[Samba] write list vs read list

Hi,
I'd like to set a share as writable for a specific users' group, and only=20
readable for another, so I did the following:



[global]
netbios name =A0 =A0 =A0=3D SEDELDAP
workgroup =3D LDAP
security =3D user
passdb backend =3D ldapsam:ldap://localhost/
obey pam restrictions =3D no
ldap admin dn =3D cn=3Dadmin,dc=3DMyHost,dc=3Dcom
ldap suffix =3D dc=3DMyHost,dc=3Dcom
ldap group suffix =3D ou=3DGroup
ldap user suffix =3D ou=3DPeople
ldap machine suffix =3D ou=3DComputers
ldap idmap suffix =3D ou=3DUsers
ldap ssl =3D off
domain logons =3D yes
follow symlinks =3D yes
wide links =3D yes
unix extensions =3D no
map to guest =3D Bad User
guest account =3D guest.samba

[LABORATORIO_SMB]
comment =3D Cartella privata Laboratorio
path =3D /mnt/samba/lab_smb
browsable =3D yes
available =3D yes
valid users =3D @laboratorio @estero
write list =3D @laboratorio
read list =3D @estero
writable =3D yes
printable =3D no
force group =3D laboratorio

However, the @estero group cannot access the share at all=20
(NT_STATUS_ACCESS_DENIED). What am I doing wrong?

Thanks,
Luca
--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/listinfo/samba