LinuxQuestions.org
LinuxAnswers - the LQ Linux tutorial section.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Software
User Name
Password
Linux - Software This forum is for Software issues.
Having a problem installing a new program? Want to know which application is best for the job? Post your question in this forum.

Notices

Reply
 
Search this Thread
Old 04-03-2007, 04:33 PM   #1
SeanWcisel
LQ Newbie
 
Registered: Apr 2007
Location: Grand Rapids, Michigan
Distribution: Ubuntu, Gentoo, Debian
Posts: 11

Rep: Reputation: 0
Samba not allowing one user to access one share


Here's a bit of background:

We have a windows server (2003) set up to manage virtually everything; our linux system (gentoo) is only a file server. Recently, a user has been unable to access a shared directory on that file server. They are presented with a login box, but no information seems to work (including admin logins). I tailed the samba logs, which are being given:

[xxxx/xx/xx time, 2] smbd/service.c:make_connection_snum(321)
user 'UserName' (from session setup) not permitted to access this share (ShareName)




Things I'm absolutely certain of (relevant things):

1. The user that is having this problem is a member of the appropriate groups.

2. Other members of this group can access this directory.

3. The user can access other shared directories per his permissions

4. This problem is in no way specific to which machine is used

Things I'm nearly certain of:

1. No changes have recently been made to this user's permissions in Exchange.

2. No other users are experiencing this issue.


this is the .conf, as it pertains to this share:

[ShareName]
path = /x/ShareName/
comment = domain GroupName
writeable = yes
valid users = @DOMAIN+groupname
create mask = 0777
directory mask = 0777
available = yes
browseable = yes
force group = DOMAIN+groupname
force create mode = 0660
force directory mode = 0770
oplocks = true
veto files = /.*/
delete veto files = true

This is relatively equivalent for all other shared folders (the format is identical, only the names are different where appropriate).


I'm stumped at this point. If anyone could tell me where to go from here, I'd really appreciate it.

Thank you,
Sean

EDIT: I'm really sorry, I believe I posted this in the wrong forum. Could someone please move it for me (I promise I'll be more careful from now on )?

Last edited by SeanWcisel; 04-03-2007 at 04:37 PM.
 
Old 04-03-2007, 05:34 PM   #2
msound
Member
 
Registered: Jun 2003
Location: SoCal
Distribution: CentOS
Posts: 465

Rep: Reputation: 30
Is samba configured to reference active directory in some way? Could we see the [global] portion of your smb.conf file? Is the user able to access other shares on your gentoo server? Does the user have any mapped network drives that may be automatically logging him/her in to the a network share under a different username?
 
Old 04-04-2007, 08:38 AM   #3
SeanWcisel
LQ Newbie
 
Registered: Apr 2007
Location: Grand Rapids, Michigan
Distribution: Ubuntu, Gentoo, Debian
Posts: 11

Original Poster
Rep: Reputation: 0
Quote:
Originally Posted by msound
Is samba configured to reference active directory in some way? Could we see the [global] portion of your smb.conf file? Is the user able to access other shares on your gentoo server? Does the user have any mapped network drives that may be automatically logging him/her in to the a network share under a different username?
Here's are the [global] configurations (cleaned up, naturally):

[global]
netbios name = server
netbios aliases = server
server string = somethingthatmakessense

socket options = TCP_NODELAY SO_RCVBUF=16384 SO_SNDBUF=16384
idmap uid = 10000-20000
winbind enum users = yes
winbind gid = 10000-20000
workgroup = WORKGROUP
os level = 20
winbind enum groups = yes
socket address = 10.10.1.10
# modified by ajt 4-2-2007 --origina: password server = *
password server = windowsserver.domain.local, *
preferred master = no
winbind separator = +
max log size = 50
# modified by ajt 4-2-2007 -- original: log level = 0
log level = 2
log file = /var/log/samba/log.%m
encrypt passwords = yes
dns proxy = no
realm = DOMAIN.LOCAL
security = ADS
wins server = 10.10.1.250
wins proxy = no


Everything there seems to be set up correctly, and the only change that has been made is commented above (and was made since we started experiencing this problem).

Yes, the user can access other shares on the gentoo server with no difficulty; and no, all users have only one login (remember, this occurs at all stations). To verify this, and as a means of further investigating, I cloned the user's permissions to another account, and had the same problem. As I said, however, this problem started seemingly out of the blue, and rather than telling the user he does not have permissions, he gets a password prompt that won't accept anything.

The user is a member of the group that has access to the share, I'm positive of that.

EDIT: Another user is experiencing these issues, but only one other. Things are described just about the same way, with the same results.

Last edited by SeanWcisel; 04-04-2007 at 10:03 AM.
 
  


Reply

Tags
samba


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
Samba NOT allowing access to folders cucolin@ Linux - Software 6 07-04-2007 02:25 AM
Samba NOT allowing access cucolin@ Linux - Software 4 11-09-2006 04:34 PM
Allowing user access to one directory only aje Slackware 5 05-25-2005 09:12 PM
samba user and share access? Moebius Linux - Software 3 08-30-2004 03:09 PM
XP user can't access samba share atp777 Linux - Software 0 03-30-2004 06:33 PM


All times are GMT -5. The time now is 08:08 AM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
identi.ca: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration