After working with the copied smb.conf , it has reverted back to its earlier state.
So it looks like something is actively changing it.
SELinux is in permissive mode, the ip address is correct at 192.168.101.0/24
I never use 192.168.1.0/24 as thats the first address subnet a hacker will look for.
Same smb.conf on both machines, This one Debian Wheezy, g8jvm-server, and the laptop runing FC16, laptop,
Code:
richard@g8jvm:~$ smbclient -L \\g8jvm-server\\ -U richard
WARNING: The "null passwords" option is deprecated
WARNING: The "password level" option is deprecated
Unknown parameter encountered: "update encrypted"
Ignoring unknown parameter "update encrypted"
WARNING: The "idmap uid" option is deprecated
WARNING: The "idmap gid" option is deprecated
Enter richard's password:
Domain=[WORKGROUP] OS=[Unix] Server=[Samba 3.6.2]
Sharename Type Comment
--------- ---- -------
homes Disk Home Directories
netlogon Disk Network Logon Service
pdf-documents Disk Converted PDF Documents
pdf-printer Printer PDF Printer Service
IPC$ IPC IPC Service (Samba file and print server)
Stylus-Photo-R285 Printer EPSON Stylus Photo R285
richard Disk Home Directories
Domain=[WORKGROUP] OS=[Unix] Server=[Samba 3.6.2]
Server Comment
--------- -------
G8JVM-LAPTOP Samba file and print server
G8JVM-SERVER Samba file and print server
LAPPPY lappy
Workgroup Master
--------- -------
WORKGROUP G8JVM-SERVER
richard@g8jvm:~$ smbclient -L \\lappy\\ -U richard
WARNING: The "null passwords" option is deprecated
WARNING: The "password level" option is deprecated
Unknown parameter encountered: "update encrypted"
Ignoring unknown parameter "update encrypted"
WARNING: The "idmap uid" option is deprecated
WARNING: The "idmap gid" option is deprecated
Enter richard's password:
Connection to lappy failed (Error NT_STATUS_BAD_NETWORK_NAME)
richard@g8jvm:~$
The smb.conf I'm using on both is , (sorry for the length of it)
Code:
richard@g8jvm:~$ cat /etc/samba/smb.conf
[global]
netbios name = G8JVM-SERVER
server string = Samba file and print server
workgroup = Workgroup
security = user
hosts allow = 127. 192.168.101.
interfaces = 127.0.0.1/8 192.168.101.0/24
bind interfaces only = yes
remote announce = 192.168.101.255
remote browse sync = 192.168.101.255
printcap name = cups
load printers = yes
cups options = raw
printing = cups
guest account = smbguest
log file = /var/log/samba/samba.log
max log size = 1000
null passwords = no
username level = 6
password level = 6
encrypt passwords = true
unix password sync = yes
socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
local master = yes
domain master = yes
preferred master = yes
domain logons = no
os level = 64
logon drive = m:
logon home = \\%L\homes\%u
logon path = \\%L\profiles\%u
logon script = %G.bat
time server = no
name resolve order = wins lmhosts bcast
wins support = no
wins proxy = no
dns proxy = no
preserve case = yes
short preserve case = yes
client use spnego = no
client signing = no
client schannel = no
server signing = no
server schannel = no
nt pipe support = yes
nt status support = yes
allow trusted domains = no
obey pam restrictions = yes
enable spoolss = yes
client plaintext auth = no
disable netbios = no
follow symlinks = no
update encrypted = yes
pam password change = no
passwd chat timeout = 120
hostname lookups = no
username map = /etc/samba/smbusers
passdb backend = tdbsam
passwd program = /usr/bin/passwd '%u'
passwd chat = *New*password* %n\n *ReType*new*password* %n\n *passwd*changed*\n
add user script = /usr/sbin/useradd -d /dev/null -c 'Samba User Account' -s /dev/null '%u'
add user to group script = /usr/sbin/useradd -d /dev/null -c 'Samba User Account' -s /dev/null -g '%g' '%u'
add group script = /usr/sbin/groupadd '%g'
delete user script = /usr/sbin/userdel '%u'
delete user from group script = /usr/sbin/userdel '%u' '%g'
delete group script = /usr/sbin/groupdel '%g'
add machine script = /usr/sbin/useradd -d /dev/null -g sambamachines -c 'Samba Machine Account' -s /dev/null -M '%u'
machine password timeout = 120
idmap uid = 16777216-33554431
idmap gid = 16777216-33554431
template shell = /dev/null
winbind use default domain = yes
winbind separator = @
winbind cache time = 360
winbind trusted domains only = yes
winbind nested groups = no
winbind nss info = no
winbind refresh tickets = no
winbind offline logon = no
[homes]
comment = Home Directories
path = /home/richard
read only = no
available = yes
browseable = yes
writable = yes
guest ok = no
public = no
printable = no
locking = no
strict locking = no
[netlogon]
comment = Network Logon Service
path = /home/netlogon
read only = no
available = yes
browseable = yes
writable = no
guest ok = no
public = no
printable = no
locking = no
strict locking = no
[profiles]
comment = User Profiles
path = /var/samba/profiles
read only = no
available = yes
browseable = no
writable = yes
guest ok = no
public = no
printable = no
create mode = 0600
directory mask = 0700
locking = no
strict locking = no
[printers]
comment = EPSON Stylus Photo R285
path = /home/richard/smb-spool
browseable = yes
writable = yes
guest ok = yes
public = yes
printable = yes
locking = no
strict locking = no
[pdf-documents]
path = /home/pdf-documents
comment = Converted PDF Documents
available = yes
browseable = yes
writeable = yes
guest ok = yes
locking = no
strict locking = no
[pdf-printer]
path = /tmp
comment = PDF Printer Service
printable = yes
guest ok = yes
use client driver = yes
printing = bsd
print command = /usr/bin/gadmin-samba-pdf %s %u
lpq command =
This is really giving me grief
I double checked access to the laptop, killed virtualbox which runs in bridged mode, and pinged the laptop
and got:-
Code:
From 192.168.101.8 icmp_seq=31 Destination Host Prohibited
From 192.168.101.8 icmp_seq=32 Destination Host Prohibited
The firewall is OK, is there anything can change the config ?
SELinux is definatly in permissive mode,
Disabling the firewall has no effect on the ping response freo the laptop.
I can ping this machine from the laptop
But a traceroute times out
I had no problem until I installed a damn VM, as I need to bits of s/w that wont run on linux.
This is not logical, wel not my logic
TIA
Richard
---------- Post added at 01:13 PM ---------- Previous post was at 12:36 PM ----------
Hi
here's the problem
system-config-firewall is available to the user with user password.
To change the firewall iptables requires root access
So when virtualbox was installed it altered the firewall directly, prohibiting icmp
As system-config-firewall only requires a user password it can't alter iptables..
NICE ONE,,,,,NOT
I'll hunt through the repos for a proper firewall front end.
Richard
Linear Mode
