[Samba] File server questions

[Rowland Penny]

On Tue, 29 Aug 2017 17:20:06 -0300
Flávio Silveira via samba <samba at lists.samba.org> wrote:

> Good evening,
> 
>    I am trying to setup Samba as file server using this tutorial: 
> https://wiki.samba.org/index.php/Setting_up_Samba_as_a_Standalone_Server

Why ? your last post was about setting up an AD DC, see here for how
to setup a Unix domain member:

https://wiki.samba.org/index.php/Setting_up_Samba_as_a_Domain_Member

> 
>    The version I am using is 4.6.7 from Van Belle's repo, on Debian 
> Stretch 9.1.
> 
>    I have a server subnet (192.168.13.x) and a client subnet 
> (192.168.11.x), currently, for testing purposes, the server is on the 
> same subnet as the clients. Will I have problems if after the tests I 
> move to the server subnet?

No, not if you set up a Unix domain member, in which case you will only
need the smb.conf and you can then just reuse this on all your unix
machines.

> 
>    Clients are Windows 10 x64 build 1703 and it seems Master Browser
> is broken on this version as "net view" gives me error 2184.
> 
>    For my share structure I am thinking in dividing them in
> departments (groups in this case):
> 
> - Commercial (/srv/data/commercial)
> 
> - Finances (/srv/data/finances)
> 
> - Production (/srv/data/production)
> 
> - Marketing (/srv/data/marketing)
> 
>    and so on.
> 
>    I can show all departments if needed, I need better ideas anyway,
> as I can't figure out a way to give read/write access to a single
> folder per department, if they need to exchange files for some reason.
> 
>    The only thing I've changed in smb.conf from the tutorial was
> adding "name resolve order" and putting dns as first.

AD relies on dns so there is no need for that line in smb.conf

> 
>    Am I going in the right path here?

No, probably not, you should set up a Unix domain member instead, by
trying to set up a standalone server, you are basically trying to set a
workgroup member.

If you do go down the 'workgroup' line, you will have to create the
groups in AD and on the standalone server, along with ALL the users.

Rowland