[Samba] subfolder sharing with "valid users"

[Keun Song]

Jeremy,
 
 
Thanks for your answer.
 
I actually tried creating a different share per subfolder but I couldn't override the "security = share in [global]" setting in individual share with "security = user" or vice versa.
 
If I had "security = share in [global]", then I couldn't enable login prompt for any of the individual share and that's what I need.
 
 
I'd appreciate your help!
 
Thanks.
 
 
- Kevin
 

 
> Date: Tue, 5 Oct 2010 09:51:40 -0700
> From: jra at samba.org
> To: keunhosong at hotmail.com
> CC: samba at lists.samba.org
> Subject: Re: [Samba] subfolder sharing with "valid users"
> 
> On Mon, Oct 04, 2010 at 11:58:34PM -0700, Keun Song wrote:
> > 
> > 
> > Hi,
> > 
> > 
> > I'm currently using the following smb.conf file so that everyone can browse any subfolder without a login prompt under /engineering. (I have neither AD-based nor Winbind-based authentication now)
> > Even, as long as the UNIX permission is 777, anyone can write onto some folders somewhere down under this folder.
> > 
> > 
> > [global]
> > workgroup = Engineering
> > netbios name = smb1
> > security = share
> > 
> > [interface]
> > path = /engineering
> > available = yes
> > browsable = yes
> > writeable = yes
> > guest ok = yes
> > readonly = no
> > 
> > 
> > Now I need to tighten the per-folder security so that I grant access for select users per folder. 
> > 
> > Under the /engineering folder, I'd like to have different combinations of security:
> > 
> > /engineering/electrical (want this readable by everyone)
> > /engineering/electrical/ee140 (want this to prompt for username & password per user)
> > /engineering/electrical/ee150 (want everything under this browsable and readable by everyone)
> > etc.
> > 
> > That is, how can I make it such that the top-level folder (/engineering) is still readable (w/o login prompt) by everyone and only some select subfolders prompt for login/password?
> > 
> > Thank you for your answer in advance!
> 
> You need to have different shares for these folders.
> 
> Jeremy.