Hi David
The user names and passwords must exist on both the E-smith box and the ME box.
So;  for user1 (with pwd1) in group1, the ibay must be set so that group1 has write & read permission to it.  Then, when user1 (with pwd1) logs into the ME box ibay/files should be visible.
HTH
Regards
David