[Samba] simple recommendations

[Thomas Maerz]

I would set up your server as a Samba AD and use the directory. Give each user a username and password on the server that they will authenticate to the server with and when they connect the permissions will act as you are expecting. Joining the machines to the domain is not necessary; it simply integrates the workstation with the server so that the user doesn’t have to enter the credentials manually to connect to resources. We use hundreds of non-domain joined Macs to connect to a Samba4 DC-based file server.

I hope this helps.

Thomas Maerz
Network/Systems Engineer

> On Feb 18, 2016, at 9:29 AM, Andy Smith <a.smith at ldex.co.uk> wrote:
> 
> 
> 
> Thanks for your reply Rowland. I don't think I managed to get my
> question across very well on the first attempt. I still really need to
> know 2 things: 
> 
> 1) Can I see and modify permissions on a Samba share from a PC (either a
> domain member or not, please provide detail). I have tested this with a
> non domain member and it seems to be not possible, is it just me or is
> this expected behaviour. With a domain member will this work as smoothly
> as a real windows server (assuming Linux install with ACL ext4 file
> system)? Ie open folder permissions from client and add/modify
> user/group permissions. 
> 
> 2) Is there a reason to install Samba as standalone rather than AD? I
> ask as obviously AD systems allow access to non domain members, and it
> seems AD is now the mainstream where Samba is concerned, its no skin off
> my nose to install as AD. 
> 
> thanks again, Andy. 
> -- 
> To unsubscribe from this list go to the following URL and read the
> instructions:  https://lists.samba.org/mailman/options/samba