I try to setup a small samba server on Ubuntu 12.04 to share files. It seems to work fine but there is one permission problem.
All Unix users primary group is group_common. Some users are additionally in group group_confidential.
For all Unix users there is an equivalent samba user. There is a group mapping setup for both groups using net groupmap.
All files and folders which created on the share should belong to the user and the main group group_common.
This all works fine.
Now there are some confidential files. These files should be only accessible for the users in group group_confidential.
So I try to remove the rights for the group group_common and add rights for the group group_confidential on a windows client. The removing of the rights for group_common is not working. When I change the group on the Ubuntu machine it works fine.
So the question in short: It is possible to change the unix group of file in a samba share from a windows client or is there another way to restrict the rights for the unix owner group so it is not any more accessible from the windows client. Or is there another way to have confidential files?
Thanks in advance.