We have a Samba server with LDAP authentication running. User privileges are controlled by UNIX groups and ACL and everything works just nicely.
In the future we will allow users to connect via VPN but with fewer rights. We'd like to have a mechanism allowing us to "share" certain folders for those connecting from outside.
All VPN connections come from a 172-subnet.
Now, is there a way to tell the server behaving like "If jdoe connects from 192... give him full privileges. If jdoe connects from 172... limit him to the folders marked as VPN-safe (whatever that might be, ideas?)"
Many thanks in advance!