====== Ubuntu - Samba - Configure a restricted share directory ======

Create a share directory that requires user authentication.

===== Configure Samba =====

<code bash>
sudo groupadd security

mkdir /home/security

chgrp security /home/security

chmod 770 /home/security

sudo vi /etc/samba/smb.conf
</code>

Edit the Samba config file:

<file bash /etc/samba/smb.conf>
# line 25: add
unix charset = UTF-8

# line 30: change (Windows' default)
workgroup = WORKGROUP

# line 51: uncomment and change IP address you allow
interfaces = 127.0.0.0/8 10.0.0.0/24

# line 58: uncomment
bind interfaces only = yes

# add to the end any share name you like

[Security]
    path = /home/security
    writable = yes
    create mode = 0770
    directory mode = 0770
    # guest not allowed
    guest ok = no
    # allow users only in [security] group
    valid users = @security
</file>


Add user in Samba

<code bash>
smbpasswd -a peter
</code>

will prompt for a password:

<code bash>
New SMB password:     # set password

Retype new SMB password:
Added user ubuntu.
</code>

Add the user to the security group:

<code bash>
sudo usermod -G security peter
</code>

Restart Samba

<code bash>
sudo systemctl restart smbd 
</code>