[Samba] Access control question.

[Matt Lozier]

Hello,

 

I have a general administrative question concerning Samba shares.

 

I have a large amount of data that about 25 users have limited access to.  I
only want these users to have access to a sub-set of this data, but I also
only want the users to see that which they have access to.

 

So, for example, suppose that the share looks like thus: 

/smbshare

/smbshare/dir1

/smbshare/dir2

/smbshare/dir3

 

And I only want the users to see that they have access to /smbshare/dir1 and
/smbshare/dir3.  The way that this is currently setup is that I have
symlinks from the user's home directory to /smbshare/dir1 and
/smbshare/dir3.  That way then the user maps their home share, they only see
dir1 and dir3 - dir2 is out of sight, and thus (hopefully) out of mind.

 

Is there a better way to implement what I'm trying to do?  I'm currently
looking into setting up permissions as an LDAP directory and using this as
the means to control access to the data - have also considered using ACLs -
not sure which way to go!

 

Any and all help / input is appreciated.

 

Thank you,

Matt