Accessing FC2 server from XP machine

[Duke Henry]

Hello all.

I have an FC2 box that is serving some files (as a web host and also a regular network file host). Anyway, the web server is running fine and fast.

My problem is that I want to share some files (2 separate mounts, already configured and good to go) that users on XP machines, managed by Active Directory can make a network connection to and read/write to.

Now, I really am not smart when it comes to Fedora. So, initially I set up Samba so that ANYONE could read/write to the shares and I had no problems making connections from my XP boxes to the FC2 box. However, no one could write to the shares, only read.

So, I want to connect as specific users to the FC2 box, authenticate to AD and allow resources.

No one will be logging into the FC2 box. They will just be making connections from XP boxes.

I have seen threads here that detail authentication and LDAP settings, etc. However, I honestly don't know what applies to this setup or not.

I do have WINDBIND enabled, with the proper domain, ADS, and controllers set.

Do I have to make local users with the same passwords on my FC2 box, or can I just get users making shares to the FC2 box to get authenticated through the AD box?
---------------
Would it be best to simply bypass AD and just make local accounts that have the same passwords as the AD ones and try that?

Thanks

[foolish]

Use the system-config-samba tool to create samba users from your unix users (read fedora users). It's quite simple. In system-config-samba, give these users write permission.

[Duke Henry]

Originally Posted by foolish

Use the system-config-samba tool to create samba users from your unix users (read fedora users). It's quite simple. In system-config-samba, give these users write permission.

So, here I would have to create local linux users that have the same passwords as their AD counterparts?

[Ned]

Originally Posted by Duke Henry

So, here I would have to create local linux users that have the same passwords as their AD counterparts?

That's one way of doing it, but I suspect you'd rather not. I'm guessing you want to give people guest access to the shares rather than setting up login accounts for everyone.

The fact that users can connect and read, but just not write says samba is working.

Could it be that you need to change the permissions on your shared dir to allow guest or nobody usergroup IDs (I think samba uses nobody) to write to the dir?

Ned

[Duke Henry]

Originally Posted by Ned

That's one way of doing it, but I suspect you'd rather not. I'm guessing you want to give people guest access to the shares rather than setting up login accounts for everyone.

The fact that users can connect and read, but just not write says samba is working.

Could it be that you need to change the permissions on your shared dir to allow guest or nobody usergroup IDs (I think samba uses nobody) to write to the dir?

Ned

Well, the thing was that samba's access specified read/write.

However, I do see what you are saying regarding the actual file permissions. I went into the mounts, and set the permissions more and more openly, but it never allowed access. I was doing it through the KDE GUI. Would there be a command (through terminal) that I could run that would recursively set these permissions?

[Ned]

Originally Posted by Duke Henry

Well, the thing was that samba's access specified read/write.

However, I do see what you are saying regarding the actual file permissions. I went into the mounts, and set the permissions more and more openly, but it never allowed access. I was doing it through the KDE GUI. Would there be a command (through terminal) that I could run that would recursively set these permissions?

You can do it recursively from KDE. Just tick the "apply setting to all subfolders and their contents" tickbox at the bottom of the permissions tab. I assume you set permissions for Others to view and modify contents.

Use chmod with the -R switch to do it from the prompt, with the -R switch being recursive

I'm not sure this is necessarily your problem - just thought it might be worth a try

Ned

[Duke Henry]

Originally Posted by Ned

You can do it recursively from KDE. Just tick the "apply setting to all subfolders and their contents" tickbox at the bottom of the permissions tab. I assume you set permissions for Others to view and modify contents.

Use chmod with the -R switch to do it from the prompt, with the -R switch being recursive

I'm not sure this is necessarily your problem - just thought it might be worth a try

Ned

Yeah, I have tried both approaches and neither did the trick. I had tried the GUI and the basic

chmod -R 777 <dir>

Oh well, will try some other things when I get to the machine in a few hours.

Thanks for the suggestions!

[Duke Henry]

Interesting...

I am logged in as root, and I cannot change the group and others permissions.

I am sitting here, and I select "view and modify" and apply to all subfolders. It runs, gives me no errors, but when I select permissions again it is back to "view content" only.

??

(I should note that this mounted drive is a FAT32 partition, if that makes any difference)

[Duke Henry]

I just discovered after some google searching that it is likely that the way I mounted the drives is the cause of the permission issues.

I had it set to "defaults" in fstab but apparently I should be looking at the umask settings..

[Ned]

To mount my fat32 drive with permissions set to myself, I use the following entry in /etc/fstab

/dev/hda5      /win32      vfat      rw,noatime,uid=500,gid=500,user   0 0

For some reason I assumed your share was a native linux partition

Ned

[Prone]

Hmm, excuse me. Why Samba? We are talking about a server that runs Teamspeak. Like Apache. I can see the server running in my TS2 browser, the routing just seems to be incorrect. I thought Samba was for Filesharing services in the domain only?

Please enlighten a noob.