Debian a samba server, ako na subadresar?

[skorec1]

Vedel by mi niekto poradit?
momentalne mam takyto konfiguracny subor

[global]
	netbios name = FILE-SERVER
	server string = %h newHDD
	passdb backend = tdbsam
	syslog = 0
	log file = /var/log/samba/log.%m
	max log size = 1000
	security = share
	panic action = /usr/share/samba/panic-action %d

[homes]
	comment = Domovský adresár
	valid users = %S
	read only = No
	create mask = 0700
	directory mask = 0700
	browseable = No

[download]
 	comment = Adresár pre stahovanie
 	path = /home/skorec/hdd1/download
 	writeable = yes
        read list = @navstevnici
 
[free]
 	comment = Adresár pre nahravanie
 	path = /home/skorec/hdd1/free
 	writeable = yes

[newDownload]
 	comment = Adresár pre stahovanie
 	path = /home/skorec/hdd2/newDownload
	writeable = yes

[Guest Share]
	comment = Guest access share
  	path = /home/skorec/hdd1/upload
       browseable = yes
  	writable = no
  	printable = no
  	public = yes
  	user = guest

ako by bolo mozne spravit tak aby som mal jeden hlavny adresar Guest Share a vnom boli 3 adresare download, free, newDownload
Podmienky:
Guest Share je bez obmedzenia pristupu a zvysne 3 adresare maju rozne prava pristupu a nesu na jednom HDD

[svaca]

To ti v "uvozovkach" nepojede ....

1. pokavad v sambe nastavis takto tri shres + nastavis spravne skupiny a uzivatele = tak to pofrci
2. pokavad ale v smb.conf nastavis jen jeden share a v NEM budou ty poadresare a budes u NICH chtit ruzna ACLka, tak to NEPUJDE pres sambu, protoze ten nadrazeni share to vzdy prebije ... Pujde to ale tak, ze na filesystemu zapnes ACL + pomoci setfacl nastavis ty podadresare = tohle je zbytecne pracne ...

Takze bych zvolil variantu 1.

[admix]

Proti scenari 2 hraje i to, ze acl jsou zlo, zlo zlo zlo, zle zlo

[svaca]

Proti scenari 2 hraje i to, ze acl jsou zlo, zlo zlo zlo, zle zlo

jj presne tak Kontroluj si porad debilne aclka podle adresaru a ne podle sdilene slozky ... I na wonkech me to stve