samba and ext3

mattydee · 11-28-2007, 10:26 PM

smb.conf as follows:

Code:

[matty-home]
	comment = Matty's home folder
	path = /home/matty
	valid users = matty
#	public = no
	writeable = yes

[matty]
	comment = Matty's data folder
	path = /maxtor/matty
	valid users = matty
#	public = no
	writeable = yes

The first folder resides on a reiserfs formatted partition and the second on an ext3 formatted one.

In the fisrt case, I have to enter User name and password to gain access... in the latter, I can enter anything as username as long as I have the right password.

What gives?

m3lkor001 · 11-29-2007, 03:12 PM

yesterday i was lookin around and remember seeing something about not requireing a login, and being able to adjust different settings for different groups. it was either on the desptop -> right click -> and properties and very right tab or
in the menu/settings ...

sorry i can't be very specfific but still real new. heop that helps a bit

mattydee · 11-29-2007, 07:07 PM

Update:

Even weirder...
If I enter a bogus username and the right password to mount the ext3 share, then I can do the same for the reiser share.

On the other hand, if I try to mount the reiser share first, then I have to have the right username and password, but I can still mount the ext3 share with bogus username and right password.

Is this a bug in samba or bad configuration on my part?

gilead · 11-29-2007, 07:12 PM

I don't think it's either - Samba is caching your password and searching the system for a username to use with it (so it's not filesystem related). There's more info at Samba Security Modes - the section about share level security talks about matching passwords to usernames.

jdogpc · 11-29-2007, 07:13 PM

Hi mattydee,

You shouldn't need to share the home dir for the user as this is done by the [homes] share, it identifies the user and gives it access his own home dir.

In the second case only the user matty should be able to connect to that share, check your smb.conf to see if you have samba acting as a public server, run the following command on the command line: testparm -vvv. This will give you a list of all the configurable items of samba and their actual value.

JdogPC

mattydee · 11-29-2007, 08:10 PM

Thanks folks.

I changed things so that the home directory is shared through homes and renamed the other share "matty-docs" and things seem to work fine now...

I was (and still am) using share security level. Now however, I must enter the right username when mounting the ext3 share.

I guess my original problem wasn't really due to the file system but probably because there was some kind of conflict in the way I was sharing homes, the home folder (incorrectly), and a data directory named after the username.

Mr_C · 11-30-2007, 09:28 AM

I think if you use user level security that won't happen...

mattydee · 11-30-2007, 11:15 AM

Quote:

Originally Posted by Mr_C

I think if you use user level security that won't happen...

Ya, I think you're right... but I don't want to bother with that. I find it inconvenient to have to provide credentials just to browse the shares list. With security = share I can still password protect rw shares and have public ro shares, which suits my needs.

This is my setup for a home network behind a router, so I think I'm relatively safe. I have a strong password + wpa2 protecting wireless access to the router...

Mr_C · 12-03-2007, 07:49 AM

Code:

[share]
comment = I guess you b puttin someting here
path = /somewhere/interesting
public = yes
guest ok = yes

With a guest ok you can enter the share without credentials
Oh make sure theres a global parameter saying guest account = nobody (check syntax cause I'm on windows and can't right now)

mattydee · 12-03-2007, 12:37 PM

Quote:

Originally Posted by Mr_C

Code:

[share]
comment = I guess you b puttin someting here
path = /somewhere/interesting
public = yes
guest ok = yes

With a guest ok you can enter the share without credentials
Oh make sure theres a global parameter saying guest account = nobody (check syntax cause I'm on windows and can't right now)

Thanks Mr. C.

I tried what you said but it doesn't work for me. I need smb4k to be able to list public shares. If I set

Code:

security = user

, my samba server insists on receiving credentials before displaying shares.

PS: I did make sure that I have

Code:

 guest account = nobody