LinuxQuestions.org
Help answer threads with 0 replies.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Newbie
User Name
Password
Linux - Newbie This Linux forum is for members that are new to Linux.
Just starting out and have a question? If it is not in the man pages or the how-to's this is the place!

Notices


Reply
  Search this Thread
Old 05-16-2011, 05:39 PM   #1
lilthon2002
LQ Newbie
 
Registered: Apr 2006
Posts: 5

Rep: Reputation: 0
samba folders unwritable


Hi,

I hope that somebody can help me with the issue that I am dealing with on my Samba Server, I just recently built a new linux server Redhat Enterprise Linux 6 and installed Samba version 3.5.4-68.el6. I copied a configuration file from an old Linux Server (Redhat Enterprise Linux 3.0AS) with a properly running Samba version 3.07131 . To make sure that everything will be ok, I created the same group and added the users on that group and created the same directories with the file name and attributes as that of the old server. Evrything seems fine as I can see all the shared folders on the windows XP and windows 7 Machines until I tried to write something on those folder. I keep getting the message that the action is denied and I need permission to perform that action. I do not know what to do next, hence this post.

I hope that you can help me guys the soonest as I am trying to meet a deadline set by my company.

Below is the copy of my configuration file.

# This is the main Samba configuration file. You should read the
# smb.conf(5) manual page in order to understand the options listed
# here. Samba has a huge number of configurable options (perhaps too
# many!) most of which are not shown in this example
#
# For a step to step guide on installing, configuring and using samba,
# read the Samba-HOWTO-Collection. This may be obtained from:
# http://www.samba.org/samba/docs/Samb...Collection.pdf
#
# Many working examples of smb.conf files can be found in the
# Samba-Guide which is generated daily and can be downloaded from:
# http://www.samba.org/samba/docs/Samba-Guide.pdf
#
# Any line which starts with a ; (semi-colon) or a # (hash)
# is a comment and is ignored. In this example we will use a #
# for commentry and a ; for parts of the config file that you
# may wish to enable
#
# NOTE: Whenever you modify this file you should run the command "testparm"
# to check that you have not made any basic syntactic errors.
#
#---------------
# SELINUX NOTES:
#
# If you want to use the useradd/groupadd family of binaries please run:
# setsebool -P samba_domain_controller on
#
# If you want to share home directories via samba please run:
# setsebool -P samba_enable_home_dirs on
#
# If you create a new directory you want to share you should mark it as
# "samba-share_t" so that selinux will let you write into it.
# Make sure not to do that on system directories as they may already have
# been marked with othe SELinux labels.
#
# Use ls -ldZ /path to see which context a directory has
#
# Set labels only on directories you created!
# To set a label use the following: chcon -t samba_share_t /path
#
# If you need to share a system created directory you can use one of the
# following (read-only/read-write):
# setsebool -P samba_export_all_ro on
# or
# setsebool -P samba_export_all_rw on
#
# If you want to run scripts (preexec/root prexec/print command/...) please
# put them into the /var/lib/samba/scripts directory so that smbd will be
# allowed to run them.
# Make sure you COPY them and not MOVE them so that the right SELinux context
# is applied, to check all is ok use restorecon -R -v /var/lib/samba/scripts
#
#--------------
#
#======================= Global Settings =====================================

[global]

# ----------------------- Netwrok Related Options -------------------------
#
# workgroup = NT-Domain-Name or Workgroup-Name, eg: MIDEARTH
#
# server string is the equivalent of the NT Description field
#
# netbios name can be used to specify a server name not tied to the hostname
#
# Interfaces lets you configure Samba to use multiple interfaces
# If you have multiple network interfaces then you can list the ones
# you want to listen on (never omit localhost)
#
# Hosts Allow/Hosts Deny lets you restrict who can connect, and you can
# specifiy it as a per share option as well
#
# workgroup = WORKGROUP
# server string = Samba Server Version %v

; netbios name = MYSERVER
; netbios name = OSPLIVESERVER

; interfaces = lo eth0 192.168.12.2/24 192.168.13.2/24
; hosts allow = 127. 192.168.12. 192.168.13.

[global]
dns proxy = no
log file = /var/log/samba/%m.log
load printers = yes
cups options = raw
printing = cups
server string = OSP Live Server
socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
wins server = 10.20.8.5
local master = yes
workgroup = WORKGROUP
os level = 65
hosts allow = 10.20.5. 127.
security = share
preferred master = yes
max log size = 50


# --------------------------- Logging Options -----------------------------
#
# Log File let you specify where to put logs and how to split them up.
#
# Max Log Size let you specify the max size log files should reach

# logs split per machine
log file = /var/log/samba/log.%m
# max 50KB per log file, then rotate
max log size = 50

# ----------------------- Standalone Server Options ------------------------
#
# Scurity can be set to user, share(deprecated) or server(deprecated)
#
# Backend to store user information in. New installations should
# use either tdbsam or ldapsam. smbpasswd is available for backwards
# compatibility. tdbsam requires no further configuration.

security = user
passdb backend = tdbsam


# ----------------------- Domain Members Options ------------------------
#
# Security must be set to domain or ads
#
# Use the realm option only with security = ads
# Specifies the Active Directory realm the host is part of
#
# Backend to store user information in. New installations should
# use either tdbsam or ldapsam. smbpasswd is available for backwards
# compatibility. tdbsam requires no further configuration.
#
# Use password server option only with security = server or if you can't
# use the DNS to locate Domain Controllers
# The argument list may include:
# password server = My_PDC_Name [My_BDC_Name] [My_Next_BDC_Name]
# or to auto-locate the domain controller/s
# password server = *


; security = domain
; passdb backend = tdbsam
; realm = MY_REALM

; password server = <NT-Server-Name>

# ----------------------- Domain Controller Options ------------------------
#
# Security must be set to user for domain controllers
#
# Backend to store user information in. New installations should
# use either tdbsam or ldapsam. smbpasswd is available for backwards
# compatibility. tdbsam requires no further configuration.
#
# Domain Master specifies Samba to be the Domain Master Browser. This
# allows Samba to collate browse lists between subnets. Don't use this
# if you already have a Windows NT domain controller doing this job
#
# Domain Logons let Samba be a domain logon server for Windows workstations.
#
# Logon Scrpit let yuou specify a script to be run at login time on the client
# You need to provide it in a share called NETLOGON
#
# Logon Path let you specify where user profiles are stored (UNC path)
#
# Various scripts can be used on a domain controller or stand-alone
# machine to add or delete corresponding unix accounts
#
; security = user
; passdb backend = tdbsam

; domain master = yes
; domain logons = yes

# the login script name depends on the machine name
; logon script = %m.bat
# the login script name depends on the unix user used
; logon script = %u.bat
; logon path = \\%L\Profiles\%u
# disables profiles support by specifing an empty path
; logon path =

; add user script = /usr/sbin/useradd "%u" -n -g users
; add group script = /usr/sbin/groupadd "%g"
; add machine script = /usr/sbin/useradd -n -c "Workstation (%u)" -M -d /nohome -s /bin/false "%u"
; delete user script = /usr/sbin/userdel "%u"
; delete user from group script = /usr/sbin/userdel "%u" "%g"
; delete group script = /usr/sbin/groupdel "%g"


# ----------------------- Browser Control Options ----------------------------
#
# set local master to no if you don't want Samba to become a master
# browser on your network. Otherwise the normal election rules apply
#
# OS Level determines the precedence of this server in master browser
# elections. The default value should be reasonable
#
# Preferred Master causes Samba to force a local browser election on startup
# and gives it a slightly higher chance of winning the election
; local master = no
; os level = 33
; preferred master = yes

#----------------------------- Name Resolution -------------------------------
# Windows Internet Name Serving Support Section:
# Note: Samba can be either a WINS Server, or a WINS Client, but NOT both
#
# - WINS Support: Tells the NMBD component of Samba to enable it's WINS Server
#
# - WINS Server: Tells the NMBD components of Samba to be a WINS Client
#
# - WINS Proxy: Tells Samba to answer name resolution queries on
# behalf of a non WINS capable client, for this to work there must be
# at least one WINS Server on the network. The default is NO.
#
# DNS Proxy - tells Samba whether or not to try to resolve NetBIOS names
# via DNS nslookups.

; wins support = yes
; wins server = w.x.y.z
; wins proxy = yes

; dns proxy = yes

# --------------------------- Printing Options -----------------------------
#
# Load Printers let you load automatically the list of printers rather
# than setting them up individually
#
# Cups Options let you pass the cups libs custom options, setting it to raw
# for example will let you use drivers on your Windows clients
#
# Printcap Name let you specify an alternative printcap file
#
# You can choose a non default printing system using the Printing option

load printers = yes
cups options = raw

; printcap name = /etc/printcap
#obtain list of printers automatically on SystemV
; printcap name = lpstat
; printing = cups

# --------------------------- Filesystem Options ---------------------------
#
# The following options can be uncommented if the filesystem supports
# Extended Attributes and they are enabled (usually by the mount option
# user_xattr). Thess options will let the admin store the DOS attributes
# in an EA and make samba not mess with the permission bits.
#
# Note: these options can also be set just per share, setting them in global
# makes them the default for all shares

; map archive = no
; map hidden = no
; map read only = no
; map system = no
; store dos attributes = yes


#============================ Share Definitions ==============================

[homes]
comment = Home Directories
browseable = no
writable = yes
; valid users = %S
; valid users = MYDOMAIN\%S

[printers]
comment = All Printers
path = /var/spool/samba
browseable = no
guest ok = no
writable = no
printable = yes

# Un-comment the following and create the netlogon directory for Domain Logons
; [netlogon]
; comment = Network Logon Service
; path = /var/lib/samba/netlogon
; guest ok = yes
; writable = no
; share modes = no


# Un-comment the following to provide a specific roving profile share
# the default is to use the user's home directory
; [Profiles]
; path = /var/lib/samba/profiles
; browseable = no
; guest ok = yes


# A publicly accessible directory, but read only, except for people in
# the "staff" group
; [public]
; comment = Public Stuff
; path = /home/samba
; public = yes
; writable = yes
; printable = no
; write list = +staff


