Santos Rodrigo-ARS052
2005-Mar-21 12:37 UTC
[Samba] Denied connection for correct conf inside firewall protec tion
I did some tests with test server using Samba 2.2.8a. I received some strange messages in the log file that cannot be with below configuration: _____________________________________________________________________________ # ../bin/testparm -x -L pscdv001 ../lib/smb.conf | more Load smb config files from ../lib/smb.conf Processing section "[DVfcsload]" Processing section "[rodrigo]" Processing section "[ipc$]" Loaded services file OK. WARNING: You have some share names that are longer than 8 chars These may give errors while browsing or may not be accessible to some older clients Press enter to see a dump of your service definitions # Global parameters [global] workgroup = MFG4 netbios aliases = pscdv001 server string = Samba Server - Desenvolvimento 3 encrypt passwords = Yes null passwords = Yes smb passwd file = /etc/smbpasswd password level = 8 username level = 8 log level = 0 log file = /var/log/samba/%L/log.%m max log size = 50 deadtime = 4 socket options = TCP_NODELAY SO_SNDBUF=8192 SO_RCVBUF=8192 include = /usr/local/samba/lib/smb.conf.pscdv001 [rodrigo] comment = My folder path = /home/rodrigo read only = No create mask = 0775 directory mask = 0775 hosts allow = 187.10.16.XXX [ipc$] path = /tmp hosts allow = 187.10.16.0/23 127.0.0.1 hosts deny = 0.0.0.0/0 _____________________________________________________________________________ From my desktop I mapped the SHARE [rodrigo] and I have no problems to access it. Therefore, analysing the logs files, specifically the client log file in the server, I saw some weird messages: ... [2005/03/15 18:04:18, 0] lib/access.c:check_access(333) Denied connection from (187.10.16.XXX) ... The weird thing is that this messages are logged only when I open some file inside the shared directory from samba. Using "windows explorer", I mapped the share inside windows explorer and using on the server the command "tail -f log.client". At the moment of openning file, a tenth of this messages are logged. The IP address showed is the IP of my Desktop and the open file operation is sucedeed without any error messages from windows. See also that in the smb.conf file, on the SHARE [rodrigo] I put a explicit configuration that allow my host 187.10.16.216 to access that SHARE. Why these messages are logged ?? What is wrong inside my configuration ?? Is wrong ? Tks in advance, Rodrigo Jos? dos Santos Solvo S.A. IT UNIX Administrator Senior (Solaris Specialist) Computing Engineer Phone: (55) 19 3847 6003 Fax: (55) 19 3847 6230 Mobile: (55) 19 8111 8560