Hi David
The user names and passwords must exist on both the E-smith box and the ME box.
So; for user1 (with pwd1) in group1, the ibay must be set so that group1 has write & read permission to it. Then, when user1 (with pwd1) logs into the ME box ibay/files should be visible.
HTH
Regards
David