Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I have a Linux share that I want to publish to users on my Active Directory domain.

I'd like to be able to control the permissions to access that share using security groups.

So say I have a share named "Share" on my Linux machine named "Linux" with IP address I publish \\\Share in AD and make it so that only people who are part of the "IT" security group can access it. What's to stop anyone who's not in the "IT" security group from just going to explorer and typing in \\\Share or \\Linux\Share into their Explorer to access this share?

Do I need to set up permissions on the Linux file server?

share|improve this question
up vote 0 down vote accepted

If you want to use integrated AD groups & users, you'll need to configure samba, krb, and join the Linux system to the domain. As long as your filesystem supports extended acls you'll be able to set permissions either via a windows box or using the setfacl linux command.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.