James Okken
2014-Jun-05 21:07 UTC
[Samba] navigating to samba server by servername strangeness
hi everyone i am hoping for a bit of direction here, i've tried everything i can find that even closely relates to this. i have a samba server that has shares that can be accessed from windows by simply typing \\192.168.1.1 in windows file explorer, its name has just been changed to fileserver1 and is in dns as fileserver1. it is also in the dns as fserver1. before the name change everything was fine. the shares can be accessed from windows by typing \\fserver1 in windows file explorer, but since the name change when the new name is used, \\fileserver1 in windows file explorer, I am denied access with a popup: "\\fileserver1 is not accessible. you might not have permission to use this network resource. the account is not authorized to login to this station" I can get access if I use \\fileserver1 from a windows local login that is not a company.com domain login. meaning this only happens from company.com domain logins. And, I can tell it is getting to the right IP address since netstat shows the correct IP address for fileserver1 when the error message is displayed. this is version 3.0.25b on redhat 5.1 and unfortunately I can't upgrade right now. here is my smb.conf. (I know, very insecure right now) [global] hosts allow = ALL workgroup = company.com interfaces = lo bond1 security = share guest account = root guest ok = yes [fileserver1] comment = share mirrored path = /share/fileserver1 writeable = yes browseable = yes read only = no thanks
On Thu, Jun 5, 2014 at 5:07 PM, James Okken <James.Okken at dialogic.com> wrote:> [global] > hosts allow = ALL > workgroup = company.com > interfaces = lo bond1 > security = share > guest account = root > guest ok = yesOutside of Marc's good advice (upgrade to a newer version), your [global] section needs some work.> hosts allow = ALLProbably best to drop this line, as all hosts are allowed by default. My 'man smb.conf' states that ALL is a keyword to be used with "hosts deny" but I'm not to sure about its use with "hosts allow". Regardless, the line is unnecessary if you want to allow all hosts access.> workgroup = company.comNote that NetBIOS names are not hierarchical like those you find in DNS, the workgroup name should NOT have a dot, your workgroup might be "COMPANY", it might be "WORKGROUP" but it surely isn't (or shouldn't be) "company.com".> security = sharePlease switch to "security = user", there's most likely no good reason to use "security = share".> guest account = rootThis seems reasonably dangerous, if nothing else. The guest account is generally set to "nobody" or some similar account on your distro. That with a proper "username map" file and you should be much better off. See: http://blog.realcomputerguy.com/2010/12/samba-and-guest-shares-with-security.html Also on the Windows box try running "net use * /delete /yes" in a command prompt to remove any connections under the old hostname before trying to connect via the new hostname. Chris