Eating some Samba humble pie - Page 2

leigh123linux · #16 27th November 2011, 09:16 PM

Quote:

Originally Posted by steelaworkn

Samba sees the other computers on my network and I can access those files, but when it comes to sharing my Fedora files on the network, Samba does not work. It could be in the Selinux policy, I'm not sure.

Yes, I am referring to browsing from the perspective of the Window's machines. They cannot browse my Fedora shared files which are located at /home/jeff/Public. They can see that they are available, but when the click on "Public" they get a permission message and they are blocked from the "Public" folder. So, could be Selinux. I'll have to look at that one.

Sorry about the mishap, I wasn't serious about removing samba.

Just a thought is samba actually running?, post

Code:

su
service smb status
service nmb status

steelaworkn · #17 27th November 2011, 11:14 PM

Code:

smb.service - Samba SMB Daemon
          Loaded: loaded (/lib/systemd/system/smb.service; disabled)
          Active: inactive (dead)
          CGroup: name=systemd:/system/smb.service
[root@dadsfedora jeff]# service nmb status
Redirecting to /bin/systemctl  status nmb.service
nmb.service - Samba NMB Daemon
          Loaded: loaded (/lib/systemd/system/nmb.service; disabled)
          Active: inactive (dead)
          CGroup: name=systemd:/system/nmb.service

***glennzo*** · #18 27th November 2011, 11:18 PM

Run the following to start samba

Code:

su
systemctl enable smb.service
systemctl enable nmb.service
systemctl start smb.service
systemctl start nmb.service

I would try a stripped down version of your smb.conf for testing.

Code:

[global]
workgroup = Fitzhome
netbios name = dadsfedora
server string = Samba Server %v
security = share

[Public]
comment = public share
path = /home/jeff/public
guests ok = yes
public = yes
browseable = yes
writeable = yes

Check with "testparm" Restart the smb and nmb services once again. Make sure samba is allowed through the firewall. Turn off the firewall temporarily if you have to. You can even set selinux to permissive of 0 temporarily.

Remember though, as I stated earlier, I seem to remember reading about issues sharing /home with samba. Hope I'm wrong ...

One other thing. Any time you change smb.conf you need to restart nmb snd smb. You should also always check syntax with testparm too.

leigh123linux · #19 27th November 2011, 11:22 PM

Also run

Code:

su
setsebool -P samba_enable_home_dirs 1

steelaworkn · #20 27th November 2011, 11:51 PM

Quote:

Originally Posted by leigh123linux

Also run

Code:

su
setsebool -P samba_enable_home_dirs 1

This does not work. The curser just hangs on the comman. Wonder if boolean is installed and what version if any.

bbfuller · #21 27th November 2011, 11:54 PM

On an ordinary machine it takes about 10 minutes to run.

I've just done it in the gui I mentioned earlier.

leigh123linux · #22 27th November 2011, 11:54 PM

Quote:

Originally Posted by steelaworkn

This does not work. The curser just hangs on the comman. Wonder if boolean is installed and what version if any.

It can take a couple of minutes to complete, did you start samba as instructed.

Code:

su 
systemctl enable smb.service 
systemctl enable nmb.service 
systemctl start smb.service 
systemctl start nmb.service

beaker_ · #23 28th November 2011, 02:24 AM

Divide and conquer it. Assuming it's on a nice, safe, trusted network. .. and if you don't nail selinux quickly then disable it for the short term. Also restart samba (smb & nmb) after any change you make (removes an assumption).

Code:

su
setenforce 0
systemctl restart smb.service
systemctl restart nmb.service
exit

Also paste the output of:

Code:

pdbedit -L

I know you guys prefer a stripped down version but I prefer a little meat.... but... at a minimum I'd modify glennzo's post to:

Code:

#======================= Global Settings =====================================
[global]

# ----------------------- Network-Related Options -------------------------
#
workgroup = JOHNSON
server string = Samba Server Version %v
netbios name = ZEPPELIN

# --------------------------- Logging Options -----------------------------
#
log file = /var/log/samba/log.%m
max log size = 50

# ----------------------- Standalone Server Options ------------------------
#
        security = user
        passdb backend = tdbsam

+ your shares. Forget about security = share. Paste your complete smb.conf if you want me to have a go at it.

Also remember permissions. Permissions, like security, are layered so don't neglect the permissions on your file-system.

Paste the output of:

Code:

smbclient -L 127.0.0.1 -U AValidUserName

---------- Post added at 10:24 PM ---------- Previous post was at 09:36 PM ----------

Ok. Sorry for the double post but I'm buggering off... and well... I work with one fitzpatrick already. If you haven't already figured it out:

from what I've gathered.

