data.conf configuration groups

[gj357d]

Hi everybody! I'm trying to configure users and groups, but I haven't been able to share a single folder using groups yet. Has anyone created a template that would help me understand the .confg file?

I'm not sure about some things about read and write permissions.

• On the UNIX (ubuntu) host must the users and groups listed in data.conf be created? And do they have to have the appropriate rights to the folders on the UNIX host?
• Is it possible to use multiple groups per user in data.conf?

My vision:

• hidden folders from users who do not have the right to read - OK modifi in global: section
• have a trash can in all shared folders (accessible preferably only to admin) now working only in admin folder
• create groups from users, while one user can belong to several groups
• allow reading in the Downloads, Video folders for the @users group
• allow the @users group to write to the Public folder

important: the samba server is on ubuntu and the clients are from windows, linux, android

I will be grateful for any help.

data/config.yml

auth:
  - user: admin
    group: administrators
    uid: 1000
    gid: 1000
    password: super-admin-pass

  - user: test
    group: users
    uid: 1001
    gid: 1001
    password: super-test-pass

global:
  - hide unreadable = yes
  - access based share enum = yes

share:
  - name: admin
    path: /samba/admin
    browsable: yes
    readonly: no
    guestok: no
    validusers: admin
    writelist: admin
    veto: no
    hidefiles: /_*/
    recycle: repository = .recycle
    recycle: keeptree = yes

  - name: test
    path: /samba/test
    browsable: yes
    readonly: no
    guestok: no
    validusers: test
    writelist: test
    veto: no
    hidefiles: /_*/
    recycle: repository = .recycle
    recycle: keeptree = yes

  - name: Downloads
    path: /samba/Downloads
    browsable: yes
    readonly: no
    guestok: no
    validusers: admin
    writelist: admin
    veto: no
    hidefiles: /_*/
    recycle: repository = .recycle
    recycle: keeptree = yes

  - name: Public
    path: /samba/Public
    browsable: yes
    readonly: no
    guestok: no
    validusers: admin,@users
    writelist: admin,@users
    veto: no
    hidefiles: /_*/
    recycle: repository = .recycle
    recycle: keeptree = yes

  - name: Video
    path: /samba/Video
    browsable: yes
    readonly: no
    guestok: no
    validusers: admin
    writelist: admin
    veto: no
    hidefiles: /_*/
    recycle: repository = .recycle
    recycle: keeptree = yes

from docker container /etc/samba/smb.conf

[global]
workgroup = WORKGROUP
server string = Docker Samba Server
server role = standalone server
server services = -dns, -nbt
server signing = default
server multi channel support = yes

log level = 0
;log file = /usr/local/samba/var/log.%m
;max log size = 50

hosts allow = 127.0.0.0/8 10.0.0.0/8 172.16.0.0/12 192.168.0.0/16
hosts deny = 0.0.0.0/0

security = user
guest account = nobody
pam password change = yes
map to guest = bad user
usershare allow guests = yes

create mask = 0664
force create mode = 0664
directory mask = 0775
force directory mode = 0775
follow symlinks = yes
wide links = yes
unix extensions = no

printing = bsd
printcap name = /dev/null
disable spoolss = yes
disable netbios = yes
smb ports = 445

client ipc min protocol = default
client ipc max protocol = default

;wins support = yes
;wins server = w.x.y.z
;wins proxy = yes
dns proxy = no
socket options = TCP_NODELAY
strict locking = no
local master = no

winbind scan trusted domains = yes

vfs objects = fruit streams_xattr
fruit:metadata = stream
fruit:model = MacSamba
fruit:posix_rename = yes
fruit:veto_appledouble = no
fruit:wipe_intentionally_left_blank_rfork = yes
fruit:delete_empty_adfiles = yes
fruit:time machine = yes

hide unreadable = yes
access based share enum = yes

[admin]
path = /samba/admin
browsable = yes
read only = no
guest ok = no
valid users = admin
write list = admin
veto files = /._*/.apdisk/.AppleDouble/.DS_Store/.TemporaryItems/.Trashes/desktop.ini/ehthumbs.db/Network Trash Folder/Temporary Items/Thumbs.db/
delete veto files = yes
hide files = /_*/
vfs objects = recycle
recycle:repository = .recycle
recycle:keeptree = yes
recycle:versions = yes

[test]
path = /samba/test
browsable = yes
read only = no
guest ok = no
valid users = test
write list = test
veto files = /._*/.apdisk/.AppleDouble/.DS_Store/.TemporaryItems/.Trashes/desktop.ini/ehthumbs.db/Network Trash Folder/Temporary Items/Thumbs.db/
delete veto files = yes
hide files = /_*/
vfs objects = recycle
recycle:repository = .recycle
recycle:keeptree = yes
recycle:versions = yes

[Downloads]
path = /samba/Downloads
browsable = yes
read only = no
guest ok = no
valid users = admin
write list = admin
veto files = /._*/.apdisk/.AppleDouble/.DS_Store/.TemporaryItems/.Trashes/desktop.ini/ehthumbs.db/Network Trash Folder/Temporary Items/Thumbs.db/
delete veto files = yes
hide files = /_*/
vfs objects = recycle
recycle:repository = .recycle
recycle:keeptree = yes
recycle:versions = yes

[Public]
path = /samba/Public
browsable = yes
read only = no
guest ok = no
valid users = admin,@users
write list = admin,@users
veto files = /._*/.apdisk/.AppleDouble/.DS_Store/.TemporaryItems/.Trashes/desktop.ini/ehthumbs.db/Network Trash Folder/Temporary Items/Thumbs.db/
delete veto files = yes
hide files = /_*/
vfs objects = recycle
recycle:repository = .recycle
recycle:keeptree = yes
recycle:versions = yes

[Video]
path = /samba/Video
browsable = yes
read only = no
guest ok = no
valid users = admin
write list = admin
veto files = /._*/.apdisk/.AppleDouble/.DS_Store/.TemporaryItems/.Trashes/desktop.ini/ehthumbs.db/Network Trash Folder/Temporary Items/Thumbs.db/
delete veto files = yes
hide files = /_*/
vfs objects = recycle
recycle:repository = .recycle
recycle:keeptree = yes
recycle:versions = yes