[Samba] configuring Shares, Users with Samba 4.0.5 as an AD DC

[Ulrich Schneider]

Maybe I should rephrase the question (and use a more suitable topic)

I have Samba 4.0.5. as an active domain controller.
I want to know how to set up shares e.g. this way:

share1 	accessible r/w for users in the active directory user group group1

share2 	accessible read only for users in the active directory user 
group group2

Or rephrased again:
Using Samba 4.0.5. as an active domain controller ... there must be a 
way how the Windows User from AD is mapped to a unix user / access 
rights for a share. Is there a documentation for that?

Thanks for your supprt.

Ulrich Schneider


Am 18.05.2013 09:03, schrieb Ulrich Schneider:
> Dear samba-mailinglist,
>
> We're using samba 4.0.5 as an active directory domain controller.
> We used to set up some file shares on basis security=user in the old
> samba version. I was able to set up the shares as they used to be .
>
> My Question:
> How can I set up "wich user kan read/write which share?"
>
> Do I have to do this in den Active Directory or in smb.conf?
>
> This maybe a trivial question, but I lokked around the manuals a lot and
> found nothing.
>
> smb.conf
>
> [global]
>          workgroup = GYM-FEU
>          realm = gym-feu.local
>          netbios name = SERVER
>          server role = active directory domain controller
>
> [netlogon]
>          path = /usr/local/samba/var/locks/sysvol/gym-feu.local/scripts
>          read only = No
>
> [sysvol]
>          path = /usr/local/samba/var/locks/sysvol
>          read only = No
>
> [austausch]
>   path = /home/samba/austausch
>   create mask = 0700
>   directory mask = 0700
>   force user = schueler
>   force group = schueler
>   comment = zum freien Austausch
>   public = yes
>   writeable = yes
>
>
> Ulrich Schneider