Re: [Samba] Win8 account sees its home share, but "does not have permissions to access"

2013-07-04 Thread Dale Schroeder
Being a Debian user, I don't have to deal with selinux; I've got a whole 
different set of problems. That being said, the 1st topic under 
troubleshooting in the Samba wiki is selinux.


https://wiki.samba.org/index.php/Samba_Troubleshooting

Hopefully, you'll find something in there to help you.


On 07/03/2013 1:50 PM, Mark Galeck wrote:

how do I check this?


On Wed, Jul 3, 2013 at 7:18 AM, Dale Schroeder <
d...@briannassaladdressing.com> wrote:


This being a Red Hat derivative, is selinux configured to allow this?



On 07/02/2013 2:54 PM, Mark Galeck wrote:


Fedora release 17 (Beefy Miracle)


On Tue, Jul 2, 2013 at 12:16 PM, Ricky Nance 
wrote:

  Mark, which distro are you running?


On Tue, Jul 2, 2013 at 2:00 PM, Mark Galeck  wrote:

  Can you log into the linux machine with the user mark and write files to

/home/mark without issue?

Certainly. I don't know Samba, but I do know Unix/Linux and as far as I
can tell, everything on Linux is working fine, as well as on the
Windows 8
side.

  What is the output of smbclient //localhost/homes -Umark -d5 (then at a
smb:\> do ls)

??  Command not found - I can't execute this on Linux.  I use


/bin/systemctl status smb.service


to get status


On Tue, Jul 2, 2013 at 11:52 AM, Ricky Nance 
wrote:

  Can you log into the linux machine with the user mark and write files

to
/home/mark without issue? What is the output of smbclient
//localhost/homes
-Umark -d5 (then at a smb:\> do ls). Just a couple of things I would
look
at\try.

Ricky







--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Win8 account sees its home share, but "does not have permissions to access"

2013-07-03 Thread Ricky Nance
You just did, there are rules there ' unconfined_u:object_r:user_home_dir_t'
this leads me to think selinux is your issue, however, I can't say that I
have messed around with selinux at all, so maybe someone else can chime in
and help you out. You should be able to disable it temporarly just to
check. Please refer to the following thread
https://ask.fedoraproject.org/question/10507/how-to-disable-fedora-17-selinux/

Thanks,
Ricky
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Win8 account sees its home share, but "does not have permissions to access"

2013-07-03 Thread Mark Galeck
how do I check this?


On Wed, Jul 3, 2013 at 7:18 AM, Dale Schroeder <
d...@briannassaladdressing.com> wrote:

> This being a Red Hat derivative, is selinux configured to allow this?
>
>
>
> On 07/02/2013 2:54 PM, Mark Galeck wrote:
>
>> Fedora release 17 (Beefy Miracle)
>>
>>
>> On Tue, Jul 2, 2013 at 12:16 PM, Ricky Nance 
>> wrote:
>>
>>  Mark, which distro are you running?
>>>
>>>
>>> On Tue, Jul 2, 2013 at 2:00 PM, Mark Galeck  wrote:
>>>
>>>  Can you log into the linux machine with the user mark and write files to
>
 /home/mark without issue?

 Certainly. I don't know Samba, but I do know Unix/Linux and as far as I
 can tell, everything on Linux is working fine, as well as on the
 Windows 8
 side.

  What is the output of smbclient //localhost/homes -Umark -d5 (then at a
>
 smb:\> do ls)

 ??  Command not found - I can't execute this on Linux.  I use

> /bin/systemctl status smb.service
>
 to get status


 On Tue, Jul 2, 2013 at 11:52 AM, Ricky Nance >>> >wrote:

  Can you log into the linux machine with the user mark and write files
> to
> /home/mark without issue? What is the output of smbclient
> //localhost/homes
> -Umark -d5 (then at a smb:\> do ls). Just a couple of things I would
> look
> at\try.
>
> Ricky
>
>

>
>
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Win8 account sees its home share, but "does not have permissions to access"

2013-07-03 Thread Mark Galeck
[root@v64-sw-dev003-mark /]# ls -alhZ /home | grep mark
drwx--. mark mark unconfined_u:object_r:user_home_dir_t:s0 mark




On Wed, Jul 3, 2013 at 6:26 AM, Ricky Nance  wrote:

> So what is the output of `ls -alhZ /home | grep mark` ?
>
> Ricky
>
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Win8 account sees its home share, but "does not have permissions to access"

2013-07-03 Thread Dale Schroeder

This being a Red Hat derivative, is selinux configured to allow this?


On 07/02/2013 2:54 PM, Mark Galeck wrote:

Fedora release 17 (Beefy Miracle)


On Tue, Jul 2, 2013 at 12:16 PM, Ricky Nance  wrote:


Mark, which distro are you running?


On Tue, Jul 2, 2013 at 2:00 PM, Mark Galeck  wrote:


Can you log into the linux machine with the user mark and write files to

/home/mark without issue?

Certainly. I don't know Samba, but I do know Unix/Linux and as far as I
can tell, everything on Linux is working fine, as well as on the Windows 8
side.


What is the output of smbclient //localhost/homes -Umark -d5 (then at a

smb:\> do ls)

??  Command not found - I can't execute this on Linux.  I use

/bin/systemctl status smb.service

to get status


On Tue, Jul 2, 2013 at 11:52 AM, Ricky Nance wrote:


Can you log into the linux machine with the user mark and write files to
/home/mark without issue? What is the output of smbclient //localhost/homes
-Umark -d5 (then at a smb:\> do ls). Just a couple of things I would look
at\try.

Ricky






--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Win8 account sees its home share, but "does not have permissions to access"

2013-07-03 Thread Ricky Nance
So what is the output of `ls -alhZ /home | grep mark` ?

Ricky
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Win8 account sees its home share, but "does not have permissions to access"

2013-07-02 Thread Mark Galeck
>Also, does it work from windows 8 if you do a start -> run -> \\
192.168.221.32\homes instead of \\192.168.221.32\mark ?

No. Same error.

The output from smbclient which I now installed, that you requested, is
below.

Thank you very much Ricky.

[root@v64-sw-dev003-mark /]# smbclient //localhost/homes -Umark -d5
INFO: Current debug levels:
  all: 5
  tdb: 5
  printdrivers: 5
  lanman: 5
  smb: 5
  rpc_parse: 5
  rpc_srv: 5
  rpc_cli: 5
  passdb: 5
  sam: 5
  auth: 5
  winbind: 5
  vfs: 5
  idmap: 5
  quota: 5
  acls: 5
  locking: 5
  msdfs: 5
  dmapi: 5
  registry: 5
lp_load_ex: refreshing parameters
Initialising global parameters
rlimit_max: increasing rlimit_max (1024) to minimum Windows limit (16384)
INFO: Current debug levels:
  all: 5
  tdb: 5
  printdrivers: 5
  lanman: 5
  smb: 5
  rpc_parse: 5
  rpc_srv: 5
  rpc_cli: 5
  passdb: 5
  sam: 5
  auth: 5
  winbind: 5
  vfs: 5
  idmap: 5
  quota: 5
  acls: 5
  locking: 5
  msdfs: 5
  dmapi: 5
  registry: 5
params.c:pm_process() - Processing configuration file "/etc/samba/smb.conf"
Processing section "[global]"
doing parameter client signing = no
doing parameter log file = /var/log/samba/log.%m
doing parameter max log size = 50
doing parameter security = user
pm_process() returned Yes
Substituting charset 'UTF-8' for LOCALE
added interface eth0 ip=fe80::5054:ff:fe2c:3d38%eth0
bcast=fe80:::::%eth0 netmask=:::::
added interface eth0 ip=192.168.221.32 bcast=192.168.221.255
netmask=255.255.254.0
Netbios name list:-
my_netbios_names[0]="V64-SW-DEV003-MARK"
Client started (version 3.6.12-1.fc17).
Enter mark's password:
Opening cache file at /var/lib/samba/gencache.tdb
Opening cache file at /var/lib/samba/gencache_notrans.tdb
sitename_fetch: No stored sitename for
no entry for localhost#20 found.
resolve_lmhosts: Attempting lmhosts lookup for name localhost<0x20>
resolve_lmhosts: Attempting lmhosts lookup for name localhost<0x20>
getlmhostsent: lmhost entry: 127.0.0.1 localhost
namecache_store: storing 1 address for localhost#20: 127.0.0.1
Connecting to 127.0.0.1 at port 445
Socket options:
SO_KEEPALIVE = 0
SO_REUSEADDR = 0
SO_BROADCAST = 0
TCP_NODELAY = 1
TCP_KEEPCNT = 9
TCP_KEEPIDLE = 7200
TCP_KEEPINTVL = 75
IPTOS_LOWDELAY = 0
IPTOS_THROUGHPUT = 0
SO_SNDBUF = 663750
SO_RCVBUF = 262006
SO_SNDLOWAT = 1
SO_RCVLOWAT = 1
SO_SNDTIMEO = 0
SO_RCVTIMEO = 0
TCP_QUICKACK = 1
 session request ok
Substituting charset 'UTF-8' for LOCALE
Doing spnego session setup (blob length=58)
got OID=1.3.6.1.4.1.311.2.2.10
got principal=NONE
Got challenge flags:
Got NTLMSSP neg_flags=0x608a8215
  NTLMSSP_NEGOTIATE_UNICODE
  NTLMSSP_REQUEST_TARGET
  NTLMSSP_NEGOTIATE_SIGN
  NTLMSSP_NEGOTIATE_NTLM
  NTLMSSP_NEGOTIATE_ALWAYS_SIGN
  NTLMSSP_NEGOTIATE_NTLM2
  NTLMSSP_NEGOTIATE_TARGET_INFO
  NTLMSSP_NEGOTIATE_128
  NTLMSSP_NEGOTIATE_KEY_EXCH
NTLMSSP: Set final flags:
Got NTLMSSP neg_flags=0x60088215
  NTLMSSP_NEGOTIATE_UNICODE
  NTLMSSP_REQUEST_TARGET
  NTLMSSP_NEGOTIATE_SIGN
  NTLMSSP_NEGOTIATE_NTLM
  NTLMSSP_NEGOTIATE_ALWAYS_SIGN
  NTLMSSP_NEGOTIATE_NTLM2
  NTLMSSP_NEGOTIATE_128
  NTLMSSP_NEGOTIATE_KEY_EXCH
NTLMSSP Sign/Seal - Initialising with flags:
Got NTLMSSP neg_flags=0x60088215
  NTLMSSP_NEGOTIATE_UNICODE
  NTLMSSP_REQUEST_TARGET
  NTLMSSP_NEGOTIATE_SIGN
  NTLMSSP_NEGOTIATE_NTLM
  NTLMSSP_NEGOTIATE_ALWAYS_SIGN
  NTLMSSP_NEGOTIATE_NTLM2
  NTLMSSP_NEGOTIATE_128
  NTLMSSP_NEGOTIATE_KEY_EXCH
Domain=[WORKGROUP] OS=[Unix] Server=[Samba 3.6.12-1.fc17]
 session setup ok
 tconx ok
smb: \> do ls
do: command not found
smb: \> ls
NT_STATUS_ACCESS_DENIED listing \*
smb: \>



On Tue, Jul 2, 2013 at 2:08 PM, Ricky Nance  wrote:

> Try yum install samba-client as root, then see if that command will work.
> If smbclient works then, it would probably be best to see if we can get a
> packet capture of when you try to access the share from the windows 8
> machine (btw, which version of windows 8 are you running?). Also, does it
> work from windows 8 if you do a start -> run -> \\192.168.221.32\homes
> instead of \\192.168.221.32\mark ?
>
> Ricky
>
>
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Win8 account sees its home share, but "does not have permissions to access"

2013-07-02 Thread Ricky Nance
Try yum install samba-client as root, then see if that command will work.
If smbclient works then, it would probably be best to see if we can get a
packet capture of when you try to access the share from the windows 8
machine (btw, which version of windows 8 are you running?). Also, does it
work from windows 8 if you do a start -> run -> \\192.168.221.32\homes
instead of \\192.168.221.32\mark ?

