[SOLVED] Samba Issue!

[L3l00]

I have the Samba server running fine. However I am having issues getting two users on the samba share!

There are two files I made both these users need access to them and one is an admin the other is a standard user. I added to valid users in the smb.conf

Inside system-config-samba under properties and the users allows, there is no check box for there names?

---------- Post added at 02:44 PM ---------- Previous post was at 11:40 AM ----------

Got system-config-samba to have the user check box. Had to go to Samba setting's then click the names. however, the names get a user name and password denial when. testing them out.

[lightman47]

FWIW - back some time ago, in order to get users access to my Samba shares, I had to install samba-swat and create my Samba Users/passwords there. Immediately thereafter the shares started working.

[L3l00]

hmmm never heard, thank you for the tip. tomorrow I will be in the office and try it there and let you know if it works.^-^

[L3l00]

Okay, finally figured out how to get Swat working.
Strange thing though. Everything is in Russian!? Although I can speak and read a little Russian, I'm not this good at it. How would I go about changing the default language settings in Swat to English?

[L3l00]

I figured that Opera shows it in Russian but Firefox shows it in English. It bases it off of the web browsers location which is odd because I am in the US.

Anyways,
went to the folder and put the names inside "Valid Users" Still did not work

Went back to "System-config-samba" Deleted the user and tried re adding the user again, inside terminal this message keeps popping up:

AttributeError: 'SambaBackend' object has no attribute 'samba_users_file'
Traceback (most recent call last):
  File "/usr/share/system-config-samba/addUserWin.py", line 184, in on_add_user_ok_button_clicked
    elif self.samba_backend.userExists(unix_name):
  File "/usr/lib/python2.7/site-packages/scsamba/core/sambaBackend.py", line 265, in userExists
    for line in self.samba_users_file:

[beaker_]

Paste the output of:

smb.conf

getenforce
getsebool -a | grep samba

[L3l00]

samba_create_home_dirs --> off
samba_domain_controller --> on
samba_enable_home_dirs --> on
samba_export_all_ro --> off
samba_export_all_rw --> off
samba_portmapper --> off
samba_run_unconfined --> off
samba_share_fusefs --> off
samba_share_nfs --> off
sanlock_use_samba --> off
use_samba_home_dirs --> off
virt_use_samba --> off

---------- Post added at 01:20 PM ---------- Previous post was at 01:19 PM ----------

I do know most of these need to be ON after typing the commands above, I am still very new to SWAT.[COLOR="Silver"]

---------- Post added at 01:49 PM ---------- Previous post was at 01:20 PM ----------

been using:

sudo setsebool -P (Whtever ones had off on it)=1

Not sure if I am supposed to have all of these on or not? There are file shares on here that some users are not allowed to enter under any circumstances

---------- Post added at 02:19 PM ---------- Previous post was at 01:49 PM ----------

I would also like to point out that non of the folders not show up on the network (even before the getsebool). The files are accessable only if a shortcut to the file was previously made on the windows computers. So fortunatly everyone is able to work without problems. Just I need to access very important folders but cannot.

I even tried maping network drive by ip address and the folder name which I do know by heart, but that failed.

[L3l00]

I think I noticed some things that might be giving me these issues.


Since SWAT is controlling everything now. I looked into the smb.conf file and originally I had "Browseable = Yes" in the share directories. However, since SWAT has started those lines are no longer there. When I go to the Shares folder inside SWAT, Browseable is switched to Yes in the drop down.?

When I look at the "view" button, Browseable is nowhere to be seen. Also!
in Valid users I put a

@Workgroup (Not what the name of the workgroup of the company really is)

But in the View, it looks like SWAT took it out?


