I have a Samba file server running, and I was wondering how I could make multiple user accounts that have different permissions. For example, at the moment I have a user, smbusr, but when I ssh to the share, I can read, write, execute, and even navigate out of the samba directory and do stuff on the actual computer. This is bad because I want to be able to give out my IP so friends/family can use the server, but I don't want them to be able to do just anything.
I want to lock the user in the samba share directory(and all the sub directories). Eventually I would like several profiles such as (smbusr_R, smbusr_RW, smbguest_R, smbguest_RW).
I also have a second question related to this, is SSH the best method to connect from other unix machines? What about VPN? Or simply mounting like this:
mount -t ext3 -o user=username //ipaddr/share /mnt/mountpoint
Is that mounting command above the same thing as a vpn? This is really confusing me.
Thanks for the help guys, let me know if you need to see any files, or need anymore information.
EDIT: Here is my samba share definition:
[SAMBA] path = /samba browseable = yes guest ok = no read list = smbusr_RO write list = smbusr
EDIT2: Here is my entire smb.conf file: