Hi All,

I am testing samba in which any user connecting from any machine i need the audit log also if someone is deleted then it should be save some where else the deleted part should be completed by the admin so when i am testing below are the error pop's up



[root@Kickstart Server]# smbclient -L localhost
Password:
session setup failed: NT_STATUS_LOGON_FAILURE
[root@Kickstart Server]#


[root@Kickstart Server]# getenforce
Disabled
[root@Kickstart Server]#

[root@Kickstart Server]# service iptables status
Firewall is stopped.

[root@Kickstart Server]# smbpasswd -a dk
New SMB password:
Retype new SMB password:
Failed to modify password entry for user dk
[root@Kickstart Server]# smbclient -L localhost -U dk
Password:
session setup failed: NT_STATUS_LOGON_FAILURE
[root@Kickstart Server]#

############################################
Configuration which i am using is

mkdir-p /share/smbshare/share/recycle

chmod 1777 /share/smbshare

chmod 777 /share/recycle

smb.conf

[Global]
log level = 0 vfs:0
log file = /var/log/samba/%m.%U.log
max log size = 0
[Share]
path = /share/smbshare
comment = Shared Folder
create mask = 0770
valid users = dk test
directory mask = 0775
public = yes
writeable = yes
vfs objects = extd_audit recycle
full_audit:failure = none
full_audit:success = mkdir rename unlink rmdir open pwrite
full_auditrefix = %u|%I|%m|%S
recycle:keeptree = yes
recycle:repository = /recycle/%U
recycle:exclude = tmp|temp
recycle:versions = yes
[Recycle]
path = /share/recycle/%U
comment = Recycle the Bin
browseable = no
writable = yes


[root@Kickstart Server]# testparm /etc/samba/smb.conf
Load smb config files from /etc/samba/smb.conf
Processing section "[homes]"
Processing section "[printers]"
Processing section "[Share]"
Processing section "[Recycle]"
Loaded services file OK.
Server role: ROLE_STANDALONE
Press enter to see a dump of your service definitions

Which version of Samba are you running?

Have you tried increasing the log level (you currently have it set to 0) and checking the logs?

Have you tried using the (full) name of the server instead of "localhost"?Using an alias like "localhost" or the IP address of the server, makes it impossible to use certain authentication schemes. The server must then fall back to earlier protocols that may need to be specifically enabled in smb.conf in order to work.

Ser_olmy
Log are created below are the logs location & also i try the IP & hostname

samba-3.0.33-3.28.el5

[root@Kickstart samba]# ll
total 44
-rw-r--r-- 1 root root 0 Feb 1 13:07 127.0.0.1..log
-rw-r--r-- 1 root root 0 Feb 2 02:48 172.16.11.149..log
-rw-r--r-- 1 root root 0 Feb 1 13:02 172.16.11.151..log
drwx------ 4 root root 4096 Feb 1 12:59 cores
-rw-r--r-- 1 root root 0 Feb 1 13:09 kickstart.anil.log
-rw-r--r-- 1 root root 0 Feb 2 02:12 kickstart.dk.log
-rw-r--r-- 1 root root 0 Feb 1 13:07 kickstart.root.log
-rw-r--r-- 1 root root 1166 Feb 2 11:56 nmbd.log
-rw-r--r-- 1 root root 80 Feb 2 04:07 nmbd..log
-rw-r--r-- 1 root root 3816 Feb 2 04:02 nmbd.log.1
-rw-r--r-- 1 root root 420 Feb 2 11:50 smbd.log
-rw-r--r-- 1 root root 0 Feb 1 12:59 smbd..log
-rw-r--r-- 1 root root 2416 Feb 2 04:02 smbd.log.1
-rw-r--r-- 1 root root 760 Feb 2 02:07 test-pc.anil.log
-rw-r--r-- 1 root root 912 Feb 2 11:50 test-pc.dk.log
-rw-r--r-- 1 root root 304 Feb 1 13:03 test-pc.samba.log
-rw-r--r-- 1 root root 5100 Feb 2 11:48 test-pc.test.log
[root@Kickstart samba]#


there is another interesting thing is that i haven't added the test user in samba but the windows 7 client is the test user i didn't enter that user in smbpasswd so when i try to login into the samba server with that user it easily authenticate the test user ??? i think something is mess up here

Error in user samba log

so as per the error i have make the change on smb.conf file & also changes the local policy of window 7 home basic

client ntlmv2 auth = yes


i have install the gpedit package in the window 7 home basic

below is the url for gpedit
http://drudger.deviantart.com/art/Ad...-msc-215792914
after run the that exe file the required file & directory is to copy at below locations
window/SysWOW64 folder and copy the
GroupPolicy, GroupPolicyUsers folder and the gpedit.msc file into the System32 folder

then start>run>gpedit.msc System and Security -> Administrative Tools -> Local Security Policy or local policy under that

Network security: LAN Manager authentication level
Send LM & NTML responses

Network security: Minimum session security for NTLM SSP based (including secure RPC) clients
Uncheck “Require 128-bit encryption.”

Network security: Minimum session security for NTLM SSP based (including secure RPC) servers
Uncheck “Require 128-bit encryption.”

You have 2 users. Dk and test according to your config
There is a login error, so specify the user.

First make sure you added the user

Also make sure the users exist on the host that the user has access to the actual folders on the computer.

The samba server does not know about the user root. So if you want to skip the -U switch, su into the dk account then connect to samba

Not related to selinux in this case.

1 members found this post helpful.

earlier when i set the password of user anil & dk in samba it shown me the error of

but now you told me to reset that passwd of these user now it's working



root@Kickstart samba]# smbpasswd -a dk
New SMB password:
Retype new SMB password:
Added user dk.
[root@Kickstart samba]# smbclient -L 172.16.11.149 -U dk
Password:
Domain=[KICKSTART] OS=[Unix] Server=[Samba 3.0.33-3.28.el5]

Sharename Type Comment
--------- ---- -------
Share Disk Shared Folder
IPC$ IPC IPC Service (Samba Server Version 3.0.33-3.28.el5)
dk Disk Home Directories
Domain=[KICKSTART] OS=[Unix] Server=[Samba 3.0.33-3.28.el5]

Server Comment
--------- -------

Workgroup Master
--------- -------
MYGROUP KICKSTART
[root@Kickstart samba]#

earlier below are error in the user logs now it seems it's work fine.ericson007 thanks for suggestion of resting the password.but i don't know the reason when i have set the samba user in smbpasswd dk & anil at that time it shown me the error it the above of my thread i have set the passwd on dk & anil


[root@Kickstart samba]# tail -f test-pc.anil.log
[2014/02/01 13:04:49, 0] lib/util_sock.c:read_data(534)
read_data: read failure for 4 bytes to client 172.16.11.151. Error = Connection reset by peer
[2014/02/01 13:06:31, 0] lib/util_sock.c:read_data(534)
read_data: read failure for 4 bytes to client 172.16.11.151. Error = Connection reset by peer
[2014/02/01 13:09:49, 0] lib/util_sock.c:read_data(534)
read_data: read failure for 4 bytes to client 172.16.11.151. Error = Connection reset by peer
[2014/02/02 01:53:43, 0] lib/util_sock.c:read_data(534)
read_data: read failure for 4 bytes to client 172.16.11.151. Error = Connection reset by peer
[2014/02/02 02:07:55, 0] lib/util_sock.c:read_data(534)
read_data: read failure for 4 bytes to client 172.16.11.151. Error = Connection reset by peer