LinuxQuestions.org
Review your favorite Linux distribution.
Home Forums Tutorials Articles Register
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Networking
User Name
Password
Linux - Networking This forum is for any issue related to networks or networking.
Routing, network cards, OSI, etc. Anything is fair game.

Notices


Reply
  Search this Thread
Old 09-12-2003, 01:27 PM   #1
Moribund
LQ Newbie
 
Registered: Jun 2003
Posts: 14

Rep: Reputation: 0
Unhappy Another Samba problem



Ive set up samba on Linux box (running Mandrake 9.1) and would like it to connect to my win 2 k box.

I've followed several "how-to's" and am fairly confident I have smb.conf set right. I also ran smbpsswd for all users on the mandrake box.
The three users on the mandrake box are the same as three of the users on the W2k box.

Ok this is where it is weird. W2k can "see" the Samba server and it shows up in explorer with the comment "servername samba server 2.2.7a" but i can't ping the server machine from w2k by ip nor its name.

The client machines are all getting there ip addresses from dhcpd (though am I right in thinking that this shouldn't affect samba?).

where have I gone wrong?
any help welcomed.
 
Old 09-12-2003, 03:18 PM   #2
tarballedtux
Member
 
Registered: Aug 2001
Location: Off the coast of Madadascar
Posts: 498

Rep: Reputation: 30
can you post the output of thse commands:

iptables -L
netstat -tupan
cat <your smb.conf file>


--tarballedtux
 
Old 09-12-2003, 09:10 PM   #3
steely
Member
 
Registered: Aug 2003
Location: Houston TX
Distribution: Ubuntu
Posts: 37

Rep: Reputation: 15
Samba issue

Check and make sure you don't have a firewall running on your linux box. That will kill those packets you're sending from your 2k box. If you don't need the firewall, turn it off. Check your Mandrake documentation to find out how to turn it off. Good luck.
 
Old 09-12-2003, 09:34 PM   #4
Moribund
LQ Newbie
 
Registered: Jun 2003
Posts: 14

Original Poster
Rep: Reputation: 0
Thanks for the replies. I wondered whether the firewall might be the problem.

Ok out put of iptables -L

Chain INPUT (policy DROP)
target prot opt source destination
ACCEPT all -- anywhere anywhere
ppp_in all -- anywhere anywhere
eth0_in all -- anywhere anywhere
common all -- anywhere anywhere
LOG all -- anywhere anywhere LOG level info prefix `Shorewall:INPUT:REJECT:
'
reject all -- anywhere anywhere

Chain FORWARD (policy DROP)
target prot opt source destination
ppp_fwd all -- anywhere anywhere
eth0_fwd all -- anywhere anywhere
common all -- anywhere anywhere
LOG all -- anywhere anywhere LOG level info prefix `Shorewall:FORWARD:REJEC
T:'
reject all -- anywhere anywhere

Chain OUTPUT (policy DROP)
target prot opt source destination
ACCEPT all -- anywhere anywhere
ACCEPT icmp -- anywhere anywhere
fw2net all -- anywhere anywhere
fw2masq all -- anywhere anywhere
common all -- anywhere anywhere
LOG all -- anywhere anywhere LOG level info prefix `Shorewall:OUTPUT:REJECT
:'
reject all -- anywhere anywhere

Chain all2all (2 references)
target prot opt source destination
ACCEPT all -- anywhere anywhere state RELATED,ESTABLISHED
newnotsyn tcp -- anywhere anywhere state NEW tcp flags:!SYN,RST,ACK/SYN
common all -- anywhere anywhere
LOG all -- anywhere anywhere LOG level info prefix `Shorewall:all2all:REJEC
T:'
reject all -- anywhere anywhere

Chain common (5 references)
target prot opt source destination
icmpdef icmp -- anywhere anywhere
DROP tcp -- anywhere anywhere state INVALID
REJECT udp -- anywhere anywhere udp dpts:netbios-ns:netbios-ssn reject-with ic
mp-port-unreachable
REJECT udp -- anywhere anywhere udp dpt:microsoft-ds reject-with icmp-port-unr
eachable
reject tcp -- anywhere anywhere tcp dpt:135
DROP udp -- anywhere anywhere udp dpt:1900
DROP all -- anywhere 255.255.255.255
DROP all -- anywhere BASE-ADDRESS.MCAST.NET/4
reject tcp -- anywhere anywhere tcp dpt:auth
DROP all -- anywhere 192.168.1.255

Chain dynamic (4 references)
target prot opt source destination

Chain eth0_fwd (1 references)
target prot opt source destination
dynamic all -- anywhere anywhere
masq2net all -- anywhere anywhere

