С таким конфигом проблем:
Access is denied.
быть не должно.
New variant:
[webroot]
comment = webroot
path = /webroot
public = yes
writable = yes
guest ok = yes
browsable = yes
create mask = 0644
force create mode = 0600
security mask = 0555
force security mode = 0600