Hello List I
I'm experiencing SERIOUS problems accessing Shares.
I'm using Samba 3.0.25 on a FreeBSD Box
I'm using samba for sharing and user authentication
Everything seemed working perfectly
but when I tried to share some more directories, problems poped up
I can read shares ONLY if they have Read attribute for Other.
and I can manipulate files ONLY if they have Write attribute for Other
to say it plain.... Ilooks like I have to set 777 mode on all shared dirs...
They ONLY other alternative is to chance the owner of the directory to my
user and "domain users" groups (which comes from AD)
here is an example
mail# /usr/local/www > ls -al
total 28
drwxr-xr-x 14 root wheel 512 Jun 14 11:26 .
drwxr-xr-x 19 root wheel 512 May 7 15:16 ..
drwxr-xr-x 2 root wheel 512 May 7 14:29 DMScmf
drwxr-xr-x 12 root wheel 512 Jun 11 16:50 Zope29
drwxr-xr-x 6 root wheel 512 May 7 15:17 apache22
drwxr-xr-x 8 root wheel 512 May 4 12:40 awstats
drwxr-xr-x 2 root wheel 512 May 9 18:00 cgi-bin
drwxrwx--- 2 gianlucaculot domain users 512 Jun 12 17:57 docebo
drwxr-xr-x 13 root wheel 512 May 10 16:44 downloads
drwxrwxrwx 3 root wheel 512 Jun 14 11:26 ftpUploads
drwxrwxr-x 5 andrealaus domain users 1024 Jun 13 18:18 lausblog
drwxr-x--- 14 www www 512 Jun 8 17:08 squirrelmail
drwxr-xr-x 2 root wheel 512 Jun 11 10:57 test
drwxr-xr-x 3 root wheel 512 Apr 27 16:04 www.dmsware.it
/usr/local/www is shared as websites ( i.e. \\server\webistes )
I can read content of every dir with 755 (or 775) mode
I can do everyting on docebo
but I cannot access squirrelmail... even if I belong to the WWW group
here is the smb.conf
mail# /usr/local/www > cat /etc/smb.conf
# Samba config file created using SWAT
# from 0.0.0.0 (0.0.0.0)
# Date: 2007/05/09 10:32:32
[global]
workgroup = DMSWARE
Wins support = yes
dns proxy = yes
name resolve order = host wins bcast
local master = yes
domain master = no
preferred master = auto
enhanced browsing = yes
#encrypt password = yes # YES = Default
realm = DMSWARE.it
server string = mail
security = ADS
password server = orion
passdb backend = tdbsam
passwd program = /usr/bin/passwd %u
client use spnego = yes
server signing = auto
client signing = auto
#passwd chat = *Enter\snew\sUNIX\spassword:* %n\n
*Retype\snew\sUNIX\spassword:* %n\n .
#passwd chat debug = yes
log file = /var/log/samba/log.%m
add user script = /usr/sbin/pw useradd %u
delete user script = /usr/sbin/pw userdel %u
add group script = /usr/sbin/groupadd %g
delete group script = /usr/sbin/pw groupdel %g
template homedir = /home/%U
template shell = /bin/csh
winbind cache time = 3600
winbind enum users = Yes
winbind enum groups = Yes
winbind use default domain = Yes
winbind nss info = rfc2307
idmap domains = DMSWARE
idmap config DMSWARE:range = 10000-49999
idmap config DMSWARE:base_rid = 0
idmap config DMSWARE:backend = rid
idmap uid = 10000-49999
idmap gid = 10000-49999
# Networking configuration options
hosts allow = 192.168.0. localhost
#guest ok = yes
#guest only = yes
browseable = yes
#read only = yes
#force directory mode = 744
public = yes
available = yes
browse list = yes
#idmap backend = ad
#idmap backend = idmap_rid:DMSWARE=10000-49999
#idmap uid = 10000-49999
#idmap gid = 10000-49999
# 'unix password sync' serve per mantenere sincronizzate le password
di
Samba e degli account Linux
# Attenzione, vengono sincronizzate le password Linux rispetto le
password Samba,
# questa procedura non funziona al contrario:
# se si cambia con passwd una password Unix,
# si dovr? cambiarla a mano con smbpasswd per tenere
# sincronizzata la password Unix con la password Samba.
#unix password sync = yes
# set the loglevel
log level = 2
[downloads]
path = /usr/local/www/www.dmsware.it/downloads/downloads
valid users = @DMSWARE\multimediaquality, @DMSWARE\multimediaspv,
@DMSWARE\softwarespv, DMSWARE\andrealaus
read only = No
create mask = 0777
directory mask = 0777
[websites]
path = /usr/local/www/
valid users = DMSWARE\gianlucaculot
write list = DMSWARE\gianlucaculot, @DMSWARE\software,
@DMSWARE\softwarespv
read only = No
create mask = 0775
directory mask = 0775
[shares]
path = /usr/local/share
valid users = DMSWARE\gianlucaculot
[Home]
path = /home
read only = No
[test]
path = /usr/local/www/test
valid users = @DMSWARE\multimediaspv, @DMSWARE\softwarespv,
DMSWARE\andrealaus
read only = No
create mask = 0777
directory mask = 0777
What then hell I'm doing wrong ?
----------------------------------------------
Gianluca Culot
DMS Multimedia
Via delle Arti e dei Mestieri, 6
20050 Sulbiate (Mi) - Italy
Tel: +39 039 5968925
Fax: +39 039 3309813
<mailto:gianlucaculot@dmsware.com>
www.dmsware.com <http://www.dmsware.com/>
Ai sensi del D.Lgs. 196/2003 si precisa che le informazioni contenute in
questo messaggio sono riservate ed a uso esclusivo del destinatario. Qualora
il messaggio Le fosse pervenuto per errore, La invitiamo ad eliminarlo senza
copiarlo e a non inoltrarlo a terzi, dandocene gentilmente comunicazione. Il
mittente comunica che il presente messaggio ed ogni suo allegato, al momento
dell?invio, era esente da ogni tipo di virus, worm, trojan e/o ogni altri
tipo di codice software dannoso. Questo messaggio e i suoi allegati
potrebbero essere stati infettati durante la trasmissione. Leggendo il
messaggio e/o aprendo gli allegati, il Destinatario si prende la piena
responsabilit? nei confronti di ogni azione protettiva o di rimedio per la
rimozione di virus ed altri difetti. DMS Multimedia non potr? essere
considerata responsabile per qualsivoglia danno o perdita derivata qualunque
modo da questo messaggio o dai suoi allegati.
The information in this electronic mail message, including any attachments,
is confidential and may be legally privileged. It is intended solely for the
addressee(s). Access to this Internet electronic mail message by anyone else
is unauthorised. If you are not the intended recipient, any disclosure,
copying, distribution or action taken or omitted to be taken in reliance on
it is prohibited and may be unlawful. The sender believes that this E-mail
and any attachments were free of any virus, worm, Trojan horse, and/or
malicious code when sent. This message and its attachments could have been
infected during transmission. By reading the message and opening the
attachments, the recipient accepts full responsibility for taking protective
and remedial action about viruses and other defects.DMS Multimedia is not
liable for any loss or damage arising in any way from this message or its
attachments
I have the same problem and I really don't know the cause. I'm using samba 3.0.24 on Debian. I also have samba 3.0.22 installed on an Ubuntu machine with the same configuration files of Debian, and it works well. Does anyone have a solution? Gianluca Culot wrote:> > Hello List I > > I'm experiencing SERIOUS problems accessing Shares. > I'm using Samba 3.0.25 on a FreeBSD Box > > I'm using samba for sharing and user authentication > > Everything seemed working perfectly > but when I tried to share some more directories, problems poped up > > I can read shares ONLY if they have Read attribute for Other. > and I can manipulate files ONLY if they have Write attribute for Other > to say it plain.... Ilooks like I have to set 777 mode on all shared > dirs... > > They ONLY other alternative is to chance the owner of the directory to my > user and "domain users" groups (which comes from AD) > > here is an example > > mail# /usr/local/www > ls -al > total 28 > drwxr-xr-x 14 root wheel 512 Jun 14 11:26 . > drwxr-xr-x 19 root wheel 512 May 7 15:16 .. > drwxr-xr-x 2 root wheel 512 May 7 14:29 DMScmf > drwxr-xr-x 12 root wheel 512 Jun 11 16:50 Zope29 > drwxr-xr-x 6 root wheel 512 May 7 15:17 apache22 > drwxr-xr-x 8 root wheel 512 May 4 12:40 awstats > drwxr-xr-x 2 root wheel 512 May 9 18:00 cgi-bin > drwxrwx--- 2 gianlucaculot domain users 512 Jun 12 17:57 docebo > drwxr-xr-x 13 root wheel 512 May 10 16:44 downloads > drwxrwxrwx 3 root wheel 512 Jun 14 11:26 ftpUploads > drwxrwxr-x 5 andrealaus domain users 1024 Jun 13 18:18 lausblog > drwxr-x--- 14 www www 512 Jun 8 17:08 squirrelmail > drwxr-xr-x 2 root wheel 512 Jun 11 10:57 test > drwxr-xr-x 3 root wheel 512 Apr 27 16:04 > www.dmsware.it > > /usr/local/www is shared as websites ( i.e. \\server\webistes ) > I can read content of every dir with 755 (or 775) mode > I can do everyting on docebo > but I cannot access squirrelmail... even if I belong to the WWW group > > > here is the smb.conf > > mail# /usr/local/www > cat /etc/smb.conf > # Samba config file created using SWAT > # from 0.0.0.0 (0.0.0.0) > # Date: 2007/05/09 10:32:32 > > [global] > workgroup = DMSWARE > Wins support = yes > dns proxy = yes > name resolve order = host wins bcast > local master = yes > domain master = no > preferred master = auto > enhanced browsing = yes > #encrypt password = yes # YES = Default > > realm = DMSWARE.it > server string = mail > security = ADS > password server = orion > passdb backend = tdbsam > passwd program = /usr/bin/passwd %u > client use spnego = yes > server signing = auto > client signing = auto > #passwd chat = *Enter\snew\sUNIX\spassword:* %n\n > *Retype\snew\sUNIX\spassword:* %n\n . > #passwd chat debug = yes > log file = /var/log/samba/log.%m > add user script = /usr/sbin/pw useradd %u > delete user script = /usr/sbin/pw userdel %u > add group script = /usr/sbin/groupadd %g > delete group script = /usr/sbin/pw groupdel %g > > template homedir = /home/%U > template shell = /bin/csh > winbind cache time = 3600 > winbind enum users = Yes > winbind enum groups = Yes > winbind use default domain = Yes > winbind nss info = rfc2307 > > idmap domains = DMSWARE > idmap config DMSWARE:range = 10000-49999 > idmap config DMSWARE:base_rid = 0 > idmap config DMSWARE:backend = rid > idmap uid = 10000-49999 > idmap gid = 10000-49999 > > # Networking configuration options > hosts allow = 192.168.0. localhost > #guest ok = yes > #guest only = yes > browseable = yes > #read only = yes > #force directory mode = 744 > public = yes > available = yes > browse list = yes > > #idmap backend = ad > #idmap backend = idmap_rid:DMSWARE=10000-49999 > #idmap uid = 10000-49999 > #idmap gid = 10000-49999 > > # 'unix password sync' serve per mantenere sincronizzate le password di > Samba e degli account Linux > # Attenzione, vengono sincronizzate le password Linux rispetto le > password Samba, > # questa procedura non funziona al contrario: > # se si cambia con passwd una password Unix, > # si dovr? cambiarla a mano con smbpasswd per tenere > # sincronizzata la password Unix con la password Samba. > #unix password sync = yes > > # set the loglevel > log level = 2 > > [downloads] > path = /usr/local/www/www.dmsware.it/downloads/downloads > valid users = @DMSWARE\multimediaquality, @DMSWARE\multimediaspv, > @DMSWARE\softwarespv, DMSWARE\andrealaus > read only = No > create mask = 0777 > directory mask = 0777 > > [websites] > path = /usr/local/www/ > valid users = DMSWARE\gianlucaculot > write list = DMSWARE\gianlucaculot, @DMSWARE\software, > @DMSWARE\softwarespv > read only = No > create mask = 0775 > directory mask = 0775 > > [shares] > path = /usr/local/share > valid users = DMSWARE\gianlucaculot > > > [Home] > path = /home > read only = No > > > [test] > path = /usr/local/www/test > valid users = @DMSWARE\multimediaspv, @DMSWARE\softwarespv, > DMSWARE\andrealaus > read only = No > create mask = 0777 > directory mask = 0777 > > What then hell I'm doing wrong ? > > ---------------------------------------------- > Gianluca Culot > DMS Multimedia > Via delle Arti e dei Mestieri, 6 > 20050 Sulbiate (Mi) - Italy > Tel: +39 039 5968925 > Fax: +39 039 3309813 > <mailto:gianlucaculot@dmsware.com> > www.dmsware.com <http://www.dmsware.com/> > > Ai sensi del D.Lgs. 196/2003 si precisa che le informazioni contenute in > questo messaggio sono riservate ed a uso esclusivo del destinatario. > Qualora > il messaggio Le fosse pervenuto per errore, La invitiamo ad eliminarlo > senza > copiarlo e a non inoltrarlo a terzi, dandocene gentilmente comunicazione. > Il > mittente comunica che il presente messaggio ed ogni suo allegato, al > momento > dell?invio, era esente da ogni tipo di virus, worm, trojan e/o ogni altri > tipo di codice software dannoso. Questo messaggio e i suoi allegati > potrebbero essere stati infettati durante la trasmissione. Leggendo il > messaggio e/o aprendo gli allegati, il Destinatario si prende la piena > responsabilit? nei confronti di ogni azione protettiva o di rimedio per la > rimozione di virus ed altri difetti. DMS Multimedia non potr? essere > considerata responsabile per qualsivoglia danno o perdita derivata > qualunque > modo da questo messaggio o dai suoi allegati. > > The information in this electronic mail message, including any > attachments, > is confidential and may be legally privileged. It is intended solely for > the > addressee(s). Access to this Internet electronic mail message by anyone > else > is unauthorised. If you are not the intended recipient, any disclosure, > copying, distribution or action taken or omitted to be taken in reliance > on > it is prohibited and may be unlawful. The sender believes that this E-mail > and any attachments were free of any virus, worm, Trojan horse, and/or > malicious code when sent. This message and its attachments could have been > infected during transmission. By reading the message and opening the > attachments, the recipient accepts full responsibility for taking > protective > and remedial action about viruses and other defects.DMS Multimedia is not > liable for any loss or damage arising in any way from this message or its > attachments > > > -- > To unsubscribe from this list go to the following URL and read the > instructions: https://lists.samba.org/mailman/listinfo/samba > >-- View this message in context: http://www.nabble.com/Problems-accessing-Shares-tf3928274.html#a11345144 Sent from the Samba - General mailing list archive at Nabble.com.
That problem seems to be due to a bug that affects the versions of samba (winbind, I think) from 3.0.23 to 3.0.25. As discussed here https://bugzilla.samba.org/show_bug.cgi?id=3990 the bug should be solved in the next version of samba. I solved downgrading to 3.0.22. -- View this message in context: http://www.nabble.com/Problems-accessing-Shares-tf3928274.html#a11741923 Sent from the Samba - General mailing list archive at Nabble.com.