Chain eth0_in (1 references)
target prot opt source destination
dynamic all -- anywhere anywhere
masq2fw all -- anywhere anywhere

Chain fw2masq (1 references)
target prot opt source destination
ACCEPT all -- anywhere anywhere state RELATED,ESTABLISHED
newnotsyn tcp -- anywhere anywhere state NEW tcp flags:!SYN,RST,ACK/SYN
ACCEPT tcp -- anywhere anywhere state NEW tcp dpt:ipp
ACCEPT tcp -- anywhere anywhere state NEW tcp dptrinter
ACCEPT tcp -- anywhere anywhere state NEW tcp dpt:netbios-ns
ACCEPT tcp -- anywhere anywhere state NEW tcp dpt:netbios-dgm
ACCEPT tcp -- anywhere anywhere state NEW tcp dpt:netbios-ssn
ACCEPT udp -- anywhere anywhere state NEW udp dpt:ipp
ACCEPT udp -- anywhere anywhere state NEW udp dptrinter
ACCEPT udp -- anywhere anywhere state NEW udp dpt:netbios-ns
ACCEPT udp -- anywhere anywhere state NEW udp dpt:netbios-dgm
ACCEPT udp -- anywhere anywhere state NEW udp dpt:netbios-ssn
all2all all -- anywhere anywhere

Chain fw2net (1 references)
target prot opt source destination
ACCEPT all -- anywhere anywhere state RELATED,ESTABLISHED
newnotsyn tcp -- anywhere anywhere state NEW tcp flags:!SYN,RST,ACK/SYN
ACCEPT all -- anywhere anywhere

Chain icmpdef (1 references)
target prot opt source destination

Chain loc2net (0 references)
target prot opt source destination
ACCEPT all -- anywhere anywhere state RELATED,ESTABLISHED
newnotsyn tcp -- anywhere anywhere state NEW tcp flags:!SYN,RST,ACK/SYN
ACCEPT all -- anywhere anywhere

Chain masq2fw (1 references)
target prot opt source destination
ACCEPT all -- anywhere anywhere state RELATED,ESTABLISHED
newnotsyn tcp -- anywhere anywhere state NEW tcp flags:!SYN,RST,ACK/SYN
ACCEPT tcp -- anywhere anywhere state NEW tcp dpt:domain
ACCEPT tcp -- anywhere anywhere state NEW tcp dpt:bootps
ACCEPT tcp -- anywhere anywhere state NEW tcp dpt:http
ACCEPT tcp -- anywhere anywhere state NEW tcp dpt:https
ACCEPT tcp -- anywhere anywhere state NEW tcp dpt:ipp
ACCEPT tcp -- anywhere anywhere state NEW tcp dpt:imap
ACCEPT tcp -- anywhere anywhere state NEW tcp dptop3
ACCEPT tcp -- anywhere anywhere state NEW tcp dpt:smtp
ACCEPT tcp -- anywhere anywhere state NEW tcp dpt:nntp
ACCEPT tcp -- anywhere anywhere state NEW tcp dpt:ntp
ACCEPT udp -- anywhere anywhere state NEW udp dpt:domain
ACCEPT udp -- anywhere anywhere state NEW udp dpt:bootps
ACCEPT udp -- anywhere anywhere state NEW udp dpt:http
ACCEPT udp -- anywhere anywhere state NEW udp dpt:https
ACCEPT udp -- anywhere anywhere state NEW udp dpt:ipp
ACCEPT udp -- anywhere anywhere state NEW udp dpt:imap
ACCEPT udp -- anywhere anywhere state NEW udp dptop3
ACCEPT udp -- anywhere anywhere state NEW udp dpt:smtp
ACCEPT udp -- anywhere anywhere state NEW udp dpt:nntp
ACCEPT udp -- anywhere anywhere state NEW udp dpt:ntp
all2all all -- anywhere anywhere

Chain masq2net (1 references)
target prot opt source destination
ACCEPT all -- anywhere anywhere state RELATED,ESTABLISHED
newnotsyn tcp -- anywhere anywhere state NEW tcp flags:!SYN,RST,ACK/SYN
ACCEPT all -- anywhere anywhere

Chain net2all (3 references)
target prot opt source destination
ACCEPT all -- anywhere anywhere state RELATED,ESTABLISHED
newnotsyn tcp -- anywhere anywhere state NEW tcp flags:!SYN,RST,ACK/SYN
common all -- anywhere anywhere
LOG all -- anywhere anywhere LOG level info prefix `Shorewall:net2allROP:
'
DROP all -- anywhere anywhere

Chain newnotsyn (7 references)
target prot opt source destination
DROP all -- anywhere anywhere

