I'm trying to set up Samba shares in a Debian-based classroom where Samba also acts as an Active Directory domain controller. We have two user groups: teachers and students. I want to make sure students can't access each other's folders. For instance, I have student accounts like a1.john.doe and a2.jane.smith, both of whom need access to a shared folder called 'works'. Essentially, I want to create subfolders in 'works' for each student so that a1.john.doe can only access their specific folder while teachers have read/write access to everything.
I'm considering adding sections for each student in the smb.conf file to manage permissions, but I'm worried that it could become cumbersome with many users and frequent updates. Is there a more efficient way to manage permissions without manually editing the config for each student?
2 Answers
You might want to look into using Windows ACLs for your SMB shares. They allow for more granular control over folder permissions. While smb.conf is great for basic security settings, it won't handle detailed per-user permissions effectively, especially with a large number of users. Also, if you're planning to add new users frequently, consider automating that process through scripting instead of manually updating the config every time.
Check out the Samba wiki on setting up shares with Windows ACLs. It offers some solid guidance on handling permission settings directly through Windows. It could save you a lot of time and frustration while managing multiple folders for students!
Related Questions
Can't Load PhpMyadmin On After Server Update
Redirect www to non-www in Apache Conf
How To Check If Your SSL Cert Is SHA 1
Windows TrackPad Gestures