[Samba] I would like to create a Samba share supporting named writers, named readers, and no guests ...

[John Spence, CCSI, CCNA, CISSP]

I have not hit on the correct combination of parameters.  Closest I come
still allows the readers to modify - but not create - files.  Not what I
want.  If someone can give me a hint, I would really appreciate it.  Thank
you.

If I do this, reader1 can see the files (good), cannot create files (good),
but can modify (write) existing files (bad!)

------- smb.conf -------

[native6-stuff]
   path = /native6-stuff
   valid users = write1 write2 write3 reader1
   guest ok = no
   read-list = reader1
   write-list write1 write2 write3
   force group = writers
   public = no
   writable = yes
   printable = no
   create mask = 0664
   directory mask = 0664

----------- /etc/group ------------
writers:x:598:write1,write2,write3
-------- end -------

------------ end -----------

The directory permissions are set so that the three writers are all in the
"writers" group, so the share ends up containing files owned by the various
three writers, who can all modify each others files (group privs are
read/write), and the file and directory permissions grant "world"
readership.

I want it to allow the three named writers to write, and other Samba users
to list directories and read files only.  I want other people on the network
- people with no valid Samba account at all - to have no access at all.

----------------------------------------------------
John Spence
Native6, Inc.
----------------------------------------------------