[SOLVED] guest user = somename broken in recent samba

timsoft · 08-20-2018, 04:33 PM

I have a samba config (sanitised)

Code:

[global]
workgroup = MYWG
server string = wonderful file server
netbios name = MYSERV
server role = standalone server
hosts allow = 192.168.1. 127.
security = user
guest account = netuser
map to guest = Bad User
log file = /var/log/samba.%m
max log size = 50
dns proxy = no
[work]
  comment = mystuff
  path = /mymount/mystuff
  public = yes
  only guest = yes
  writable = yes
  printable = no

there is a user netuser who has ownership of all files qnd folders in and including the mystuff directory
in slackware 14.1 this config works fine. in slackware 14.2 with all patches installed files created by smb clients have ownership of nobody and group nogroup
I can use

Code:

force user = someuser

and

Code:

force group = somegroup

and that appears to work, but why does

Code:

guest account = someuser

no longer work ? in the smb.conf-sample it implies it is still valid.
thanks...

kjhambrick · 08-21-2018, 09:30 AM

timsoft --

Are you re-sharing an NFS Mounted Directory via SAMBA ?

I ask because I see: path = /mymount/mystuff in your testparm dump.

This can be problematic with SAMBA and NFS having different requirements for permissions and locking and such.

There may be a way around it but I don't want to send an A for a Q you're not asking

-- kjh

timsoft · 08-21-2018, 10:58 AM

no, /mymount is just a local sata hard drive partition mount point, and the share is one step in so that the end client doesn't see a "lost+found" directory.

kjhambrick · 08-21-2018, 11:30 AM

gotcha.

I usually do set 'force user' and 'force group' as you showed.

In addition I add 'force create mode' and 'force directory mode' more-or-less taken from Setting up Samba as a Standalone Server.

I wonder ... could the Sticky bit be missing from /mymount/mystuff/ ?

-- kjh

timsoft · 08-21-2018, 05:29 PM

it sounds like we agree that guest account = accountname does not work - or at least does not work as expected. I'll do some more tests to see if I can omit it entirely , but i'm away tomorrow so will get post back thursday.

I'm not sure about sticky bits though. I had to replace the failed os disk on a slack14.1 server, but the data disks were ok, and as I rebuilt with slack14.2 that was when I got the problem. the mount in question was from a drive that hasn't changed. the partition is mounted by root, but the mystuff folder is owned by netuser, group users with very open permissions (drwxrwxrwx)
I tried looking at samba changelogs but couldn't spot where this behaviour changed.

timsoft · 08-23-2018, 12:42 PM

after some more testing (I tried with root as the user, which worked, but not reliably for all shares) my conclusion is it (guest user = theuser) is broken, use
force user = theuser
and
force group = thegroup
for each share instead.