Code:

#--------------
#
#======================= Global Settings =====================================

[global]

        workgroup = fitzhome
        server string = Samba Server Version %v

        netbios name = dadsfedora

;       interfaces = lo eth0 192.168.12.2/24 192.168.13.2/24
;       hosts allow = 127. 192.168.12. 192.168.13.

# --------------------------- Logging Options -----------------------------
#
        # log files split per-machine:
        log file = /var/log/samba/log.%m
        # maximum size of 50KB per log file, then rotate:
        max log size = 50

# ----------------------- Standalone Server Options ------------------------
#
        security = user
        passdb backend = tdbsam

# ----------------------- Browser Control Options ----------------------------
#
# local master = when set to no, Samba does not become the master browser on
# your network. When set to yes, normal election rules apply.
#
# os level = determines the precedence the server has in master browser
# elections. The default value should be reasonable.
#
# preferred master = when set to yes, Samba forces a local browser election at
# start up (and gives itself a slightly higher chance of winning the election).
#
;       local master = no
;       os level = 33
;       preferred master = yes

#----------------------------- Name Resolution -------------------------------
#
# Either enable wins suppot (server) or point to one through 'wins server'.
# I'm assuming there isn't one on your network.  Kind of useless without your
# router informing the rest.

        wins support = yes
;       wins server = w.x.y.z
;       wins proxy = yes

;       dns proxy = yes

# --------------------------- Printing Options -----------------------------
#
;       load printers = yes
        cups options = raw

;       printcap name = /etc/printcap
        # obtain a list of printers automatically on UNIX System V systems:
;       printcap name = lpstat
;       printing = cups

# --------------------------- File System Options ---------------------------
#
# The options in this section can be un-commented if the file system supports
# extended attributes, and those attributes are enabled (usually via the
# "user_xattr" mount option). These options allow the administrator to specify
# that DOS attributes are stored in extended attributes and also make sure that
# Samba does not change the permission bits.
#
# Note: These options can be used on a per-share basis. Setting them globally
# (in the [global] section) makes them the default for all shares.

;       map archive = no
;       map hidden = no
;       map read only = no
;       map system = no
;       encrypt passwords = yes
        guest ok = yes
;       guest account = nobody
;       store dos attributes = yes


#============================ Share Definitions ==============================

[homes]
        comment = Home Directories
        browseable = no
        writable = yes
;       valid users = %S
;       valid users = MYDOMAIN\%S

[printers]
        comment = All Printers
        path = /var/spool/samba
        browseable = no
;       guest ok = no
;       writable = No
        printable = yes

        [public]
        comment = Public Stuff
        path = /home/MeMe/Public/
        public = yes
        writable = yes
;       printable = no

selinux booleans. I'm unsure if you need anon write or not. I just tossed it in to see if you're paying attention.

Quote:

$ getsebool -a |grep samba
samba_create_home_dirs --> off
samba_domain_controller --> off
samba_enable_home_dirs --> on
samba_export_all_ro --> off
samba_export_all_rw --> off
samba_run_unconfined --> off
samba_share_fusefs --> off
samba_share_nfs --> off
use_samba_home_dirs --> on
virt_use_samba --> off

$ getsebool -a |grep smbd
allow_smbd_anon_write --> on

Use system-config-samba to define at-least one samba user. Yourself as a suggestion.

chmod +x on that home dir your sharing Public out of. Which is why I suggest not using your own.

Good luck with it.

steelaworkn · #24 28th November 2011, 09:38 AM

OK, I didn't realize it took a little time. I'll try again a let it do its thing. And get back to ya

---------- Post added at 09:00 PM ---------- Previous post was at 08:15 PM ----------

Oh, I think the Fitzpatricks are somewhere in my gene pool. Funny, two Fitzhome networks. Any way, I think we are getting closer. Since my crash, I have I had to reinstall KDE and the samba package which reset my smb conf. file. So, I am working from the default config file. Here is my current set-up:

Quote:

[global]
workgroup = FITZHOME
server string = Samba Server Version %v
log file = /var/log/samba/log.%m
max log size = 50
idmap config * : backend = tdb
cups options = raw

[homes]
comment = Home Directories
read only = No
browseable = No

[printers]
comment = All Printers
path = /var/spool/samba
printable = Yes
print ok = Yes
browseable = No

---------- Post added at 09:03 PM ---------- Previous post was at 09:00 PM ----------

So, I can see myself under Fitzhome. I don't see any files available. I have /home/jeff/Public that is my sharing file, but I don't currently see it.

---------- Post added 28th November 2011 at 02:37 AM ---------- Previous post was 27th November 2011 at 09:03 PM ----------

Still messing around with it. I think I'm closer. One thing I did not have installed was system-config-samba. Now I do, which gives me a birds eye view of things.

Where is the Samba User file at. I created Unix users and then added them to my Samba users. But still cannot find those two files. Getting late and I have to work on the car before work tomorrow.

Glen, I did try the stripped down version again here is where I am so far:

Quote:

[global]
workgroup = Fitzhome
netbios name = dadsfedora
server string = Samba Server %v
security = user
passdb backend = tdbsam
wins support = yes

[Public]
comment = public share
path = /home/jeff/public
guests ok = yes
public = yes
browseable = yes
writeable = yes

---------- Post added at 02:38 AM ---------- Previous post was at 02:37 AM ----------

I was thinking about adding user to the smb.conf file but not sure if that would do any good. From the Windows Box view, it gives a error of not being able to detect the network. Wierd.

beaker_ · #25 28th November 2011, 02:48 PM

Do you know why you're using this bold directive?

Code:

[global]
workgroup = FITZHOME
server string = Samba Server Version %v
log file = /var/log/samba/log.%m
max log size = 50
idmap config * : backend = tab
cups options = raw


[homes]
comment = Home Directories
read only = No
browseable = No


[printers]
comment = All Printers
path = /var/spool/samba
printable = Yes
print ok = Yes
browseable = No

Quote:

Where is the Samba User file at. I created Unix users and then added them to my Samba users. But still cannot find those two files. Getting late and I have to work on the car before work tomorrow.

You won't find them. tdbsam has been default for a long time now.

If Winblows is choking on a login then try this:
- Define a guest account and assign nobody to it. Also map bad logins to guest. See smb.conf below.
- Don't forget to create the user nobody

Code:

su
smbpasswd -an nobody
exit

smb.conf (works fine here, selinux booleans set and a couple users defined)

Code:

#--------------
#
#======================= Global Settings =====================================

[global]

        workgroup = fitzhome
        server string = Samba Server Version %v

        netbios name = dadsfedora

;       interfaces = lo eth0 192.168.12.2/24 192.168.13.2/24
;       hosts allow = 127. 192.168.12. 192.168.13.

# --------------------------- Logging Options -----------------------------
#
        # log files split per-machine:
        log file = /var/log/samba/log.%m
        # maximum size of 50KB per log file, then rotate:
        max log size = 50

# ----------------------- Standalone Server Options ------------------------
#
        security = user
;       passdb backend = tdbsam

# ----------------------- Browser Control Options ----------------------------
#
# local master = when set to no, Samba does not become the master browser on
# your network. When set to yes, normal election rules apply.
#
# os level = determines the precedence the server has in master browser
# elections. The default value should be reasonable.
#
# preferred master = when set to yes, Samba forces a local browser election at
# start up (and gives itself a slightly higher chance of winning the election).
#
;       local master = no
;       os level = 33
;       preferred master = yes

#----------------------------- Name Resolution -------------------------------
#
# Either enable wins suppot (server) or point to one through 'wins server'.
# I'm assuming there isn't one on your network.  Kind of useless without your
# router informing the rest.

        wins support = yes
;       wins server = w.x.y.z
;       wins proxy = yes

;       dns proxy = yes

# --------------------------- Printing Options -----------------------------
#
;       load printers = yes
        cups options = raw

;       printcap name = /etc/printcap
        # obtain a list of printers automatically on UNIX System V systems:
;       printcap name = lpstat
;       printing = cups

# --------------------------- File System Options ---------------------------
#
# The options in this section can be un-commented if the file system supports
# extended attributes, and those attributes are enabled (usually via the
# "user_xattr" mount option). These options allow the administrator to specify
# that DOS attributes are stored in extended attributes and also make sure that
# Samba does not change the permission bits.
#
# Note: These options can be used on a per-share basis. Setting them globally
# (in the [global] section) makes them the default for all shares.

;       map archive = no
;       map hidden = no
;       map read only = no
;       map system = no
        encrypt passwords = yes
        guest ok = yes
        guest account = nobody
        map to guest = bad user
;       store dos attributes = yes


#============================ Share Definitions ==============================

[homes]
        comment = Home Directories
        browseable = no
        writable = yes
;       valid users = %S
;       valid users = MYDOMAIN\%S

[printers]
        comment = All Printers
        path = /var/spool/samba
        browseable = no
;       guest ok = no
;       writable = No
        printable = yes


# A publicly accessible directory that is read only, except for users in the
# "staff" group (which have write permissions):
        [public]
        comment = Public Stuff
        path = /home/jeff/public
        public = yes
        writable = yes
;       printable = no

---------- Post added at 10:48 AM ---------- Previous post was at 10:45 AM ----------

Quote:

I was thinking about adding user to the smb.conf file but not sure if that would do any good. From the Windows Box view, it gives a error of not being able to detect the network. Wierd.

You reinstalled remember. Double check your firewall and selinux boolean(s). Chances are you've forgotten or clicked your way through.

marko · #26 18th December 2011, 10:43 PM

Do you need to turn on the winbind service ?

Quote:

systemctl enable winbind.service
systemctl start winbind.service