James Okken
2014-Jun-05 21:07 UTC
[Samba] navigating to samba server by servername strangeness
hi everyone i am hoping for a bit of direction here, i've tried everything i
can find that even closely relates to this.
i have a samba server that has shares that can be accessed from windows by
simply typing \\192.168.1.1 in windows file explorer, its name has just been
changed to fileserver1 and is in dns as fileserver1. it is also in the dns as
fserver1. before the name change everything was fine.
the shares can be accessed from windows by typing \\fserver1 in windows file
explorer, but since the name change when the new name is used, \\fileserver1 in
windows file explorer, I am denied access with a popup:
"\\fileserver1 is not accessible. you might not have permission to use this
network resource. the account is not authorized to login to this station"
I can get access if I use \\fileserver1 from a windows local login that is not a
company.com domain login.
meaning this only happens from company.com domain logins. And, I can tell it is
getting to the right IP address since netstat shows the correct IP address for
fileserver1 when the error message is displayed.
this is version 3.0.25b on redhat 5.1 and unfortunately I can't upgrade
right now.
here is my smb.conf. (I know, very insecure right now)
[global]
hosts allow = ALL
workgroup = company.com
interfaces = lo bond1
security = share
guest account = root
guest ok = yes
[fileserver1]
comment = share mirrored
path = /share/fileserver1
writeable = yes
browseable = yes
read only = no
thanks
On Thu, Jun 5, 2014 at 5:07 PM, James Okken <James.Okken at dialogic.com> wrote:> [global] > hosts allow = ALL > workgroup = company.com > interfaces = lo bond1 > security = share > guest account = root > guest ok = yesOutside of Marc's good advice (upgrade to a newer version), your [global] section needs some work.> hosts allow = ALLProbably best to drop this line, as all hosts are allowed by default. My 'man smb.conf' states that ALL is a keyword to be used with "hosts deny" but I'm not to sure about its use with "hosts allow". Regardless, the line is unnecessary if you want to allow all hosts access.> workgroup = company.comNote that NetBIOS names are not hierarchical like those you find in DNS, the workgroup name should NOT have a dot, your workgroup might be "COMPANY", it might be "WORKGROUP" but it surely isn't (or shouldn't be) "company.com".> security = sharePlease switch to "security = user", there's most likely no good reason to use "security = share".> guest account = rootThis seems reasonably dangerous, if nothing else. The guest account is generally set to "nobody" or some similar account on your distro. That with a proper "username map" file and you should be much better off. See: http://blog.realcomputerguy.com/2010/12/samba-and-guest-shares-with-security.html Also on the Windows box try running "net use * /delete /yes" in a command prompt to remove any connections under the old hostname before trying to connect via the new hostname. Chris