New Samba user can't access shares

qwerty77 · 08-01-2011, 04:26 AM

We are running a Samba fileshare which has several users specified in the smb.conf as follows:

Code:

  # path = /data/HR
        path = /usbhdd/HR
        writeable = yes
        browseable = yes
        guest ok = no
        oplocks = no
        locking = no
        valid users = bungle zippy charlie root joe
        veto files = /*.msi/*.exe/*.mp3/*.bat/*.com/*.dll/*.lnk/*.asd/*.shb/*.vb/*.wsf/*.wsh/*.pif/*.scr/*.chm/*.hta/*.shs/*.vbs/*.vbe/*.js/*.jse/*.wmv/*.3gp/*.avi/*.mp4/

The server is also used as NIS server and all the users specified also have server accounts created using adduser. The passwords used to authenticate for Samba are therefore being handled by PAM and are stored encrypted in /etc/shadow.

All is good for all users except for zippy, who was added later. Zippy is unable to successfully authenticate to connect to the Samba fileshare.

Zippy is however able to login via NIS, which confirms that his server account is operational and working fine.

When he tries to login to the fileshare, the following entry appears in /var/log/samba/log.zippy

Code:

[2011/08/01 17:23:50.555369,  1] smbd/service.c:678(make_connection_snum)
  create_connection_server_info failed: NT_STATUS_ACCESS_DENIED

After the user account on the server was setup, all I did was add zippy's name to the smb.conf in the same place as the others. Did I miss something?

Thanks.

gregvp · 08-01-2011, 10:26 PM

It's been a while since I did any of this, but you used to have to run smbpasswd -a zippy (as root), after adding him as a unix user, which you've done.

I have an idea that Samba has changed recently though. Best check the tutorials on their site.

qwerty77 · 08-01-2011, 11:13 PM

Quote:

Originally Posted by gregvp

It's been a while since I did any of this, but you used to have to run smbpasswd -a zippy (as root), after adding him as a unix user, which you've done.

I have an idea that Samba has changed recently though. Best check the tutorials on their site.

Thanks for that Greg. I just tried that and it asked me for the user's password. I'm an administrator and don't know what password the user has used on the server. I'm also one of those named users and I do know that the guy the setup the share originally never needed to ask me what my password was when he set it up. I think it should be authenticating using the existing passwords in /etc/shadow and it appears to be doing so for all except the new user.

Anyway, I used smbpasswd as a workaround, since it enabled me to add the user. I grabbed the user and asked her to enter her password directly. I'll consider this job done! :-)

Thanks for your help.

centos123 · 08-02-2011, 12:58 AM

@qwerty
can you give me some detail of users file/directories permission you are using and also the group they belongs..of yours linux server