Chain ppp_fwd (1 references)
target prot opt source destination
dynamic all -- anywhere anywhere
net2all all -- anywhere anywhere
net2all all -- anywhere anywhere

Chain ppp_in (1 references)
target prot opt source destination
dynamic all -- anywhere anywhere
net2all all -- anywhere anywhere

Chain reject (6 references)
target prot opt source destination
REJECT tcp -- anywhere anywhere reject-with tcp-reset
REJECT all -- anywhere anywhere reject-with icmp-port-unreachable

Chain shorewall (0 references)
target prot opt source destination
---
Output from netstat -tupan

Active Internet connections (servers and established)
Proto Recv-Q Send-Q Local Address Foreign Address State PID/Program name
tcp 0 0 0.0.0.0:32768 0.0.0.0:* LISTEN 1060/
tcp 0 0 0.0.0.0:2049 0.0.0.0:* LISTEN -
tcp 0 0 127.0.0.1:32769 0.0.0.0:* LISTEN 2085/xinetd
tcp 0 0 0.0.0.0:32770 0.0.0.0:* LISTEN -
tcp 0 0 0.0.0.0:32771 0.0.0.0:* LISTEN 2275/rpc.mountd
tcp 0 0 0.0.0.0:901 0.0.0.0:* LISTEN 2085/xinetd
tcp 0 0 0.0.0.0:139 0.0.0.0:* LISTEN 4688/smbd
tcp 0 0 0.0.0.0:111 0.0.0.0:* LISTEN 989/
tcp 0 0 0.0.0.0:10000 0.0.0.0:* LISTEN 2568/perl
tcp 0 0 0.0.0.0:6000 0.0.0.0:* LISTEN 2034/
tcp 0 0 195.137.47.15:53 0.0.0.0:* LISTEN 2035/
tcp 0 0 192.168.1.1:53 0.0.0.0:* LISTEN 2035/
tcp 0 0 127.0.0.1:53 0.0.0.0:* LISTEN 2035/
tcp 0 0 0.0.0.0:22 0.0.0.0:* LISTEN 2061/sshd
tcp 0 0 0.0.0.0:631 0.0.0.0:* LISTEN 2120/cupsd
tcp 0 0 127.0.0.1:25 0.0.0.0:* LISTEN 2487/
tcp 0 0 127.0.0.1:953 0.0.0.0:* LISTEN 2035/
udp 0 0 0.0.0.0:32768 0.0.0.0:* 1060/
udp 0 0 0.0.0.0:513 0.0.0.0:* 2301/rwhod
udp 0 0 0.0.0.0:2049 0.0.0.0:* -
udp 0 0 0.0.0.0:32769 0.0.0.0:* 2035/
udp 0 0 0.0.0.0:32770 0.0.0.0:* -
udp 0 0 0.0.0.0:32771 0.0.0.0:* 2275/rpc.mountd
udp 0 0 192.168.1.1:137 0.0.0.0:* 4698/nmbd
udp 0 0 0.0.0.0:137 0.0.0.0:* 4698/nmbd
udp 0 0 192.168.1.1:138 0.0.0.0:* 4698/nmbd
udp 0 0 0.0.0.0:138 0.0.0.0:* 4698/nmbd
udp 0 0 0.0.0.0:10000 0.0.0.0:* 2568/perl
udp 0 0 195.137.47.15:53 0.0.0.0:* 2035/
udp 0 0 192.168.1.1:53 0.0.0.0:* 2035/
udp 0 0 127.0.0.1:53 0.0.0.0:* 2035/
udp 0 0 0.0.0.0:111 0.0.0.0:* 989/
udp 0 0 0.0.0.0:631 0.0.0.0:* 2120/cupsd

----
and my smb.conf file

# Global parameters
[global]
log file = /var/log/samba/log.%m
socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
map to guest = Bad User
encrypt passwords = Yes
printer admin = @adm
wins support = true
dns proxy = No
netbios name = SERVER
server string = Samba Server %v
printing = cups
default = homes
path = /share
workgroup = WORKGROUP
os level = 20
comment = test share
printcap name = cups
max log size = 50
max connections = 3

[homes]
create mask = 0664
comment = Home Directories
writeable = yes
valid users = %S
path = /home



[/mnt/cdrom]
path = /mnt/cdrom
guest ok = Yes
--------------
I've been banging my head against this for weeks and I have read so many guides. thanks again
 
Old 09-12-2003, 10:49 PM   #5
steely
Member
 
Registered: Aug 2003
Location: Houston TX
Distribution: Ubuntu
Posts: 37

Rep: Reputation: 15
samba issues

If you're a newbie, I strongly recommend you use webmin to help with your configuration. It will make life easier now. Once you understand more of the concepts, then you can go back and get under the hood to learn why. Get it from www.webmin.com
 
Old 09-13-2003, 10:46 AM   #6
Moribund
LQ Newbie
 
Registered: Jun 2003
Posts: 14

Original Poster
Rep: Reputation: 0
Yep I use webmin I wouldn't have got this far without it. I can only manage a little console stuff.

thanks for the advice.
mori
 
Old 09-13-2003, 11:52 AM   #7
mikeshn
Member
 
Registered: Feb 2002
Posts: 586

Rep: Reputation: 30
Quote:
Originally posted by tarballedtux
can you post the output of thse commands:

iptables -L
netstat -tupan
cat <your smb.conf file>


--tarballedtux
I also insstall SAMBA adn it running. But I cannot access Windows or Linux Machine (RH9 and Win98).

roto Recv-Q Send-Q Local Address Foreign Address State PID/Program name
tcp 0 0 0.0.0.0:32768 0.0.0.0:* LISTEN 839/
tcp 0 0 0.0.0.0:3306 0.0.0.0:* LISTEN 6768/
tcp 0 0 0.0.0.0:139 0.0.0.0:* LISTEN 28863/smbd
tcp 0 0 127.0.0.1:783 0.0.0.0:* LISTEN 1002/spamd -d -c -a
tcp 0 0 0.0.0.0:111 0.0.0.0:* LISTEN 820/
tcp 0 0 0.0.0.0:80 0.0.0.0:* LISTEN 28596/httpd
tcp 0 0 0.0.0.0:6000 0.0.0.0:* LISTEN 28098/X
tcp 0 0 0.0.0.0:22 0.0.0.0:* LISTEN 28461/sshd
tcp 0 0 127.0.0.1:631 0.0.0.0:* LISTEN 11815/cupsd
tcp 0 0 127.0.0.1:25 0.0.0.0:* LISTEN 983/
tcp 0 0 0.0.0.0:443 0.0.0.0:* LISTEN 28596/httpd
tcp 0 0 127.0.0.1:44874 127.0.0.1:631 TIME_WAIT -
tcp 0 0 127.0.0.1:44875 127.0.0.1:631 TIME_WAIT -
tcp 0 0 127.0.0.1:44873 127.0.0.1:631 TIME_WAIT -
tcp 0 0 127.0.0.1:44878 127.0.0.1:631 TIME_WAIT -
tcp 0 0 127.0.0.1:44879 127.0.0.1:631 TIME_WAIT -
tcp 0 0 127.0.0.1:44876 127.0.0.1:631 TIME_WAIT -
tcp 0 0 127.0.0.1:44877 127.0.0.1:631 TIME_WAIT -
tcp 0 0 127.0.0.1:44866 127.0.0.1:631 TIME_WAIT -
tcp 0 0 127.0.0.1:44851 127.0.0.1:631 TIME_WAIT -
tcp 0 0 127.0.0.1:44854 127.0.0.1:631 TIME_WAIT -
tcp 0 0 127.0.0.1:44853 127.0.0.1:631 TIME_WAIT -
tcp 0 0 192.168.1.102:44847 216.239.41.104:80 ESTABLISHED 28251/galeon-bin
tcp 0 0 192.168.1.102:44842 64.246.34.13:80 TIME_WAIT -
tcp 10 0 192.168.1.102:43243 66.187.232.101:443 CLOSE_WAIT 28247/python
tcp 10 0 192.168.1.102:43246 66.187.232.101:443 CLOSE_WAIT 28247/python
tcp 10 0 192.168.1.102:43249 66.187.232.101:443 CLOSE_WAIT 28247/python
tcp 48 0 192.168.1.102:43756 207.44.202.105:22 ESTABLISHED 28525/ssh
udp 0 0 0.0.0.0:32768 0.0.0.0:* 839/
udp 0 0 192.168.1.102:137 0.0.0.0:* 28867/nmbd
udp 0 0 0.0.0.0:137 0.0.0.0:* 28867/nmbd
udp 0 544 192.168.1.102:138 0.0.0.0:* 28867/nmbd
udp 0 0 0.0.0.0:138 0.0.0.0:* 28867/nmbd
udp 0 0 0.0.0.0:68 0.0.0.0:* 728/dhclient
udp 0 0 0.0.0.0:111 0.0.0.0:* 820/
udp 0 0 0.0.0.0:631 0.0.0.0:* 11815/cupsd
udp 0 0 0.0.0.0:1015 0.0.0.0:* 839/

