[SOLVED] SAMBA client wont follow sym links..

mredward1974 · 04-12-2010, 06:06 PM

Hi all,

"Something happened" to my samba install, and it was working fine, and is still largely working fine, except I cant browse via syn links created with:

[code]user@server~/medialist>ln -s /media/disk1/films/ films[code]

This used to work fine, and i cant figure out what happened...

I rebooted, (after umount -a, then commenting out the connected usb drives from fstab and turning them off...reboot...turn on drives one by one, uncomment from fstab, mount -a...its a bit of a drag rebooting! Quite a few updates happened (openSuse11.2)...

I can still browse all the samba shares directly but I cant follow a symlink anymore ("you do not have permisssion to view this file") from the same windows client to any of them if they are linked as above.

I have searched What am I doing wrong?

Thanks in advance,
Jim

Guttorm · 04-14-2010, 04:46 AM

Hi

I had the same problem. An update changed this. From /usr/share/doc/samba/changelog.Debian.gz

samba (3.0.28a-1ubuntu4.11) hardy-security; urgency=low

* SECURITY UPDATE: arbitrary file disclosure via wide links
- debian/patches/security-CVE-2010-0926.patch: disable wide links when
UNIX extensions are enabled in source/param/loadparm.c,
source/smbd/service.c, source/smbd/trans2.c, source/smbd/vfs.c,
docs/htmldocs/manpages/smb.conf.5.html, docs/manpages/smb.conf.5.
- CVE-2010-0926
* WARNING: This changes the default samba behaviour. For security
reasons, it is no longer possible to use wide links and UNIX
extensions at the same time. After applying this security update, wide
links will be disabled automatically as UNIX extensions are turned on
by default. If wide links are required, you may re-enable them by
adding "unix extensions = no" to the [global] section of
the /etc/samba/smb.conf configuration file.

mredward1974 · 04-14-2010, 04:45 PM

Thanks a lot, I had read about that and added "unix extensions = no" but I also had to add "follow wide links = yes" to the [global] section of /etc/samba/smb.conf, but your post pointed me in the right direction.

I rebooted Samba, i.e as root:

Code:

/etc/init.d/smb restart

and

Code:

/etc/init.d/nmb restart

And browsed to my directory

It says in the man page that "follow wide links = yes" is the default behaviour, but apparently not on my box. :S

Thanks again
Jim