permissions issue with Samba and CentOS 5.2

hotrock3 · 01-10-2009, 03:10 PM

I'm pretty new to Linux so sorry if I seem to be asking an easy question. I have searched for the answer and have not been able to find one so far.

I have CentOS 5.2 installed and have attempted to set up a Samba share.

It keeps telling me that "the share is not accessible. You might not have permissions to use this network resource."

I know that the user should have the permissions cause I have used Webmin to set up the Samba users to match the Unix users and have used the chmod command to set the directories permissions to 777 and ls -l shows the shared file as having drwxrwxrwx.

I started out trying to connect from my OSX 10.5 laptop and that didn't work. Moved on to OSX 10.4, still nothing, then tried my XP machine and still nothing.

I have read about and will be trying Netatalk for the OSX machines but i have no clue how to get the Windows machine connected.

Thanks in advance,
Hotrock3

billymayday · 01-10-2009, 03:21 PM

As root from a terminal, turn selinux off (setenforce 0), then try and report back.

Turn selinux back on with setenforce 1.

Can you also post your smb.conf?

hotrock3 · 01-10-2009, 04:58 PM

Okay, that did it.

Being as I'm pretty new at this do you mind explaining why that work?
If so that would be amazing.

Thanks once again,
Hotrock3

billymayday · 01-10-2009, 05:13 PM

I'll give you a bit of SELinux reading instead https://fedoraproject.org/wiki/SELinux

We haven't solved the problem though, since I'd recommend you don't permanently disable SELinux.

You'll notice in your smb.conf there are some SELinux notes

Quote:

# SELINUX NOTES:
#
# If you want to use the useradd/groupadd family of binaries please run:
# setsebool -P samba_domain_controller on
#
# If you want to share home directories via samba please run:
# setsebool -P samba_enable_home_dirs on
#
# If you create a new directory you want to share you should mark it as
# "samba-share_t" so that selinux will let you write into it.
# Make sure not to do that on system directories as they may already have
# been marked with othe SELinux labels.
#
# Use ls -ldZ /path to see which context a directory has
#
# Set labels only on directories you created!
# To set a label use the following: chcon -t samba_share_t /path
#
# If you need to share a system created directory you can use one of the
# following (read-only/read-write):
# setsebool -P samba_export_all_ro on
# or
# setsebool -P samba_export_all_rw on
#
# If you want to run scripts (preexec/root prexec/print command/...) please
# put them into the /var/lib/samba/scripts directory so that smbd will be
# allowed to run them.
# Make sure you COPY them and not MOVE them so that the right SELinux context
# is applied, to check all is ok use restorecon -R -v /var/lib/samba/scripts
#
#--------------
#

If you were trying to access you home dir, then simply follow the advice given

Code:

setsebool -P samba_enable_home_dirs on

as root

If you have created a new directory, use

Code:

chcon -t samba_share_t /path

Then turn selinux back on (setenforce 1)

hotrock3 · 01-10-2009, 08:59 PM

wow, the reading helped a lot, well now I have selinux back up and I can still access the samba share, thanks so much.
Hotrock3