samba config

[Craig White]

On Mon, 2010-04-26 at 20:56 -0700, Nadim Hoque wrote:
> Hey
> 
> 
> So I switched to ubuntu server 9.10 and I need to configure samba.
> What I want to do is share folders in which only the owner has access
> to. For instance I want to share my external drive and I am the owner
> of that folder and only if I put my credentials based off of the
> server information regarding my account. Now I also want possibly
> other groups to have access as well (this does not have to be just
> this folder in general), essentially I want it to use acls. Below is
> the config file that I currently have. When I was using open suse it
> allowed be to use current users on the system as users for samba. 
> 
> 
> [global]
>         workgroup = WORKGROUP
>         encrypt passwords = yes
>         wins support = no
>         max log size = 2000
>         passdb backend = tdbsam
> 
> 
> [homes]
>         comment = %u's Home Directory
>         browsable = no
>         read only = no
>         map archive = yes
> [My_Book]
>         comment = This is the My book with the movies/tvshows
>         inherit acls = Yes
>         path = /media/My\ Book
>         guest ok = no
>         read only = No
> #       write = Yes
> #       valid users = nadim
> 
> 
> [common]
>         comment = This is the common forlder on the local hard drive
>         inherit acls = yes
>         path = /home/common
>         guest ok = no
>         read only = no
> #       write = yes
>         valid users = nadim grant
----
#1 - userland mounted external hard drives (/media) are not really
suitable for using with samba. Samba expects a root mount. Put your
entry into /etc/fstab for this external drive, mount it and leave it
alone. To get ACL's, I think you are going to need a file system that
supports extended attributes (and of course use them in /etc/fstab)
which tends to leave out the typical FAT/VFAT filesystems used in many
external hard drives.

#2 - you can create samba users/groups but they should either be the
same as system users/groups or you have to specifically map them. Note
that samba users have to have a password too.

#3 - You should probably set group permissions and even use group sticky
bits on subdirectories.

Craig



-- 
This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.