How to organize a disk sharing system conveniently and correctly, from the office via LAN and remotely?

Question

linux

There are:
1) a server on debian (well, I really don’t want to reinstall, if anything),
2) 3 terabytes of files, mainly office documents, structured by folders,
3) a small office network without a domain with a PC on Windows and several poppies, and several laptops / macs remotely (including office laptops, it is allowed to take with you often to work from home / outside)
Now samba is used to access files inside the office, webdav is used outside
What I would like to do: move away from samba to another access model with convenient management, so that you can manage folder access permissions on the go, add this user, remove access rights to folder X for another, and leave folder Y read-only. Well, and so on, ideally in the GUI, but it is also possible in the console, as long as the work sessions of the others are not interrupted when users change. Convenient logging of who, when and where climbed and what was opened would be a big plus. I suppose, for some reason, that there is something like that based on webdav.
Of course, I understand that for my Wishlist, in addition to the logs and the remote from the box, there is a Windows domain + sphere, but I would not really want to deploy them; and there is no separate server for AD, and the current server is not enough for storage virtualization and the AD server.
PS if Next (own) cloud can do this, then I will be glad if someone points my finger at this in terms of managing permissions to one folder. And he was also upset that symlinks cannot be used in it

Answer 1

Samba can play the role of a domain controller (with certain restrictions), though xs how is it with the access audit.

Answer 2

Of course, I understand that for my Wishlist, in addition to the logs and remote from the box, there is a Windows domain + share

I don't understand how a domain can be useful for your tasks.

get away from samba

Switch to smb, it's better.

I suppose, for some reason, that there is something like that based on webdav.

This is based on windows - smb is called. And webdav is access to files via the htttp protocol, it has nothing to do with file storage and access rights.

And he was also upset that symlinks cannot be used in it

Next(own)cloud is a linux application. You want to say that symlinks cannot be used in Linux?

Answer 3

Well so through acl you can expose the rights. And you don't have to change anything. And who that opened logs and so in a samba is.