwxr-x 5 root infra 152 2006-01-04 07:35 mantenimiento\/
\ndrwxrwxr-x 2 ppispma1 root 48 2006-01-03 09:47 publico\/
\nyou can see the permissions attached to specific users and groups, so read\/write permission is achieved.
\nthe smb.conf corresponding to this is:
\n[global]
\nworkgroup = INFRA
\nserver string = INFRA UNIX
\nsecurity = SHARE
\n[mp3]
\ncomment = musica
\n283\/433
\npath = \/mp3
\nread only = No
\nguest ok = Yes
\n[inversion ]
\nwriteable = yes
\nread list = @infra
\nwrite list = @inversion
\npath = \/shared\/inversion
\ncomment = Proyectos de Inversion
\nvalid users = @infra
\npublic = yes
\n[ inventario ]
\nwriteable = yes
\nread list = @infra
\nwrite list = @infra
\npath = \/shared\/inventario
\ncomment = Informacion de Infraestructura
\nvalid users = @infra
\npublic = yes
\n[ mantto ]
\nread list = @infra
\nwriteable = yes
\npath = \/shared\/mantenimiento
\nwrite list = @infra
\ncomment = Informacion de Infraestructura
\nvalid users = @infra
\npublic = yes
\ncreate mode = 775
\ndirectory mode = 775
\n[ info general ]
\nwriteable = yes
\nread list = @infra
\nadmin users = ppispma1
\nwrite list = ppispma1
\npath = \/shared\/publico
\ncomment = Informacion de Infraestructura
\nvalid users = @infra
\npublic = yes
\n[ cambios ]
\nwriteable = yes
\nread list = @infra
\nwrite list = @infra
\npath = \/shared\/cambios
\ncomment = Informacion de Infraestructura
\nvalid users = @infra
\npublic = yes
\n284\/433
\n[ ismas ]
\nwriteable = yes
\nread list = @infra
\nwrite list = @infra
\npath = \/shared\/ismas
\ncomment = Informacion de Infraestructura
\nvalid users = @infra
\npublic = yes
\n[ homes ]
\nwriteable = yes
\nread list = @infra
\nwrite list = @infra
\npath = \/home
\ncomment = Informacion de Infraestructura
\nvalid users = @infra
\npublic = yes
\n[my home]
\ncomment=%u home dir
\npath=\/home\/%u
\nwriteable = yes
\nread list = @infra
\nwrite list = @infra
\ncomment = homes
\nvalid users = @infra
\npublic = yes
\nThe first share is totally public, anyone can enter, but the others require password.
\nWe can avoid using different passwords for samba and unix users using pam_smbpass, we’ll discuss how to
\ndo this later
\n285\/433<\/p>\n","protected":false},"excerpt":{"rendered":"
I needed to share several directories with write permissions to some people and read permissions to others, so I had to create all the necessary infrastructure for samba to work. You have to create unix users and groups to later map them to samba users and groups. In order to make this work with w95,w98, […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[],"class_list":["post-541","post","type-post","status-publish","format-standard","hentry","category-uncategorized"],"_links":{"self":[{"href":"\/blog\/index.php\/wp-json\/wp\/v2\/posts\/541","targetHints":{"allow":["GET"]}}],"collection":[{"href":"\/blog\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"\/blog\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"\/blog\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"\/blog\/index.php\/wp-json\/wp\/v2\/comments?post=541"}],"version-history":[{"count":0,"href":"\/blog\/index.php\/wp-json\/wp\/v2\/posts\/541\/revisions"}],"wp:attachment":[{"href":"\/blog\/index.php\/wp-json\/wp\/v2\/media?parent=541"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"\/blog\/index.php\/wp-json\/wp\/v2\/categories?post=541"},{"taxonomy":"post_tag","embeddable":true,"href":"\/blog\/index.php\/wp-json\/wp\/v2\/tags?post=541"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}