[root@localhost init.d]# ./iptables -L
Usage: ./iptables {start|stop|restart|condrestart|status|panic|save}


[public]
; path = /home/mike
; public = yes
; only guest = yes
; writable = yes
; printable = no

# The following two entries demonstrate how to share a directory so that two
# users can place files there that will be owned by the specific users. In this
# setup, the directory should be writable by both users and should have the
# sticky bit set on it to prevent abuse. Obviously this could be extended to
# as many users as required.
[myshare]
; comment = Mike stuff
; path = /home/mike/
; valid users = mike
; public = ues
; writable = yes
; printable = no
; create mask = 0765
 
Old 09-13-2003, 03:43 PM   #8
steely
Member
 
Registered: Aug 2003
Location: Houston TX
Distribution: Ubuntu
Posts: 37

Rep: Reputation: 15
mikeshn

Check your 'my share' section of your smb.conf file.
Your public= line may be causing you trouble.
 
Old 09-13-2003, 03:53 PM   #9
mikeshn
Member
 
Registered: Feb 2002
Posts: 586

Rep: Reputation: 30
Quote:
Originally posted by steely
mikeshn

Check your 'my share' section of your smb.conf file.
Your public= line may be causing you trouble.
Can the problem be because the windows machine is WIn 98? I'm not sure if Samba support Win98?

Thanks
 
Old 09-13-2003, 05:48 PM   #10
BigJadoo
LQ Newbie
 
Registered: Sep 2003
Posts: 3

Rep: Reputation: 0
samba surely supports win 98 - have one running here

Did you try shutting off your firewall and pinging? -- atleast you will know if its beacuse of firewall.

Check the basics.....natural to forget the simplest of things:

--Network configurations on client boxes (add all machines to the work group specified in your conf)
--Winserver information on client boxes
--dhcpd.conf
--TCP configurations on client boxes
 
Old 09-13-2003, 10:52 PM   #11
daemonserv
LQ Newbie
 
Registered: Sep 2003
Posts: 1

Rep: Reputation: 0
im having the exact problem with one difference. i can SEE and PING the machine but it just wont allow access under network neighborhood.

ive read all the helps and howtwos but nothing seems to change this problem .

its redhat 9 and winxp

whats going on?
 
Old 09-14-2003, 01:30 AM   #12
steely
Member
 
Registered: Aug 2003
Location: Houston TX
Distribution: Ubuntu
Posts: 37

Rep: Reputation: 15
Turn off the firewall. If you're behind a NAT hardware router, you don't need it. The easiest way under Redhat is to disable the service. Run from redhat-config-services from /usr/sbin as root, and disable iptables. If you do need it, just stop it and test your connection.
 
Old 09-14-2003, 08:22 AM   #13
mikeshn
Member
 
Registered: Feb 2002
Posts: 586

Rep: Reputation: 30
Quote:
Originally posted by steely
Turn off the firewall. If you're behind a NAT hardware router, you don't need it. The easiest way under Redhat is to disable the service. Run from redhat-config-services from /usr/sbin as root, and disable iptables. If you do need it, just stop it and test your connection.

I removed firewall from Linux box. and can ping both machines. Does Samba requires some ports to be open?


Thanks
 
Old 09-14-2003, 05:54 PM   #14
steely
Member
 
Registered: Aug 2003
Location: Houston TX
Distribution: Ubuntu
Posts: 37

Rep: Reputation: 15
I'm not aware of any ports that need to open. Have you closed any? If so, try reopening each one, one at a time and see how it works.
 
Old 09-15-2003, 03:09 AM   #15
Moribund
LQ Newbie
 
Registered: Jun 2003
Posts: 14

Original Poster
Rep: Reputation: 0
Looks my problem got a bit buried under Mikeshns there
I'm guessing that the firewall is possibly causing my problem as well. So assuming that is the case can anyone out there offer any advice. I need to be able to connect to the other machines on my network which have been assigned static ips.

Thanks
Mori
 
  


Reply



Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
Samba - Windows XP Problem (//Samba is not accessible) Covenent Linux - Networking 20 08-11-2011 04:07 PM
samba 3 problem - samba PDC can not join to the domain ananthak Linux - Networking 1 05-21-2006 10:39 AM
samba problem. bruse Linux - Networking 1 08-13-2005 10:08 AM
Samba Problem tied2 Linux - Newbie 5 06-17-2002 09:41 PM
when i restart SAMBA,it says:stop samba failed,start SAMBA OK! whepin Linux - Networking 3 12-26-2001 05:54 AM

LinuxQuestions.org > Forums > Linux Forums > Linux - Networking

All times are GMT -5. The time now is 09:05 AM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration