Differences

This shows you the differences between two versions of the page.

--- sambasharetoprivate [2025/11/12 02:11] – created jwan
+++ sambasharetoprivate [2025/11/12 02:21] (current) – jwan
@@ Line 1: / Line 1: @@
+  * Create Samba Group and Samba Users
+<code>
+sudo groupadd smbusers
+# Create system users (optional - or use existing ones)
+sudo useradd -G smbusers john
+sudo useradd -G smbusers jane
+# Set Samba passwords (different from system passwords)
+sudo smbpasswd -a john
+sudo smbpasswd -a jane
+</code>
   * Create folder in linux
 <code>
-   sudo mkdir /public
+   sudo mkdir /private
 </code>
-  * Give everyone full access
+  * Set ownership and permissions
 <code>
-   sudo chmod 777 /public
+   sudo chown root:smbusers /private
+   sudo chmod 1770 /private  # Sticky bit + group access
 </code>
-  * Set ownership (optional)
-<code>
-   sudo chown nobody:nogroup /public
-</code>
   * Edit Samba config /etc/samba/smb.conf
 <code>
-   [public]
+   [private]
-   comment = Public Shared Folder
+   comment = Private Secure Share
-   path = /public
+   path = /private
    browseable = yes
    read only = no
-   guest ok = yes
+   guest ok = no
-   guest only = yes
+   valid users = @smbusers
-   create mask = 0777
+   create mask = 0660
-   directory mask = 0777
+   directory mask = 0770
-   force user = nobody
+   force group = smbusers
-   force group = nogroup
+   # Security settings to prevent users from deleting each other's files
+   # veto files are files that user can upload but then will be hidden from view.
+   #veto files = /*.exe/*.com/*.bat/*.cmd/
+   # can also delete these veto files
+   #delete veto files = yes
 </code>
@@ Line 36: / Line 51: @@
    sudo systemctl restart smbd winbind
 </code>
+To add Samba User:
+sudo useradd -G smbusers newuser
+sudo smbpasswd -a newuser
+To delete Samba User:
+sudo smbpasswd -x username  # Disable Samba access
+sudo deluser username       # Remove system account (optional)
+To access from Windows:
+\\your-server-ip\private
+To access from Linux:
+smbclient //server-ip/private -U username