Hi

I've been wrestling for a samba problem for over 3 days now. I've checked every forum and searched the net but I cant seem to find the problem.
I'm running samba 3.0.35 on Feudora RC2, with Shorewall as a firewall.
I've added users and machine accounts and enabled them.

My problem is this:
- I can access the smb server, but can't access the shares. (Access Denied)
(this gives me the idea that the firewall is correctly configured)

Local Network: 192.168.1.1 (eth0)
Internet: 81.229.122.2XX (eth1)

File Permissions on all shares: 755 (user:iztari,group:users)

Client: WinXP (SP2)

My SMB.CONF:
--------------------------------------------------------------------------------------
# Global parameters
[global]
workgroup = TUX-NET
os level = 64
netbios name = SERVER
write list = @users
encrypt passwords = yes
server string = Samba %v
security = SHARE
smb passwd file = /etc/samba/smbpasswd
interfaces = eth0
bind interfaces only = yes

[filmer]
comment = Filmer
path = /public/share/film/
read only = no
writeable = yes
guest ok = yes
public = yes
browseable = yes
-----------------------------------------------------------------------------------------
(all other shares are identical)


LOG FILES:
smbd.log
------------------------------------------------------------------------------------------
[2004/06/21 15:21:52, 0] smbd/server.c:main(757)
smbd version 3.0.3-5 started.
Copyright Andrew Tridgell and the Samba Team 1992-2004
[2004/06/21 15:29:38, 1] smbd/service.c:make_connection_snum(619)
xp-1 (192.168.1.10) connect to service filmer initially as user iztari (uid=500, gid=100) (pid 7671)
--------------------------------------------------------------------------------------------
nmbd.log:
--------------------------------------------------------------------------------------------
2004/06/21 15:21:48, 0] nmbd/nmbd.c:main(665)
Netbios nameserver version 3.0.3-5 started.
Copyright Andrew Tridgell and the Samba Team 1994-2004
[2004/06/21 15:24:56, 0] nmbd/nmbd_become_lmb.c:become_local_master_stage2(396)
*****

Samba name server SERVER is now a local master browser for workgroup TUX-NET on subnet 192.168.1.1

*****
---------------------------------------------------------------------------------------------

Any one got a qlue? If so please answer me, since I need to have Samba up and running as soon as possible

Doesn't anyone have a clue to my problem....
I'm in a desperate need of getting my Samba Server up and running again.

what are the rights on /public/share/film

The rights are: drwxrwxr-x 3 iztari users 4096 20 jun 18.58 film

hope /public and /public/share are traversable by the users group.

Does testparm run ok? You're smb.conf looks okay insofar as what's in it but I don't know what the defaults are like for Samba 3.x (I currently use 2.2.8a). Try setting security = user. In my smb.conf I'm pretty explicit about what I want so for interfaces and hosts I have:

hosts allow = 127.0.0.1 192.168.2.0/24 192.168.1.0/24
hosts deny = 0.0.0.0/0
interfaces = eth* lo
bind interfaces only = yes

which restricts access to local nets only. If you browse through the output of testparm it tells you what your current definitions are.

Usual stuff apart from that:

Check you've got linux users first (useradd etc)
Check you've added samba users (smbpasswd -a -e etc)
I make linux users with same name as samba users
On share try adding 'valid users = particular_samba_user' to test if that works (I normally have 'valid users = @users')
If you've mucked about with smbpasswd smbuser etc try clearing them out and starting afresh
I know you said the firewall's working bu try disabling it on both linux machine and Windows (I keep forgetting about Windows internet security configuration when I change local net IP addresses from time to time)
You say about adding machine names - I think that's only necessary if you're using Samba as a PDC
I notice from your conf that you've set os level pretty high - you only need that if you definitely want it to be the local master

Other global parameters you may like to try
log file = /var/log/samba/log.%m
log level = 3 (something larger than 1 depending upon how much detail you want)

That way you get a separate log file for each machine logging on

Good luck

Thanxs for the tips adrewdodsworth, but I've tried them and tried them again, but dam, still no luck....

I have been having this problem with samba 2.8 and 3 the only way i managed to get it to work was to change security to share....no one could give me an option other than this. While I have not tried the following yet I do plan to there are two possible solutions I have thought of.

One:Run samba as a domain and fool XP home into joining the domain. This one involves tweaking the windows OS quite abit.

Two:I recently found that 2000 XP and 2003 all use a new port in addition to the traditinal ones and I have to check to see if this port is open. anyways don't know if this will help all that much but I try.

I had it working under XP then once I installed XP1 it hasn't worked at all I wish you good luck

Alex

Now I've tried god damn everything, perhaps it is a faulty samba installation. This is my last hope. I'll try re-installing it and have a look at that.

See if it works by turning off the firewall first, and if it does then you know its something to do with the firewall. Can you ping the machines both ways? Try telling XP to look for an IP address instead of a host name. Go into My Computer and type \\192.168.1.1\ and see what that comes back with.

Also, I notice that your workgroup is TUX-NET in your smb.conf file. Make sure that your XP computer thinks it belongs to the same workgroup.

I don't mean to be rude, but.... don't you think i've tried that. Read the Post

I did a search on this.

Read the second to the last post in this thread. It evidently fixed the access denied for this guy.

http://www.linuxquestions.org/questi...?postid=616380

Just trying to help.

Netizen

Iztari
I was a bit concerned about the file permissions so I've checked mine. Because I restrict access to the shares via the smb.conf the linux permissions for all my data tend to be user=root group=root or user=user group=root. I changed the group to group=users and access to my data disappeared. Therefore I think you need group=root in order for the Samba server to bea ble to access it and then grant access to the shares as defined in your smb.conf.

My data share is as follows:
[data]
comment = Network data directories
path = /away/data/%u
create mask = 0640
directory mask = 0750
guest ok = no
printable = no
read only = no
browseable = yes

which maps 'data' to each users individual data area.

I had the same access denied message. I just redid my smbpasswd file and that fixed it. Also, all of my shared directories are owned by the 'users' group.

Netizen

Originally posted by Iztari
Hi

I've been wrestling for a samba problem for over 3 days now. I've checked every forum and searched the net but I cant seem to find the problem.
I'm running samba 3.0.35 on Feudora RC2, with Shorewall as a firewall.
I've added users and machine accounts and enabled them.
^^^^^^^^^^^ - require if samba act as PDC and this
workstation act as domain member

My problem is this:
- I can access the smb server, but can't access the shares. (Access Denied)
(this gives me the idea that the firewall is correctly configured)

did /etc/samba/smbpasswd file contains 'iztari' username ?
did 'smbclient -L <netbios_server_name> -U iztari works ?

Client: WinXP (SP2)
^^^ -bad idea ! sp2 still BETA

My SMB.CONF:
--------------------------------------------------------------------------------------
# Global parameters
[global]
workgroup = TUX-NET
os level = 64
netbios name = SERVER
write list = @users
encrypt passwords = yes
server string = Samba %v
security = SHARE
^^^^^^^
try security = user

man smb.conf:

If your PCs use usernames that are the same as their usernames
on the UNIX machine then you will want to use security = user.
If you mostly use usernames that don't exist on the UNIX box
then use security = share.

You should also use security = share if you want to mainly setup
shares without a password (guest shares). This is commonly used
for a shared printer server. It is more difficult to setup guest
shares with security = user, see the map to guest parameter for
details.

-----------------------------------------------------------------------------------------
(all other shares are identical)
did share [homes] present in smb.conf ?
can u access this share ?
try map \\netbios_server_name\homes from windoze

man smb.conf
man smbclient
man smbpasswd