How to set up SAMBA user permissions?

Belushi

11/14/22, 9:00 PM

I would like to configure a homemade NAS. It runs Ubuntu 20.04 LTS Server and use SAMBA to share the content of disk. It works perfectly (i can reach the shared folder). Now I would like to set permissions.

Idea:

There are 5 different user (client) who would like to use this server. Two of them (user 1, user2) can access the whole HDD (all directory with Read/Write permissions). The rest (user3-4-5) can acces the whole content also, but with read-only permissions. However there are some directory (ex. theirs private dirs) which are readable/writeable for them too.

To make this idea more understandable, I created a directory map, where green dir = read/write and red dir = read-only:

user1 and user2:

user n (n=3,4,5):

I modified /etc/samba/smb.conf like this:

[My shared folder]

path = /media/my/shared/folder
read only = no
read list = user3 user4 user5
browseable = yes
hosts allow = ip1 ip2 ip3 ip4 ip5
hosts deny = 0.0.0.0/0
valid users = user1 user2 user3 user4 user5
max connections = 5

(users already added to samba)

The main problem is that user3-4-5 cannot modifie theirs private folder, because the whole HDD is read-only for them.

How can I set permissions correctly to user3-4-5 be able to R/W (modifie) theirs (ONLY theirs) folders?

108

1 + 0

server

permissions

samba

networking

20.04

Score:0

Ubuntu

SEWTGIYWTKHNTDS

11/15/22, 11:44 AM

I would set up shares for the users private home directories, the standard samba config file has sections for this with extensive comments.

For the other parts of the disk stick with the config which you have already created.

0 + 2

Belushi

11/15/22, 9:27 PM

I don't want to create multiple shared folders. Is there any way to solve this problem without creating 3 extra (user3-4-5) shared places? I just want to share 1 folder (whole content of my NAS)

SEWTGIYWTKHNTDS

11/19/22, 11:39 AM

I have used LINUX file system permissions to do this in the past, set the owner of the users private directory to the specific user and then change the permission to 700. The others will not be able to access the directory, but the specific user should. Then set the remainder of the files to world readable, writable by a specific group (and change the ownership of the files to a user in that group). Remove the samba permission from your shares and add the users to the relevant linux groups. You may need to set the create mask and group in the smb.conf so new files have correct permissions