Re: [Samba] Win8 account sees its home share, but does not have permissions to access

2013-07-04 Thread Dale Schroeder
Being a Debian user, I don't have to deal with selinux; I've got a whole 
different set of problems. That being said, the 1st topic under 
troubleshooting in the Samba wiki is selinux.


https://wiki.samba.org/index.php/Samba_Troubleshooting

Hopefully, you'll find something in there to help you.


On 07/03/2013 1:50 PM, Mark Galeck wrote:

how do I check this?


On Wed, Jul 3, 2013 at 7:18 AM, Dale Schroeder 
d...@briannassaladdressing.com wrote:


This being a Red Hat derivative, is selinux configured to allow this?



On 07/02/2013 2:54 PM, Mark Galeck wrote:


Fedora release 17 (Beefy Miracle)


On Tue, Jul 2, 2013 at 12:16 PM, Ricky Nance ricky.na...@gmail.com
wrote:

  Mark, which distro are you running?


On Tue, Jul 2, 2013 at 2:00 PM, Mark Galeck m...@xpliant.com wrote:

  Can you log into the linux machine with the user mark and write files to

/home/mark without issue?

Certainly. I don't know Samba, but I do know Unix/Linux and as far as I
can tell, everything on Linux is working fine, as well as on the
Windows 8
side.

  What is the output of smbclient //localhost/homes -Umark -d5 (then at a
smb:\ do ls)

??  Command not found - I can't execute this on Linux.  I use


/bin/systemctl status smb.service


to get status


On Tue, Jul 2, 2013 at 11:52 AM, Ricky Nance ricky.na...@gmail.com

wrote:

  Can you log into the linux machine with the user mark and write files

to
/home/mark without issue? What is the output of smbclient
//localhost/homes
-Umark -d5 (then at a smb:\ do ls). Just a couple of things I would
look
at\try.

Ricky







--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Win8 account sees its home share, but does not have permissions to access

2013-07-03 Thread Ricky Nance
So what is the output of `ls -alhZ /home | grep mark` ?

Ricky
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Win8 account sees its home share, but does not have permissions to access

2013-07-03 Thread Dale Schroeder

This being a Red Hat derivative, is selinux configured to allow this?


On 07/02/2013 2:54 PM, Mark Galeck wrote:

Fedora release 17 (Beefy Miracle)


On Tue, Jul 2, 2013 at 12:16 PM, Ricky Nance ricky.na...@gmail.com wrote:


Mark, which distro are you running?


On Tue, Jul 2, 2013 at 2:00 PM, Mark Galeck m...@xpliant.com wrote:


Can you log into the linux machine with the user mark and write files to

/home/mark without issue?

Certainly. I don't know Samba, but I do know Unix/Linux and as far as I
can tell, everything on Linux is working fine, as well as on the Windows 8
side.


What is the output of smbclient //localhost/homes -Umark -d5 (then at a

smb:\ do ls)

??  Command not found - I can't execute this on Linux.  I use

/bin/systemctl status smb.service

to get status


On Tue, Jul 2, 2013 at 11:52 AM, Ricky Nance ricky.na...@gmail.comwrote:


Can you log into the linux machine with the user mark and write files to
/home/mark without issue? What is the output of smbclient //localhost/homes
-Umark -d5 (then at a smb:\ do ls). Just a couple of things I would look
at\try.

Ricky






--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Win8 account sees its home share, but does not have permissions to access

2013-07-03 Thread Mark Galeck
[root@v64-sw-dev003-mark /]# ls -alhZ /home | grep mark
drwx--. mark mark unconfined_u:object_r:user_home_dir_t:s0 mark




On Wed, Jul 3, 2013 at 6:26 AM, Ricky Nance ricky.na...@gmail.com wrote:

 So what is the output of `ls -alhZ /home | grep mark` ?

 Ricky

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Win8 account sees its home share, but does not have permissions to access

2013-07-03 Thread Mark Galeck
how do I check this?


On Wed, Jul 3, 2013 at 7:18 AM, Dale Schroeder 
d...@briannassaladdressing.com wrote:

 This being a Red Hat derivative, is selinux configured to allow this?



 On 07/02/2013 2:54 PM, Mark Galeck wrote:

 Fedora release 17 (Beefy Miracle)


 On Tue, Jul 2, 2013 at 12:16 PM, Ricky Nance ricky.na...@gmail.com
 wrote:

  Mark, which distro are you running?


 On Tue, Jul 2, 2013 at 2:00 PM, Mark Galeck m...@xpliant.com wrote:

  Can you log into the linux machine with the user mark and write files to

 /home/mark without issue?

 Certainly. I don't know Samba, but I do know Unix/Linux and as far as I
 can tell, everything on Linux is working fine, as well as on the
 Windows 8
 side.

  What is the output of smbclient //localhost/homes -Umark -d5 (then at a

 smb:\ do ls)

 ??  Command not found - I can't execute this on Linux.  I use

 /bin/systemctl status smb.service

 to get status


 On Tue, Jul 2, 2013 at 11:52 AM, Ricky Nance ricky.na...@gmail.com
 wrote:

  Can you log into the linux machine with the user mark and write files
 to
 /home/mark without issue? What is the output of smbclient
 //localhost/homes
 -Umark -d5 (then at a smb:\ do ls). Just a couple of things I would
 look
 at\try.

 Ricky





-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Win8 account sees its home share, but does not have permissions to access

2013-07-03 Thread Ricky Nance
You just did, there are rules there ' unconfined_u:object_r:user_home_dir_t'
this leads me to think selinux is your issue, however, I can't say that I
have messed around with selinux at all, so maybe someone else can chime in
and help you out. You should be able to disable it temporarly just to
check. Please refer to the following thread
https://ask.fedoraproject.org/question/10507/how-to-disable-fedora-17-selinux/

Thanks,
Ricky
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Win8 account sees its home share, but does not have permissions to access

2013-07-02 Thread Mark Galeck
Dale, thank you for your help!  However...

I had already checked all the things you are asking.  Permissions are good,
I tried without this parameter, and there is not any error indication in
the logs.  Still the same problem.


On Mon, Jul 1, 2013 at 9:11 AM, Dale Schroeder 
d...@briannassaladdressing.com wrote:

 Mark,

 First verify that the posix permissions are good for your home directory:
 ls -lA /home/mark
 If those are good, then I would try removing the hosts allow parameter in
 [global].
 If that doesn't work, checking the Samba logs is always a good idea.

 Dale


 On 06/28/2013 6:03 PM, Mark Galeck wrote:

 Hello,

 I am a beginner to Samba and I RTFMd carefully but cannot get started.

 I want to access my user account mark home directory on Linux, with the
 same account name on Windows 8.

 The user mark has the same password on Linux and Windows 8.  In addition
 I did this on Linux

  smbpasswd -a mark

 and gave the same password.

 Following the manuals on samba website I edited the samba configuration
 smb.conf file so:

 [global]
  hosts allow = ALL
  client signing = no
  # log files split per-machine:
  log file = /var/log/samba/log.%m
  # maximum size of 50KB per log file, then rotate:
  max log size = 50
  security = user

 [homes]
  valid users = %S
  read only = No


 and successfully started the samba service.

 I can then see mark share on that Linux machine from Windows, I can map
 it to a drive letter in Windows Explorer, and I also see this:

 [root@v64-sw-dev003-mark /]# smbstatus

 Samba version 3.6.12-1.fc17
 PID Username  Group Machine
 --**--**---
 14678 mark  mark  mark-pc  (192.168.221.76)

 Service  pid machine   Connected at
 --**-
 mark 14678   mark-pc   Fri Jun 28 15:56:39 2013

 No locked files



 This all looks very good to me, as Samba server sees my client with the
 correct username, Windows machine name and IP address.


 YET, when I actually try to double-click on the share in the Windows
 Explorer, I get an error dialog:


 Windows cannot access \\192.168.221.32\mark
 You do not have permission to access \\192.168.221.32\mark\. Contact your
 network administrator to request access.


 192.168.221.32 is the Linux machine address.

 Please, what am I doing wrong??

 Thank you,

 Mark




-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Win8 account sees its home share, but does not have permissions to access

2013-07-02 Thread Ricky Nance
Can you log into the linux machine with the user mark and write files to
/home/mark without issue? What is the output of smbclient //localhost/homes
-Umark -d5 (then at a smb:\ do ls). Just a couple of things I would look
at\try.

Ricky
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Win8 account sees its home share, but does not have permissions to access

2013-07-02 Thread Mark Galeck
Can you log into the linux machine with the user mark and write files to
/home/mark without issue?

Certainly. I don't know Samba, but I do know Unix/Linux and as far as I can
tell, everything on Linux is working fine, as well as on the Windows 8 side.

What is the output of smbclient //localhost/homes -Umark -d5 (then at a
smb:\ do ls)

??  Command not found - I can't execute this on Linux.  I use
/bin/systemctl status smb.service
to get status


On Tue, Jul 2, 2013 at 11:52 AM, Ricky Nance ricky.na...@gmail.com wrote:

 Can you log into the linux machine with the user mark and write files to
 /home/mark without issue? What is the output of smbclient //localhost/homes
 -Umark -d5 (then at a smb:\ do ls). Just a couple of things I would look
 at\try.

 Ricky

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Win8 account sees its home share, but does not have permissions to access

2013-07-02 Thread Ricky Nance
Mark, which distro are you running?


On Tue, Jul 2, 2013 at 2:00 PM, Mark Galeck m...@xpliant.com wrote:

 Can you log into the linux machine with the user mark and write files to
 /home/mark without issue?

 Certainly. I don't know Samba, but I do know Unix/Linux and as far as I
 can tell, everything on Linux is working fine, as well as on the Windows 8
 side.

 What is the output of smbclient //localhost/homes -Umark -d5 (then at a
 smb:\ do ls)

 ??  Command not found - I can't execute this on Linux.  I use
 /bin/systemctl status smb.service
 to get status


 On Tue, Jul 2, 2013 at 11:52 AM, Ricky Nance ricky.na...@gmail.comwrote:

 Can you log into the linux machine with the user mark and write files to
 /home/mark without issue? What is the output of smbclient //localhost/homes
 -Umark -d5 (then at a smb:\ do ls). Just a couple of things I would look
 at\try.

 Ricky



-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Win8 account sees its home share, but does not have permissions to access

2013-07-02 Thread Mark Galeck
Fedora release 17 (Beefy Miracle)


On Tue, Jul 2, 2013 at 12:16 PM, Ricky Nance ricky.na...@gmail.com wrote:

 Mark, which distro are you running?


 On Tue, Jul 2, 2013 at 2:00 PM, Mark Galeck m...@xpliant.com wrote:

 Can you log into the linux machine with the user mark and write files to
 /home/mark without issue?

 Certainly. I don't know Samba, but I do know Unix/Linux and as far as I
 can tell, everything on Linux is working fine, as well as on the Windows 8
 side.

 What is the output of smbclient //localhost/homes -Umark -d5 (then at a
 smb:\ do ls)

 ??  Command not found - I can't execute this on Linux.  I use
 /bin/systemctl status smb.service
 to get status


 On Tue, Jul 2, 2013 at 11:52 AM, Ricky Nance ricky.na...@gmail.comwrote:

 Can you log into the linux machine with the user mark and write files to
 /home/mark without issue? What is the output of smbclient //localhost/homes
 -Umark -d5 (then at a smb:\ do ls). Just a couple of things I would look
 at\try.

 Ricky




-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Win8 account sees its home share, but does not have permissions to access

2013-07-02 Thread Ricky Nance
Try yum install samba-client as root, then see if that command will work.
If smbclient works then, it would probably be best to see if we can get a
packet capture of when you try to access the share from the windows 8
machine (btw, which version of windows 8 are you running?). Also, does it
work from windows 8 if you do a start - run - \\192.168.221.32\homes
instead of \\192.168.221.32\mark ?

Ricky
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Win8 account sees its home share, but does not have permissions to access

2013-07-02 Thread Mark Galeck
Also, does it work from windows 8 if you do a start - run - \\
192.168.221.32\homes instead of \\192.168.221.32\mark ?

No. Same error.

The output from smbclient which I now installed, that you requested, is
below.

Thank you very much Ricky.

[root@v64-sw-dev003-mark /]# smbclient //localhost/homes -Umark -d5
INFO: Current debug levels:
  all: 5
  tdb: 5
  printdrivers: 5
  lanman: 5
  smb: 5
  rpc_parse: 5
  rpc_srv: 5
  rpc_cli: 5
  passdb: 5
  sam: 5
  auth: 5
  winbind: 5
  vfs: 5
  idmap: 5
  quota: 5
  acls: 5
  locking: 5
  msdfs: 5
  dmapi: 5
  registry: 5
lp_load_ex: refreshing parameters
Initialising global parameters
rlimit_max: increasing rlimit_max (1024) to minimum Windows limit (16384)
INFO: Current debug levels:
  all: 5
  tdb: 5
  printdrivers: 5
  lanman: 5
  smb: 5
  rpc_parse: 5
  rpc_srv: 5
  rpc_cli: 5
  passdb: 5
  sam: 5
  auth: 5
  winbind: 5
  vfs: 5
  idmap: 5
  quota: 5
  acls: 5
  locking: 5
  msdfs: 5
  dmapi: 5
  registry: 5
params.c:pm_process() - Processing configuration file /etc/samba/smb.conf
Processing section [global]
doing parameter client signing = no
doing parameter log file = /var/log/samba/log.%m
doing parameter max log size = 50
doing parameter security = user
pm_process() returned Yes
Substituting charset 'UTF-8' for LOCALE
added interface eth0 ip=fe80::5054:ff:fe2c:3d38%eth0
bcast=fe80:::::%eth0 netmask=:::::
added interface eth0 ip=192.168.221.32 bcast=192.168.221.255
netmask=255.255.254.0
Netbios name list:-
my_netbios_names[0]=V64-SW-DEV003-MARK
Client started (version 3.6.12-1.fc17).
Enter mark's password:
Opening cache file at /var/lib/samba/gencache.tdb
Opening cache file at /var/lib/samba/gencache_notrans.tdb
sitename_fetch: No stored sitename for
no entry for localhost#20 found.
resolve_lmhosts: Attempting lmhosts lookup for name localhost0x20
resolve_lmhosts: Attempting lmhosts lookup for name localhost0x20
getlmhostsent: lmhost entry: 127.0.0.1 localhost
namecache_store: storing 1 address for localhost#20: 127.0.0.1
Connecting to 127.0.0.1 at port 445
Socket options:
SO_KEEPALIVE = 0
SO_REUSEADDR = 0
SO_BROADCAST = 0
TCP_NODELAY = 1
TCP_KEEPCNT = 9
TCP_KEEPIDLE = 7200
TCP_KEEPINTVL = 75
IPTOS_LOWDELAY = 0
IPTOS_THROUGHPUT = 0
SO_SNDBUF = 663750
SO_RCVBUF = 262006
SO_SNDLOWAT = 1
SO_RCVLOWAT = 1
SO_SNDTIMEO = 0
SO_RCVTIMEO = 0
TCP_QUICKACK = 1
 session request ok
Substituting charset 'UTF-8' for LOCALE
Doing spnego session setup (blob length=58)
got OID=1.3.6.1.4.1.311.2.2.10
got principal=NONE
Got challenge flags:
Got NTLMSSP neg_flags=0x608a8215
  NTLMSSP_NEGOTIATE_UNICODE
  NTLMSSP_REQUEST_TARGET
  NTLMSSP_NEGOTIATE_SIGN
  NTLMSSP_NEGOTIATE_NTLM
  NTLMSSP_NEGOTIATE_ALWAYS_SIGN
  NTLMSSP_NEGOTIATE_NTLM2
  NTLMSSP_NEGOTIATE_TARGET_INFO
  NTLMSSP_NEGOTIATE_128
  NTLMSSP_NEGOTIATE_KEY_EXCH
NTLMSSP: Set final flags:
Got NTLMSSP neg_flags=0x60088215
  NTLMSSP_NEGOTIATE_UNICODE
  NTLMSSP_REQUEST_TARGET
  NTLMSSP_NEGOTIATE_SIGN
  NTLMSSP_NEGOTIATE_NTLM
  NTLMSSP_NEGOTIATE_ALWAYS_SIGN
  NTLMSSP_NEGOTIATE_NTLM2
  NTLMSSP_NEGOTIATE_128
  NTLMSSP_NEGOTIATE_KEY_EXCH
NTLMSSP Sign/Seal - Initialising with flags:
Got NTLMSSP neg_flags=0x60088215
  NTLMSSP_NEGOTIATE_UNICODE
  NTLMSSP_REQUEST_TARGET
  NTLMSSP_NEGOTIATE_SIGN
  NTLMSSP_NEGOTIATE_NTLM
  NTLMSSP_NEGOTIATE_ALWAYS_SIGN
  NTLMSSP_NEGOTIATE_NTLM2
  NTLMSSP_NEGOTIATE_128
  NTLMSSP_NEGOTIATE_KEY_EXCH
Domain=[WORKGROUP] OS=[Unix] Server=[Samba 3.6.12-1.fc17]
 session setup ok
 tconx ok
smb: \ do ls
do: command not found
smb: \ ls
NT_STATUS_ACCESS_DENIED listing \*
smb: \



On Tue, Jul 2, 2013 at 2:08 PM, Ricky Nance ricky.na...@gmail.com wrote:

 Try yum install samba-client as root, then see if that command will work.
 If smbclient works then, it would probably be best to see if we can get a
 packet capture of when you try to access the share from the windows 8
 machine (btw, which version of windows 8 are you running?). Also, does it
 work from windows 8 if you do a start - run - \\192.168.221.32\homes
 instead of \\192.168.221.32\mark ?

 Ricky


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Win8 account sees its home share, but does not have permissions to access

2013-07-01 Thread Dale Schroeder

Mark,

First verify that the posix permissions are good for your home 
directory: ls -lA /home/mark
If those are good, then I would try removing the hosts allow parameter 
in [global].

If that doesn't work, checking the Samba logs is always a good idea.

Dale

On 06/28/2013 6:03 PM, Mark Galeck wrote:

Hello,

I am a beginner to Samba and I RTFMd carefully but cannot get started.

I want to access my user account mark home directory on Linux, with the
same account name on Windows 8.

The user mark has the same password on Linux and Windows 8.  In addition
I did this on Linux


smbpasswd -a mark

and gave the same password.

Following the manuals on samba website I edited the samba configuration
smb.conf file so:

[global]
 hosts allow = ALL
 client signing = no
 # log files split per-machine:
 log file = /var/log/samba/log.%m
 # maximum size of 50KB per log file, then rotate:
 max log size = 50
 security = user

[homes]
 valid users = %S
 read only = No


and successfully started the samba service.

I can then see mark share on that Linux machine from Windows, I can map
it to a drive letter in Windows Explorer, and I also see this:

[root@v64-sw-dev003-mark /]# smbstatus

Samba version 3.6.12-1.fc17
PID Username  Group Machine
---
14678 mark  mark  mark-pc  (192.168.221.76)

Service  pid machine   Connected at
---
mark 14678   mark-pc   Fri Jun 28 15:56:39 2013

No locked files



This all looks very good to me, as Samba server sees my client with the
correct username, Windows machine name and IP address.


YET, when I actually try to double-click on the share in the Windows
Explorer, I get an error dialog:


Windows cannot access \\192.168.221.32\mark
You do not have permission to access \\192.168.221.32\mark\. Contact your
network administrator to request access.


192.168.221.32 is the Linux machine address.

Please, what am I doing wrong??

Thank you,

Mark



--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


[Samba] Win8 account sees its home share, but does not have permissions to access

2013-06-28 Thread Mark Galeck
Hello,

I am a beginner to Samba and I RTFMd carefully but cannot get started.

I want to access my user account mark home directory on Linux, with the
same account name on Windows 8.

The user mark has the same password on Linux and Windows 8.  In addition
I did this on Linux

smbpasswd -a mark

and gave the same password.

Following the manuals on samba website I edited the samba configuration
smb.conf file so:

[global]
hosts allow = ALL
client signing = no
# log files split per-machine:
log file = /var/log/samba/log.%m
# maximum size of 50KB per log file, then rotate:
max log size = 50
security = user

[homes]
valid users = %S
read only = No


and successfully started the samba service.

I can then see mark share on that Linux machine from Windows, I can map
it to a drive letter in Windows Explorer, and I also see this:

[root@v64-sw-dev003-mark /]# smbstatus

Samba version 3.6.12-1.fc17
PID Username  Group Machine
---
14678 mark  mark  mark-pc  (192.168.221.76)

Service  pid machine   Connected at
---
mark 14678   mark-pc   Fri Jun 28 15:56:39 2013

No locked files



This all looks very good to me, as Samba server sees my client with the
correct username, Windows machine name and IP address.


YET, when I actually try to double-click on the share in the Windows
Explorer, I get an error dialog:


Windows cannot access \\192.168.221.32\mark
You do not have permission to access \\192.168.221.32\mark\. Contact your
network administrator to request access.


192.168.221.32 is the Linux machine address.

Please, what am I doing wrong??

Thank you,

Mark
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba