LinuxQuestions.org
Latest LQ Deal: Latest LQ Deals
Home Forums Tutorials Articles Register
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Newbie
User Name
Password
Linux - Newbie This Linux forum is for members that are new to Linux.
Just starting out and have a question? If it is not in the man pages or the how-to's this is the place!

Notices


Reply
  Search this Thread
Old 02-11-2014, 10:17 AM   #16
Rusty Shackleford
LQ Newbie
 
Registered: Feb 2014
Posts: 10

Original Poster
Rep: Reputation: Disabled
Thumbs up


Okay, so I finally got it working with all of your guys help. I'll post my smb.conf file and tell you what I believe did the final trick.

[global]
workgroup = MYDOMAIN
realm = MYDOMAIN.COM
server string = Samba Server Version %v
security = ADS
password server = domain_controller.MYDOMAIN.com
log file = /var/log/samba/log.%m
max log size = 50
template shell = /bin/bash
winbind enum users = Yes
winbind enum groups = Yes
winbind use default domain = Yes
winbind normalize names = Yes
idmap config MYDOMAIN:base_rid = 0
idmap config MYDOMAIN:range = 100000-199999
idmap config MYDOMAIN:backend = rid
idmap config * : range = 16777216-33554431
idmap config * : backend = tdb
cups options = raw

[users]
path = /home/users
valid users = "@MYDOMAIN\Domain Users"
read only = No

The final trick was to follow the specific example in the Samba Selinux Policy Documentation. The example I followed is below

FILE_CONTEXTS
SELinux requires files to have an extended attribute to define the file
type. Policy governs the access daemons have to these files. If you
want to share files other than home directories, those files must be
labeled samba_share_t. So if you created a special directory /var/eng,
you would need to label the directory with the chcon tool.

chcon -t samba_share_t /var/eng

To make this change permanent (survive a relabel), use the semanage
command to add the change to file context configuration:

semanage fcontext -a -t samba_share_t "/var/eng(/.*)?"
This command adds the following entry to /etc/selinux/POLICYTYPE/con‐
texts/files/file_contexts.local:

/var/eng(/.*)? system_ubject_r:samba_share_t:s0

Run the restorecon command to apply the changes:

restorecon -R -v /var/eng/


I created a new test directory and applied the above to label the directory for sharing and the new directory instantly came up!

Thanks again for all of your help as this was a great learning experience!
 
  


Reply



Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
Can't Authenticate with winbind to view Samba shares on XP fmcp Linux - Server 0 04-24-2009 01:20 PM
accessing samba shares from windows xubuntu_idiot Linux - Software 1 09-05-2006 12:25 PM
Difficulty accessing SAMBA shares Tsarok Slackware 1 08-30-2005 09:16 PM
Winbind Samba - Access Denied Shares Wylz Linux - Software 3 10-06-2004 04:30 AM
Accessing Samba Shares The_Q DamnSmallLinux 2 02-05-2004 04:36 AM

LinuxQuestions.org > Forums > Linux Forums > Linux - Newbie

All times are GMT -5. The time now is 07:34 PM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration