Dear, I have a Linux Samba server and a Windows XP SP2 client joined to the "g-company.net" domain. I want to access a Linux share resource in /var/share without password from WXP desktop FROM ANY USER. This is my scenario: - I don't create any Linux local user because I want total access from any user - I use security = share - My smbusers file is: root = administrator admin nobody = guest pcguest smbguest - The Windows XP guest account is "guest" but I don't know if it has any password setup. - This is my smb.conf: [global] workgroup = G-COMPANY.NET server string = Samba Server Version %v security = SHARE passdb backend = tdbsam [share] comment = Archivos Compartidos path = /var/share read only = No create mask = 0700 directory mask = 0700 guest only = Yes guest ok = Yes Form Windows XP I execute: \\samba_server\share but I get the error "DENIED ACCESS". What can I do to access this resource ??? Thanks a lot, JeLo
On Fri, Feb 25, 2011 at 12:22:12PM -0300, J. L. Cabral wrote:> Dear, I have a Linux Samba server and a Windows XP SP2 client joined > to the "g-company.net" domain. > > I want to access a Linux share resource in /var/share without password > from WXP desktop FROM ANY USER. > > This is my scenario: > > - I don't create any Linux local user because I want total access from any user > > - I use security = shareWhy? -- Marco Ciampa +--------------------+ | Linux User #78271 | | FSFE fellow #364 | +--------------------+
mat.enders at gmail.com
2011-Feb-25 15:39 UTC
[Samba] Access to a share resource without password
I believe your permissions are not correct. If I understand correctly you want to run a wide open share that allows everyone full control. If this is correct then first: chmod -R 777 /your/share Change your create masks to: create mask = 0777 directory mask = 0777 Sent on the Sprint? Now Network from my BlackBerry? -----Original Message----- From: "J. L. Cabral" <jelocabral at gmail.com> Sender: samba-bounces at lists.samba.org Date: Fri, 25 Feb 2011 12:22:12 To: samba<samba at lists.samba.org> Subject: [Samba] Access to a share resource without password Dear, I have a Linux Samba server and a Windows XP SP2 client joined to the "g-company.net" domain. I want to access a Linux share resource in /var/share without password from WXP desktop FROM ANY USER. This is my scenario: - I don't create any Linux local user because I want total access from any user - I use security = share - My smbusers file is: root = administrator admin nobody = guest pcguest smbguest - The Windows XP guest account is "guest" but I don't know if it has any password setup. - This is my smb.conf: [global] workgroup = G-COMPANY.NET server string = Samba Server Version %v security = SHARE passdb backend = tdbsam [share] comment = Archivos Compartidos path = /var/share read only = No create mask = 0700 directory mask = 0700 guest only = Yes guest ok = Yes Form Windows XP I execute: \\samba_server\share but I get the error "DENIED ACCESS". What can I do to access this resource ??? Thanks a lot, JeLo -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
OK, with Wolfgang advice I do:
[global]
workgroup = G-BAPRO.NET
server string = Samba Server Version %v
netbiosname = bangkok
security = user
smb passwd file = /etc/samba/smbpasswd
guest account = guest
[share]
guest ok = yes
path = /var/share
writeable = yes
and execute from Windows desktop:
net use Z: \\bangkok\share
after that I put user=guest and password=1234
but I CAN'T ACCESS
"guest" is the name of a local Linux account and it's a samba user
(smbpasswd -a guest with pass "1234").
What can I do ???
Regards
On Fri, Feb 25, 2011 at 1:31 PM, Wolfgang Ratzka
<ratzka at hrz.uni-marburg.de> wrote:>>>> [global]
>>>> ? ? ? (...)
>>>> ? ? ? ?security = SHARE
>>>> ? ? ? (...)
>
> security = SHARE is rather Windows95-ish and it does not work very well
> with newer Windows versions.
> Just try "security = user". Setting "guest ok = Yes"
should give you
> anonymous access.
>
> Kind regards
> --
> Wolfgang Ratzka ?Phone: +49 6421 2823531 ?FAX: +49 6421 2826994
> Uni Marburg, ?HRZ, Hans-Meerwein-Str., D-35032 Marburg, Germany
>
Marco tell me: ---------- Forwarded message ---------- From: Marco Ciampa <ciampix at libero.it> Date: Fri, Feb 25, 2011 at 2:13 PM Subject: Re: [Samba] Access to a share resource without password To: "J. L. Cabral" <jelocabral at gmail.com> On Fri, Feb 25, 2011 at 01:07:03PM -0300, J. L. Cabral wrote:> Dear Marco, I use security=share because I want to give full access to > everyone in my LAN. > > Do you think I'm wrong in this setting ??? What is your opinion ??? >Well it is not required to use such configuration. You can just stick with security = user and then do something like this: [freeaccess] ? ?comment = free access folder ? ?browseable = yes ? ?path = /home/freeaccess ? ?public = yes ? ?writeable = yes ? ?create mode = 0644 ? ?force user = adhocuser ? ?force group = adhocuser just create such adhocuser into the server disabling it shell access and then do a: chown adhocuser /home/freeaccess PS: bounce to the list this message to discover if I've said something real wrong... -- Marco Ciampa +--------------------+ | Linux User ?#78271 | | FSFE fellow ? #364 | +--------------------+
On Fri, Feb 25, 2011 at 10:22 AM, J. L. Cabral <jelocabral at gmail.com> wrote:> I want to access a Linux share resource in /var/share without password > from WXP desktop FROM ANY USER.See: http://blog.realcomputerguy.com/2010/12/samba-and-guest-shares-with-security.html
Hi Chris, thanks and just three short questions: 1) The Linux local user "guest" must be added to samba with "smbpasswd -a guest" ??? 2) The Windows XP desktops must have a guest account enable named "guest", or it can be named "Invited" or "Invitado" (Spanish Windows version) ??? 3) What owner and group must have the share /var/share ??? Thanks a lot, JeLo On Fri, Feb 25, 2011 at 3:13 PM, Chris Smith <smb_77 at chrissmith.org> wrote:> On Fri, Feb 25, 2011 at 10:22 AM, J. L. Cabral <jelocabral at gmail.com> wrote: >> I want to access a Linux share resource in /var/share without password >> from WXP desktop FROM ANY USER. > > See: > http://blog.realcomputerguy.com/2010/12/samba-and-guest-shares-with-security.html >
Marco, I followed your instructions and I couldn't connect, my config is: [global] workgroup = CASA netbios name = bangkok security = user passdb backend = tdbsam map to guest = bad password username map = /etc/samba/smbusers [grabar] comment = file sharing path = /var/share browseable = yes public = yes writeable = yes create mode = 0644 force user = pepe force group = pepe I have: drwxrwxrwx root nobody /var/share and I add user pepe: # useradd -s /sbin/nologin pepe After that I restart samba: # /etc/init.d/smb restart and fro Windows XP machine I do: net use X: \\10.4.133.109\grabar and after that I see the resource in my Explorer but when I want to enter into it with double click I get: ACCESS DENIED The smb.log is: [2011/02/27 23:52:25, 0] lib/util_sock.c:get_peer_addr(1224) getpeername failed. Error was the connection peer is not connected [2011/02/27 23:52:25, 0] lib/util_sock.c:read_data(534) read_data: read failure for 4 bytes to client 0.0.0.0. Error connectio reinitialized by remote machine [2011/02/27 23:52:25, 1] smbd/service.c:make_connection_snum(1077) kari (10.4.132.61) connect to service grabar initially as user pepe (uid=500, gid=500) (pid 31657) [2011/02/27 23:52:29, 1] smbd/fake_file.c:open_fake_file(116) open_fake_file_shared: access_denied to service[grabar] file[$Extend/$Quota:$Q:$INDEX_ALLOCATION] user[pepe] [2011/02/27 23:52:29, 1] smbd/fake_file.c:open_fake_file(116) open_fake_file_shared: access_denied to service[grabar] file[$Extend/$Quota:$Q:$INDEX_ALLOCATION] user[pepe] Can you help me again ??? THANKS A LOT JeLo On Sun, Feb 27, 2011 at 4:53 PM, Marco Ciampa <ciampix at libero.it> wrote:> On Fri, Feb 25, 2011 at 02:55:17PM -0300, J. L. Cabral wrote: >> Marco, thanks.....last question: >> >> the adhoc user you tell me to create as a linux local user need to be >> created as a samba user alos with: >> >> smbpasswd -a adhocuser: >> pass:1234 >> pass:1234 >> >> Thanks again >> > > no, you just have to create the user just to control the user with whom > the people will access that folder. Since you use the "force user" > option, you do not have to set any password... > > just do a > > adduser adhocuser > > and you are done. > > > -- > > > Marco Ciampa > > +--------------------+ > | Linux User ?#78271 | > | FSFE fellow ? #364 | > +--------------------+ >
Chris, after following Marco guideline and fail I followed the tutorial you recommend to me, please see below: [global] workgroup = CASA netbios name = bangkok security = user passdb backend = tdbsam Map to guest = Bad User username map = /etc/samba/smbusers [grabar] comment = File sharing path = /var/alejandro read only = No create mask = 0700 directory mask = 0700 guest ok = Yes The content of smbusers is: root = administrator admin nobody = guest pcguest smbguest and the path: drwxrwxrwx root nobody /var/share I restart smb and after tghat I do from Windows: net use X: \\10.4.133.109\grabar I see the resource but when I made double click on it I get: ACCESS DENIED The smb.log is: [2011/02/28 00:16:14, 0] lib/util_sock.c:get_peer_addr(1224) getpeername failed. Error was the other connection peer is not connected [2011/02/28 00:16:14, 0] lib/util_sock.c:get_peer_addr(1224) getpeername failed. Error was the other connection peer is not connected [2011/02/28 00:16:14, 0] lib/util_sock.c:read_data(534) read_data: read failure for 4 bytes to client 0.0.0.0. Error connectio reinitialized by the remote machine [2011/02/28 00:16:14, 1] smbd/service.c:make_connection_snum(1077) kari (10.4.132.61) connect to service grabar initially as user nobody (uid=99, gid=99) (pid 31950) THANKS AGAIN and please can you continue helping me ??? JeLo On Fri, Feb 25, 2011 at 5:38 PM, Chris Smith <smb_77 at chrissmith.org> wrote:> On Fri, Feb 25, 2011 at 3:17 PM, Helmut Hullen <Hullen at t-online.de> wrote: >> Have I to add "nobody" to the samba password file? > > No. > -- > To unsubscribe from this list go to the following URL and read the > instructions: ?https://lists.samba.org/mailman/options/samba >
Il 25/02/2011 16:22, J. L. Cabral ha scritto:> Dear, I have a Linux Samba server and a Windows XP SP2 client joined > to the "g-company.net" domain. > > I want to access a Linux share resource in /var/share without password > from WXP desktop FROM ANY USER. > > This is my scenario: > > - I don't create any Linux local user because I want total access from any user > > - I use security = share > > - My smbusers file is: > > root = administrator admin > nobody = guest pcguest smbguest > > - The Windows XP guest account is "guest" but I don't know if it has > any password setup. > > - This is my smb.conf: > > [global] > workgroup = G-COMPANY.NET > server string = Samba Server Version %v > security = SHARE > passdb backend = tdbsam > > [share] > comment = Archivos Compartidos > path = /var/share > read only = No > create mask = 0700 > directory mask = 0700 > guest only = Yes > guest ok = Yes > > Form Windows XP I execute: > > \\samba_server\share > > but I get the error "DENIED ACCESS". > > What can I do to access this resource ??? > > Thanks a lot, > > JeLoHi, I have a similar setup. I forced /var/share to be owned by group "publicshare", and in smb.conf I have force group = publicshare. The permission bits are 775. HTH -- Marcello Romani
On Mon, Feb 28, 2011 at 12:21:32AM -0300, J. L. Cabral wrote:> Chris, after following Marco guideline and fail I followed the > tutorial you recommend to me, please see below:[...] just to remember you to post even when successful. We are interested in knowing what went wrong... -- Marco Ciampa +--------------------+ | Linux User #78271 | | FSFE fellow #364 | +--------------------+
Apparently Analagous Threads
- error adding a user
- Making Happy Users ... I need to understand...
- I can't connect to a Samba resource
- Samba PDC adding new user, profile dir is not created
- Unreliable connection to Samba PDC - Connections get lost, Roaming Profiles do not sync, Files can't be written, etc..