SAMBA, share for 2 groups

Hi,

I don't know how to create samba(Version 3.6.5) share for 2 groups with permissions:
1 GROUP: create files, read any files, but don't change/delete any files
2 GROUP: full access: create, read, change, delete any files
It's possible to use acl or 2 shares.


Can somebody help me?
Thank you

Take a look at the man page for smb.conf.

You should be able to do this with a single share. You need to set your filesystem permissions so that each group gets the relevant access then, in the share declare a 'read list' and a 'write list' for the share. Something a bit like this:

Code:

---

[share name]
...
read list = @group_with_read_perms
write list = @group_with_write_perms
...

---

This will not work with security=share if you're running samba 3.

You can do this with ACLs too (and it's probably better to do it that way), but it's more complex.

Hi, Roxoff!
Thank you for your answer.
But I need 2 groups with write access.
Group1 can only create and read files, but not change/delete files( create mask = 0444)
Group2 can create/read/change/delete any files( create mask = 0666)

And read list - This is a list of users that are given read-only access to a service.

I had a read down some of the ACL stuff for samba. It seems to point ACL stuff at Unix-like filesystem permissions, i.e. the rwx settings. Using these standard permissions, you don't have the control to separate create and edit permissions.

It might be possible using two shares and a combination of inherited ownership for the share and force user/force group. But I can't think of a scenario that would work for what you want. Perhaps someone with a bit more expertise than I have can help?