Hi Rowland,
thanks for your fast reply. Maybe there was a problem on format in the
email as testparm works fine on my server. But I also did not write
about distribution and version, sorry.
This conf is given by Yast tool from SuSE LEAP 42.2 by default. I just
added the few parameters I need. So maybe I should clean out a bit - I
still do not need any domain settings.
But does this the trick?
br
Sascha
Am 09.07.2018 um 11:02 schrieb Rowland Penny via samba:> On Mon, 9 Jul 2018 10:21:50 +0200
> Sascha Wiechmann via samba <samba at lists.samba.org> wrote:
>
>> Hi everyone,
>>
>> I have a small issue on our main samba server. We added a hardware
>> firewall with different zones and now I want to get access from new
>> development LAN (192.168.4.) to samba (192.168.0.) but I get
>> information about access denied on windows 7 (net use Error 5).
>> Firewall is open to all internal LANs. I checked the smb.conf and,
>> for me, it seems to be fine. I added hosts allow before holiday and
>> it worked, but after my holiday access is denied. Maybe I am blind
>> and you may give me a hint, please...
>>
>> Log :
>>
>> [2018/07/09 09:37:06.872551,
>> 0] ../source3/lib/access.c:338(allow_access) Denied connection from
>> 192.168.4.111 (192.168.4.111)
>>
>>
>> smb.conf :
>>
>> [global]
>> workgroup = workgroup
>> passdb backend = tdbsam
>> printing = cups
>> printcap name = cups
>> printcap cache time = 750
>> cups options = raw
>> map to guest = Bad User
>> #include = /etc/samba/dhcp.conf
>> logon path = \\%L\profiles\.msprofile
>> logon home = \\%L\%U\.9xprofile
>> logon drive = P:
>> usershare allow guests = No
>> add machine script = /usr/sbin/useradd -c Machine -d
>> /var/lib/nobody -s /bin/false %m$
>> domain logons = No
>> domain master = No
>> security = user
>> wins support = Yes
>> netbios name = SRV1
>> create mask = 0770
>> directory mask = 0770
>> log file = /var/log/samba/log.%I
>> log level = 2
>> hosts allow = 192.168.0.0/24 192.168.4.0/24
>> hosts deny = ALL
>>
>> Thanks for your efforts !
>>
>> br
>> Sascha
>>
> There appears to be something wrong with that smb.conf. If I I copy it
> into a file on my computer and run 'testparm' against it, I get
this:
> testparm testsmb.conf
> Load smb config files from testsmb.conf
> rlimit_max: increasing rlimit_max (1024) to minimum Windows limit (16384)
> Unknown parameter encountered: " security"
> Ignoring unknown parameter " security"
> Unknown parameter encountered: " netbios name"
> Ignoring unknown parameter " netbios name"
> Unknown parameter encountered: " printing"
> Ignoring unknown parameter " printing"
> Unknown parameter encountered: " printcap name"
> Ignoring unknown parameter " printcap name"
> Unknown parameter encountered: " printcap cache time"
> Ignoring unknown parameter " printcap cache time"
> Unknown parameter encountered: " cups options"
> Ignoring unknown parameter " cups options"
> Unknown parameter encountered: " map to guest"
> Ignoring unknown parameter " map to guest"
> Unknown parameter encountered: " logon path"
> Ignoring unknown parameter " logon path"
> Unknown parameter encountered: " logon home"
> Ignoring unknown parameter " logon home"
> Unknown parameter encountered: " logon drive"
> Ignoring unknown parameter " logon drive"
> Unknown parameter encountered: " usershare allow guests"
> Ignoring unknown parameter " usershare allow guests"
> Unknown parameter encountered: " add machine script"
> Ignoring unknown parameter " add machine script"
> Unknown parameter encountered: " domain logons"
> Ignoring unknown parameter " domain logons"
> Unknown parameter encountered: " domain master"
> Ignoring unknown parameter " domain master"
> Unknown parameter encountered: " wins support"
> Ignoring unknown parameter " wins support"
> Unknown parameter encountered: " create mask"
> Ignoring unknown parameter " create mask"
> Unknown parameter encountered: " directory mask"
> Ignoring unknown parameter " directory mask"
> Unknown parameter encountered: " log file"
> Ignoring unknown parameter " log file"
> Unknown parameter encountered: " log level"
> Ignoring unknown parameter " log level"
> Unknown parameter encountered: " hosts allow"
> Ignoring unknown parameter " hosts allow"
> Unknown parameter encountered: " hosts deny"
> Ignoring unknown parameter " hosts deny"
> Loaded services file OK.
> Server role: ROLE_STANDALONE
>
> Press enter to see a dump of your service definitions
>
> # Global parameters
> [global]
> idmap config * : backend = tdb
>
> Or to put it another way, it doesn't seem to like any of your
> parameters.
>
> Removing the leading blank space and replacing it with 4 spaces seems
> to cure this. It then leads to the next problem, you have 'domain
> master = No' and testparm now says your smb.conf is for a
> 'ROLE_STANDALONE', so why do you have all the domain settings ?
>
> Rowland
>
>