[Samba] SMB winbind NT PDC

[Philip Washington]

phwashington at comcast.net wrote:
> I have so far set up my samba server successfully with winbind and using an NT4 PDC.  I can get to my shares and when I create a file or directory the owner and group for the file appears as
> MYDOMAIN+USER1     MYDOMAIN+Domain Users
> 
> I am using winbind seperator = +
> 
> [Share1]
>    comment = Share1
>    path = /Share1
>    read only = no
>    public = yes
> 
> 
> 
> My problem is how do I set up a share so that only certain users can write to a share and certain users/groups can read from a share.    I have tried to input 'write list'  'valid users' it didn't work.
> (I've been kind of rushing this so there may have been a typo and just need to try again).  But I would appreciate a snippet of a configuration file so that I  have a better idea of which  configuration to use.  
> 
> Is there a problem with using 'winbind separator = +', if there is what has worked for you?
> 
> I currently have samba-3.0.0-15 installed.  
> 
During my latest iteration I tried this and it appears to work for 
User1, but how do I enter a group, such as 'MYDOMAIN+Domain Users'.

[TESTING]
         comment = temp testing
         browseable = yes
         path = /TEMPTEST
         read only = no
         valid users = MYDOMAIN+User1
         write list = MYDOMAIN+User1
         read list = MYDOMAIN+User1
         create mask = 0774
         security mask = 0774
         force security mode = 770
         dos filetimes = yes
         directory mask = 2777
         directory security mask = 0770
         force directory security mode = 770
         inherit permissions = yes
         writable = yes
         guest ok = no