Differences

This shows you the differences between two versions of the page.

--- sambasharetoprivate [2025/11/12 02:15] – jwan
+++ sambasharetoprivate [2025/11/12 02:21] (current) – jwan
@@ Line 2: / Line 2: @@
 <code>
 sudo groupadd smbusers
+# Create system users (optional - or use existing ones)
+sudo useradd -G smbusers john
+sudo useradd -G smbusers jane
+# Set Samba passwords (different from system passwords)
+sudo smbpasswd -a john
+sudo smbpasswd -a jane
 </code>
@@ Line 15: / Line 23: @@
 </code>
-  * Set ownership (optional)
-<code>
-   sudo chown nobody:nogroup /public
-</code>
   * Edit Samba config /etc/samba/smb.conf
 <code>
-   [public]
+   [private]
-   comment = Public Shared Folder
+   comment = Private Secure Share
-   path = /public
+   path = /private
    browseable = yes
    read only = no
-   guest ok = yes
+   guest ok = no
-   guest only = yes
+   valid users = @smbusers
-   create mask = 0777
+   create mask = 0660
-   directory mask = 0777
+   directory mask = 0770
-   force user = nobody
+   force group = smbusers
-   force group = nogroup
+   # Security settings to prevent users from deleting each other's files
+   # veto files are files that user can upload but then will be hidden from view.
+   #veto files = /*.exe/*.com/*.bat/*.cmd/
+   # can also delete these veto files
+   #delete veto files = yes
 </code>
@@ Line 43: / Line 51: @@
    sudo systemctl restart smbd winbind
 </code>
+To add Samba User:
+sudo useradd -G smbusers newuser
+sudo smbpasswd -a newuser
+To delete Samba User:
+sudo smbpasswd -x username  # Disable Samba access
+sudo deluser username       # Remove system account (optional)
+To access from Windows:
+\\your-server-ip\private
+To access from Linux:
+smbclient //server-ip/private -U username