samba - Jul 2005 - SMB winbind NT PDC

I have so far set up my samba server successfully with winbind and using an NT4
PDC.  I can get to my shares and when I create a file or directory the owner and
group for the file appears as
MYDOMAIN+USER1     MYDOMAIN+Domain Users

I am using winbind seperator = +

[Share1]
   comment = Share1
   path = /Share1
   read only = no
   public = yes



My problem is how do I set up a share so that only certain users can write to a
share and certain users/groups can read from a share.    I have tried to input
'write list'  'valid users' it didn't work.
(I've been kind of rushing this so there may have been a typo and just need
to try again).  But I would appreciate a snippet of a configuration file so that
I  have a better idea of which  configuration to use.

Is there a problem with using 'winbind separator = +', if there is what
has worked for you?

I currently have samba-3.0.0-15 installed.

phwashington@comcast.net wrote:
> I have so far set up my samba server successfully with winbind and using an
NT4 PDC.  I can get to my shares and when I create a file or directory the owner
and group for the file appears as
> MYDOMAIN+USER1     MYDOMAIN+Domain Users
> 
> I am using winbind seperator = +
> 
> [Share1]
>    comment = Share1
>    path = /Share1
>    read only = no
>    public = yes
> 
> 
> 
> My problem is how do I set up a share so that only certain users can write
to a share and certain users/groups can read from a share.    I have tried to
input 'write list'  'valid users' it didn't work.
> (I've been kind of rushing this so there may have been a typo and just
need to try again).  But I would appreciate a snippet of a configuration file so
that I  have a better idea of which  configuration to use.
> 
> Is there a problem with using 'winbind separator = +', if there is
what has worked for you?
> 
> I currently have samba-3.0.0-15 installed.  
> 
During my latest iteration I tried this and it appears to work for 
User1, but how do I enter a group, such as 'MYDOMAIN+Domain Users'.

[TESTING]
         comment = temp testing
         browseable = yes
         path = /TEMPTEST
         read only = no
         valid users = MYDOMAIN+User1
         write list = MYDOMAIN+User1
         read list = MYDOMAIN+User1
         create mask = 0774
         security mask = 0774
         force security mode = 770
         dos filetimes = yes
         directory mask = 2777
         directory security mask = 0770
         force directory security mode = 770
         inherit permissions = yes
         writable = yes
         guest ok = no