[Samba] Fileserver and access groups
rowlandpenny at googlemail.com
Mon Mar 30 11:09:22 MDT 2015
On 30/03/15 18:00, jd at ionica.lv wrote:
> I have Samba AD DC and Samba fileserver (hereafter-FS) as domain
> member. I need to organize access to the specific shares on FS for a
> groups of specific domain users. Where should I make the domain user
> groups - on DC, on FS or on both?
> Does the FS need any local Samba users at all? What if domain users'
> homes are located on FS?
All your users & groups should be stored in AD, except for users like
'root' (yes korashi I am looking at you) or www-data, ntp etc i.e. any
user or group that has an ID less than 1000.
You use ACLs for users homes stored on the fileserver, the fileserver
needs to be joined to the domain.
More information about the samba