Here is what test parm gives me, I edited some of the folder names for security purposes...

testparm
Load smb config files from /etc/samba/smb.conf
rlimit_max: increasing rlimit_max (1024) to minimum Windows limit (16384)
Processing section "[homes]"
Processing section "[QB]"
Processing section "[t]"
Processing section "[H]"
Processing section "[QF]"
Processing section "[RAMP3000]"
WARNING: The "share modes" option is deprecated
Processing section "[printers]"
Loaded services file OK.
WARNING: You have some share names that are longer than 12 characters.
These may not be accessible to some older clients.
(Eg. Windows9x, WindowsMe, and smbclient prior to Samba 3.0.)
Invalid combination of parameters for service RAMP3000. 		   Level II oplocks can only be set if oplocks are also set.
Server role: ROLE_STANDALONE

RAMP is our network printer if that helps any

[lightman47]

Swat doesn't actually "control" anything - it's just a Web type interface for making the Edit of that file simpler. You don't need to know all the option; you can pick from them. After you close/save, SWAT is gone. All that is left is the file(s) that got created/edited.

[L3l00]

I fixed the:

AttributeError: 'SambaBackend' object has no attribute 'samba_users_file'
Traceback (most recent call last):
  File "/usr/share/system-config-samba/addUserWin.py", line 184, in on_add_user_ok_button_clicked
    elif self.samba_backend.userExists(unix_name):
  File "/usr/lib/python2.7/site-packages/scsamba/core/sambaBackend.py", line 265, in userExists
    for line in self.samba_users_file:

All I did was:

yum remove samba-swat

sudo nano /etc/xinetd.d/swat.rpmsave

disable = yes

sudo yum install samba-swat -y
sudo rm /etc/xinetd.d/swat.rpmsave
sudo nano  /etc/xinetd.d/swat

disable = no

sudo service smb restart
sudo service nmb restart
sudo service xinetd restart

with this now, I was able to go to "system-config-samba" and add users without any issues.

still when I hit: "testparm" I get:

$ testparm
Load smb config files from /etc/samba/smb.conf
rlimit_max: increasing rlimit_max (1024) to minimum Windows limit (16384)
Processing section "[h]"
Processing section "[Q]"
Processing section "[t]"
Processing section "[H]"
Processing section "[Q]"
Processing section "[R3000]"
WARNING: The "share modes" option is deprecated
Processing section "[printers]"
Loaded services file OK.
WARNING: You have some share names that are longer than 12 characters.
These may not be accessible to some older clients.
(Eg. Windows9x, WindowsMe, and smbclient prior to Samba 3.0.)
Invalid combination of parameters for service R3000. 		   Level II oplocks can only be set if oplocks are also set.
Server role: ROLE_STANDALONE
Press enter to see a dump of your service definitions


[global]
	workgroup = Q
	server string = Fed Server %v
	log file = /var/log/samba/log.%m
	max log size = 50
	wins support = Yes
	idmap config * : backend = tdb
	valid users = qb, jk, ta, rs, root, qn, @q
	admin users = jk, ta, root, @q
	cups options = raw

[homes]
	valid users = %S
	read only = No

[Qs]
	comment = Confidential
	path = /home/ta/Desktop/Qs
	invalid users = q
	valid users = jk, qb, root, rs, ta, @Q
	admin users = qb, ta, jk, root, @q
	write list = qb, ta, jk, root, @q
	read only = No

[test]
	path = /home/jk/Desktop/test
	valid users = jk, root, @Q
	read only = No

[History]
	comment = Confidential
	path = /home/ta/Desktop/History
	invalid users = qn
	valid users = jk, root, ta
	admin users = jk, root, ta
	read only = No

[QF]
	comment = Confidential
	path = /home/qn/Desktop/QF
	valid users = jk, qb, qn, root, rs, ta
	read only = No

[R3000]
	comment = R3000
	path = /var/spool/samba
	read only = No
	printable = Yes
	print ok = Yes
	printer name = R3000
	oplocks = No
	share modes = No

[printers]
	comment = All Printers
	path = /var/spool/samba
	printable = Yes
	print ok = Yes
	browseable = No

So the folders are not appearing in the Network File system at all. But I can now add users again lol ^-^

---------- Post added at 03:41 PM ---------- Previous post was at 01:46 PM ----------

I also tried:

$ net usershare info --long
$ net usershare: usershares are currently disabled


$ ip=network-192.168.0.3
$  smbclient -L @ip -N | grep Disk | awk '{print $1}'

then did:

$ net usershare info --long
$ net usershare: usershares are currently disabled

[beaker_]

Ok...

• Samba is not this hard and I'm still waiting for that smb.conf.
• 'root' should never be a valid user. Elevate the privileges of another user instead.
• Do you know why you are using the oplocks option; do you think you're presenting a specific printer or something else?
• The net command will blow most google kids away. Use it, registry, privileges..., after you get a working smb.conf.
• Stay away from swat. Especially if you're not intimate with smb.conf. You'll find yourself using childish & depreciated options. smbpasswd for ex.,

After that I recommend backing up /etc/samba, blow everything away and start small.
su
mkdir ~/Delete_Me
cp -a /etc/samba ~/Delete_Me
rm /etc/samba/*
No, I'm not typing an instruction with -Rf. You go in and delete any directories.
yum erase samba*
yum install samba samba-client samba-common samba-doc samba-winbind-clients
yum install system-config-samba policycoreutils-gui
exit

Launch system-config-samba, add users (don't add root). Don't screw around with homes or printers, that can be your future screw up. Note., I'm expecting your backend will be tdbsam (tell me if you're using ldap) and selinux notes will be present within smb.conf.

Start the smb and nmb service

su
systemctl restart smb.service
systemctl restart nmb.service
exit

Can your users see your installed printer(s), and can they both see & reach their home?

[L3l00]

Beaker, thank you so much for your assistance in resolving the issue. It's almost done just having two minor issues. Cannot mount and open the shared folder on the server, and MyGroup is still on there when I changed the workgroup to Q.
On all the computers they can access and see the files now expect my boss. Her username and password gets an access denied even though she is added. I pretty much did what you had suggested before I read your post just I also installed system-config-users.
I also cannot see any of the other computers on the network in the servers network folder?

here is my smb.conf:

#======================= Global Settings =====================================

[global]

# ----------------------- Network-Related Options -------------------------

	workgroup = Q
	server string = Fed Server Version %v

	netbios name = QServer

;	interfaces = lo eth0 192.168.12.2/24 192.168.13.2/24
;	hosts allow = 127. 192.168.12. 192.168.13.

;	max protocol = SMB2

# --------------------------- Logging Options -----------------------------


	# log files split per-machine:
	log file = /var/log/samba/log.%m
	# maximum size of 50KB per log file, then rotate:
	max log size = 50

# ----------------------- Standalone Server Options ------------------------


	security = user
;	passdb backend = tdbsam


# ----------------------- Domain Members Options ------------------------

;	realm = MY_REALM

;	password server = <NT-Server-Name>

# ----------------------- Domain Controller Options ------------------------


;	domain master = yes
;	domain logons = yes

	# the following login script name is determined by the machine name
	# (%m):
;	logon script = %m.bat
	# the following login script name is determined by the UNIX user used:
;	logon script = %u.bat
;	logon path = \\%L\Profiles\%u
	# use an empty path to disable profile support:
;	logon path =

	# various scripts can be used on a domain controller or a stand-alone
	# machine to add or delete corresponding UNIX accounts:

;	add user script = /usr/sbin/useradd "%u" -n -g users
;	add group script = /usr/sbin/groupadd "%g"
;	add machine script = /usr/sbin/useradd -n -c "Workstation (%u)" -M -d /nohome -s /bin/false "%u"
;	delete user script = /usr/sbin/userdel "%u"
;	delete user from group script = /usr/sbin/userdel "%u" "%g"
;	delete group script = /usr/sbin/groupdel "%g"


# ----------------------- Browser Control Options ----------------------------

;	local master = no
;	os level = 33
;	preferred master = yes

#----------------------------- Name Resolution -------------------------------


	wins support = yes
;	wins server = w.x.y.z
;	wins proxy = yes

;	dns proxy = yes

# --------------------------- Printing Options -----------------------------


;	load printers = yes
	cups options = raw

;	printcap name = /etc/printcap
	# obtain a list of printers automatically on UNIX System V systems:
;	printcap name = lpstat
;	printing = cups

# --------------------------- File System Options ---------------------------


;	map archive = no
;	map hidden = no
;	map read only = no
;	map system = no
;	store dos attributes = yes


#============================ Share Definitions ==============================

[homes]
	comment = Home Directories
	browseable = no
	writable = yes
;	valid users = %S
;	valid users = MYDOMAIN\%S

[printers]
	comment = All Printers
	path = /var/spool/samba
	browseable = no
;	guest ok = no
;	writable = No
	printable = yes

# Un-comment the following and create the netlogon directory for Domain Logons:
;	[netlogon]
;	comment = Network Logon Service
;	path = /var/lib/samba/netlogon
;	guest ok = yes
;	writable = no
;	share modes = no

# Un-comment the following to provide a specific roving profile share.
# The default is to use the user's home directory:
;	[Profiles]
;	path = /var/lib/samba/profiles
;	browseable = no
;	guest ok = yes

# A publicly accessible directory that is read only, except for users in the
# "staff" group (which have write permissions):
;	[public]
;	comment = Public Stuff
;	path = /home/samba
;	public = yes
;	writable = yes
;	printable = no
;	write list = +staff

[QF]
	comment = The Brain
	path = /home/queston/Desktop/Queston Files
	read only = no
	browseable = yes
	valid users = jn, qb, qn, rs, ta @Q

---------- Post added at 11:59 AM ---------- Previous post was at 11:48 AM ----------

putting a semicolon before netbios name then restarting nmb and smb got rid of the MyGroup icon and now just has Q. Still cant seem to mount it though...

[beaker_]

Cannot mount and open the shared folder on the server, and MyGroup is still on there when I changed the workgroup to Q.

Your mounting problem is likely either a selinux, or an authentication problem (remember security exists both at the share and on the filesystem). Or possibly both. Seeing your past Group name doesn't surprise me, netbios updates are horribly slow. However smbclient should reveal the difference.

smb.conf passes the eyeball test but will try it here later. Try this...


Confirm if selinux is permitting or denying samba access to the file-system:

Ignore your share QF for a moment and try to access someone's home instead. For ex., can you login as jn and read & write to their home directory without difficulty? If not then at the terminal:

su
setenforce 0
exit

Can you now? If so look to system-config-selinux. You probably want to check "Allow samba to share users home directories" and possibly "allow samba to share any file/directory read/write."

Now enable selinux and besure you can still access your home directory.

su
setenforce 1
exit

note., you could put speed into this with smbclient, nautilus, dolphin.., but it's more important that you are certain of what you are looking at.

Any luck?

---------- Post added at 03:29 PM ---------- Previous post was at 03:21 PM ----------

putting a semicolon before netbios name then restarting nmb and smb got rid of the MyGroup icon and now just has Q. Still cant seem to mount it though...

Your eyes are better than mine. Semicolons are used to REM a line. ie., the line is treated as a remark or commented. Yeah that should show my age... basica's stuck in my lexicon.

[L3l00]

Busy day today. ID 10 T stuff too.

Anyways. When I go to an XP computer to mount into the Server and it askes for the username and password. I use jn which should have previlage to every folder. I get an access denied.

I did the setenforce to zero and tried it then and nothing. Still cannot access the workgroup Q from the Server.

I looked into my system-config-selinux and all the samba's are checked except for one, which is the Samba modify Public files.


Also when I check SElinux config, this shows up in the Terminal:

sudo system-config-selinux

/usr/share/system-config-selinux/system-config-selinux.py:71: Warning: g_object_get_valist: object class `GnomeProgram' has no property named `default-icon'
  xml = gtk.glade.XML ("/usr/share/system-config-selinux/system-config-selinux.glade", domain=PROGNAME)

[beaker_]

Ignore it, gtk is way to chatty.

Ok... jump to your linux box.

su
setenforce 0 Leave selinux in permissive while troubleshooting.
Paste the output of:
pdbedit -L
smbclient -L 127.0.0.1 -U jn