[Samba] Fileserver and access groups

[Rowland Penny]

On 30/03/15 18:00, jd at ionica.lv wrote:
> Hi!
>
> I have Samba AD DC and Samba fileserver (hereafter-FS) as domain 
> member. I need to organize access to the specific shares on FS for a 
> groups of specific domain users. Where should I make the domain user 
> groups - on DC, on FS or on both?
>
> Does the FS need any local Samba users at all? What if domain users' 
> homes are located on FS?
>
> Janis
>

All your users & groups should be stored in AD, except for users like 
'root' (yes korashi I am looking at you) or www-data, ntp etc i.e. any 
user or group that has an ID less than 1000.

You use ACLs for users homes stored on the fileserver, the fileserver 
needs to be joined to the domain.

Rowland