Simple SAMBA user and public (password-less) share on debian

1. Install Samba

# apt-get install samba
# cd /etc/samba
# mv smb.conf smb.conf.old

2.Create following as smb.conf

[global]
workgroup = CALIFORNIA
server string = %h server
obey pam restrictions = Yes
pam password change = Yes
passwd program = /usr/bin/passwd %u
passwd chat = *Enter\snew\s*\spassword:* %n\n *Retype\snew\s*\spassword:* %n\n *password\supdated\ssuccessfully* .
unix password sync = Yes
syslog = 0
log file = /var/log/samba/log.%m
max log size = 1000
dns proxy = No
panic action = /usr/share/samba/panic-action %d
map to guest = bad user
[homes]
comment = Home Directories
valid users = %S
read only = No
create mask = 0700
directory mask = 0700
browseable = No
[printers]
comment = All Printers
path = /var/spool/samba
create mask = 0700
printable = Yes
browseable = No
[print$]
comment = Printer Drivers
path = /var/lib/samba/printers
[public]
comment = public
path = /home/public
read only = No
public = yes
force user = nobody
force group = users
force create mode = 0664
create mask = 0664
force directory mode = 0775
directory mask = 0775

3. Create public folders

# md /home/public
# chown nobody:users /home/public
# chmod 775 /home/public

4. Force files created in the public folder to have same group membership (users)

# chmod g+s /home/public

5. Add linux desktop user to 'users' group (requires a logout/login to set)

# adduser john users

6. Create windows network user password for only external access to home directories (not required for /home/public)

# smbpasswd -a john

7. Check files can be created, modified and deleted by both the linux desktop user and connected network users.