[Samba] security=ads

[Ulrich Schneider]

Dear samba-mailinglist,

We're using samba 4.0.5 as an active directory domain controller.
We used to set up some file shares on basis security=user in the old 
samba version. I was able to set up the shares as they used to be .

My Question:
How can I set up "wich user kan read/write which share?"

Do I have to do this in den Active Directory or in smb.conf?

This maybe a trivial question, but I lokked around the manuals a lot and 
found nothing.

smb.conf

[global]
         workgroup = GYM-FEU
         realm = gym-feu.local
         netbios name = SERVER
         server role = active directory domain controller

[netlogon]
         path = /usr/local/samba/var/locks/sysvol/gym-feu.local/scripts
         read only = No

[sysvol]
         path = /usr/local/samba/var/locks/sysvol
         read only = No

[austausch]
  path = /home/samba/austausch
  create mask = 0700
  directory mask = 0700
  force user = schueler
  force group = schueler
  comment = zum freien Austausch
  public = yes
  writeable = yes


Ulrich Schneider