[homes]
comment = home directories
browseable = no
writable = yes

[root]
comment = root
path = /
valid users = @prodata,@it
Public = no
writable = yes
force user = root

[onboard]
comment = onboard system
path = /data/onboard
public = yes
read only = yes
write list = @it,@prodata
force create mode = 2775
force directory mode = 2775
force user = root
force group = it

[data]
writeable = yes
path = /data/
write list = @it,@prodata,@samba
force directory mode = 2775
force group = root
force create mode = 2775
force user = root
comment = data
valid users = sysman,@it,@prodata,@samba

[bank]
comment = bank system
path = /data/bank
public = yes
read only = yes
write list = @it,@prodata
force create mode = 2775
force directory mode = 2775
force user = root
force group = it

[it]
comment = it share folder
path = /data/it
public = yes
read only = yes
write list = @it,@prodata
create mode = 775
force create mode = 775
directory mode = 2770
force directory mode = 2770
force user = root
force group = it

[pos]
comment = pos system
path = /data/POS
public = yes
read only = yes
write list = @it,@prodata
force create mode = 2775
force directory mode = 2775
force user = root
force group = it

[pos dtf]
comment = dtf pos system
path = /data/DTF
public = yes
read only = yes
write list = @it,@prodata
force create mode = 2774
force directory mode = 2774
force user = root
force group = it

[reports]
comment = Onboard reports
path = /data/ship/prn
public = yes
read only = yes
write list = @it,@prodata
force create mode = 2774
force directory mode = 2774
force user = root
force group = it

[stk reports]
comment = Stock reports
path = /data/prSTK/log
public = yes
write list = @it,@prodata
force create mode = 2774
force directory mode = 2774
force user = root
force group = it


I will appreciate all the help that I can get.

Regards,

lilthon
 
Old 05-16-2011, 06:04 PM   #2
Chirel
Member
 
Registered: Nov 2009
Posts: 55

Rep: Reputation: 19
Hi,

it's nice to have the configuration, (much better to have it between code /code tags).

But could you explain the problem you have ?
Where can't you write ?
And please Show a ls -al output of the buggy directory.
 
Old 05-16-2011, 08:48 PM   #3
lilthon2002
LQ Newbie
 
Registered: Apr 2006
Posts: 5

Original Poster
Rep: Reputation: 0
samba folders unwritable

Hi,

Wow, that's really a quick reply, tnx.

What i am doing was checking the writability of my folders by mapping the drive, double click to open it, right-clicking on it and click on new folder or new text file and there I get the message that I need permission to proceed.

Here is the output of ls -al of that buggy:-( directory:

drwxrwxrwx 20 root root 4096 May 15 12:46 data

and its subdirectories :

drwxrwxrwx. 8 root root 4096 May 16 14:05 .
dr-xr-xr-x. 28 root root 4096 May 16 13:27 ..
drwxrwxrwx. 2 root root 4096 May 16 13:49 bank
drwxrwxrwx. 2 root root 4096 May 16 13:51 DTF
drwxrwxrwx. 2 root root 4096 May 16 13:49 it
drwx------. 2 root root 16384 May 16 10:00 lost+found
drwxrwxrwx. 2 root root 4096 May 16 13:47 onboard
drwxrwxrwx. 2 root root 4096 May 16 13:50 POS

If this can help, I'd like to mention that I heard about selinux and I am thinking that it has something to do with my issue:
If I ls -Z, this is the output:

drwxrwxrwx. root root system_ubject_r:etc_runtime_t:s0 data


I don't know anything about Selinux but from the output it looks like it is running and has something to do with my directories.

Any views?

Thanks for taking the time to reply.

Kind regards,

lilthon
 
Old 05-16-2011, 10:51 PM   #4
lilthon2002
LQ Newbie
 
Registered: Apr 2006
Posts: 5

Original Poster
Rep: Reputation: 0
Hi to all,

I am just happy to share to everyone that it is indeed Selinux that was causing my problem about not being able to write on a Samba shared folder. I manage to edit the config file on /etc/selinux , disable it and rebooted the system. Did folder mapping in XP and was able to create folders and file as a privileged users. Although I must admit that I am not completely happy because I know that SElinux was created for a certain purpose, and that is, as an added security and miss the chance of taking advantage of it. Well, my boss deadline was met and Selinux will be another thing to be learned of later. I will still mark this post as solved with the hope that some other newbies like me will learn from in the future.

Thanks everyone.
 
  


Reply

Tags
samba permissions


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
Is there any way to log user samba who delete or move files/folders on samba server ? b-RAM Linux - Server 1 02-09-2010 01:33 AM
why does auto-mounting make files unwritable? newbiesforever Linux - General 1 08-03-2008 07:14 PM
Samba can create new files and folders but access denied in any new folders k.king Linux - Networking 2 01-15-2006 07:14 AM
Bootsector Unwritable hamish Linux - Software 3 04-16-2005 08:03 AM
Unwritable windows partition AliasE Linux - General 6 01-13-2004 01:21 AM


All times are GMT -5. The time now is 01:43 PM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration