samba - tree connect failed: NT_STATUS_ACCESS_DENIED

smallmonkey · 01-10-2017, 11:43 PM

I'm having a problem samba. This is a fresh install of debian jessie.

I can use windows 10 explorer to create files in \\bigserver\smallmonkey however browsing to \\bigserver\data gets "Access is denied"

Code:

smallmonkey@bigserver:~$ smbclient '\\bigserver\data'
Enter smallmonkey's password:
Domain=[WORKGROUP] OS=[Windows 6.1] Server=[Samba 4.2.14-Debian]
tree connect failed: NT_STATUS_ACCESS_DENIED

Code:

smallmonkey@bigserver:~$ smbclient '\\bigserver\smallmonkey'
Enter smallmonkey's password:
Domain=[WORKGROUP] OS=[Windows 6.1] Server=[Samba 4.2.14-Debian]
smb: \>

Code:

smallmonkey@bigserver:~$ touch /media/bigdisk/data/test1
smallmonkey@bigserver:~$ ls /media/bigdisk/data
test1

Code:

root@bigserver:~# ls -ld /media/bigdisk/data
drwxrwxrwx 2 smallmonkey winshare1 4096 Jan 11 14:25 /media/bigdisk/data

Code:

smallmonkey@bigserver:~$ groups
smallmonkey cdrom floppy audio dip video plugdev netdev sambashare winshare1

Code:

smb.conf

#

[global]
   workgroup = WORKGROUP
   wins support = yes
   
[global]
   workgroup = WORKGROUP
   wins support = yes
   dns proxy = no
   max log size = 1000
   syslog = 0
   panic action = /usr/share/samba/panic-action %d
   server role = standalone server
   passdb backend = tdbsam
   obey pam restrictions = yes
   unix password sync = yes
   passwd program = /usr/bin/passwd %u
   passwd chat = *Enter\snew\s*\spassword:* %n\n *Retype\snew\s*\spassword:* %n\n *password\supdated\ssuccessfully* .
   pam password change = yes
   map to guest = bad user

[homes]
   comment = Home Directories
   browseable = no
   valid users = %S
   writable = yes
   create mask = 0700
   directory mask = 0700

[data]
   comment = pile 'O files
   browseable = yes
   writeable = yes
   valid users = @winshare1
#   force group = winshare1
   path = /media/bigdisk/data
   create mask = 0775
   directory mask = 0775

   read only = no
   create mask = 0775
   directory mask = 0775
   valid users = %S

   log level = 3

Any help will be greatly appreciated.

michaelk · 01-11-2017, 10:46 PM

Try deleting valid users = %S and see if you can access the share. log level is a global and not a share directive.

smallmonkey · 01-22-2017, 07:08 PM

Quote:

Originally Posted by michaelk

Try deleting valid users = %S and see if you can access the share.

Thanks, unfortunately commenting out 'users = %S' (and also replacing '%S' with the group 'winshare1' and the user 'smallmonkey') resulted in the same error: tree connect failed: NT_STATUS_ACCESS_DENIED