1.8. Setting permissions on a share that uses POSIX ACLs

Procedure

1. For example, to enable all members of the Domain Users group to access a share while access is denied for the user account, add the following parameters to the share’s configuration:

   valid users = +DOMAIN\"Domain Users"
   invalid users = DOMAIN\user

   The invalid users parameter has a higher priority than the valid users parameter. For example, if the user account is a member of the Domain Users group, access is denied to this account when you use the previous example.

2. Reload the Samba configuration:

   # smbcontrol all reload-config

Procedure

1. Add the following parameters to the configuration of the share in the /etc/samba/smb.conf file:

   hosts allow = 127.0.0.1 192.0.2.0/24 client1.example.com
   hosts deny = client2.example.com

   The hosts deny parameter has a higher priority than hosts allow. For example, if client1.example.com resolves to an IP address that is listed in the hosts allow parameter, access for this host is denied.

2. Reload the Samba configuration:

   # smbcontrol all reload-config