Ricky
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Win8 account sees its home share, but "does not have permissions to access"

2013-07-02 Thread Mark Galeck
Fedora release 17 (Beefy Miracle)


On Tue, Jul 2, 2013 at 12:16 PM, Ricky Nance  wrote:

> Mark, which distro are you running?
>
>
> On Tue, Jul 2, 2013 at 2:00 PM, Mark Galeck  wrote:
>
>> >Can you log into the linux machine with the user mark and write files to
>> /home/mark without issue?
>>
>> Certainly. I don't know Samba, but I do know Unix/Linux and as far as I
>> can tell, everything on Linux is working fine, as well as on the Windows 8
>> side.
>>
>> >What is the output of smbclient //localhost/homes -Umark -d5 (then at a
>> smb:\> do ls)
>>
>> ??  Command not found - I can't execute this on Linux.  I use
>> >/bin/systemctl status smb.service
>> to get status
>>
>>
>> On Tue, Jul 2, 2013 at 11:52 AM, Ricky Nance wrote:
>>
>>> Can you log into the linux machine with the user mark and write files to
>>> /home/mark without issue? What is the output of smbclient //localhost/homes
>>> -Umark -d5 (then at a smb:\> do ls). Just a couple of things I would look
>>> at\try.
>>>
>>> Ricky
>>>
>>
>>
>
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Win8 account sees its home share, but "does not have permissions to access"

2013-07-02 Thread Ricky Nance
Mark, which distro are you running?


On Tue, Jul 2, 2013 at 2:00 PM, Mark Galeck  wrote:

> >Can you log into the linux machine with the user mark and write files to
> /home/mark without issue?
>
> Certainly. I don't know Samba, but I do know Unix/Linux and as far as I
> can tell, everything on Linux is working fine, as well as on the Windows 8
> side.
>
> >What is the output of smbclient //localhost/homes -Umark -d5 (then at a
> smb:\> do ls)
>
> ??  Command not found - I can't execute this on Linux.  I use
> >/bin/systemctl status smb.service
> to get status
>
>
> On Tue, Jul 2, 2013 at 11:52 AM, Ricky Nance wrote:
>
>> Can you log into the linux machine with the user mark and write files to
>> /home/mark without issue? What is the output of smbclient //localhost/homes
>> -Umark -d5 (then at a smb:\> do ls). Just a couple of things I would look
>> at\try.
>>
>> Ricky
>>
>
>
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Win8 account sees its home share, but "does not have permissions to access"

2013-07-02 Thread Mark Galeck
>Can you log into the linux machine with the user mark and write files to
/home/mark without issue?

Certainly. I don't know Samba, but I do know Unix/Linux and as far as I can
tell, everything on Linux is working fine, as well as on the Windows 8 side.

>What is the output of smbclient //localhost/homes -Umark -d5 (then at a
smb:\> do ls)

??  Command not found - I can't execute this on Linux.  I use
>/bin/systemctl status smb.service
to get status


On Tue, Jul 2, 2013 at 11:52 AM, Ricky Nance  wrote:

> Can you log into the linux machine with the user mark and write files to
> /home/mark without issue? What is the output of smbclient //localhost/homes
> -Umark -d5 (then at a smb:\> do ls). Just a couple of things I would look
> at\try.
>
> Ricky
>
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Win8 account sees its home share, but "does not have permissions to access"

2013-07-02 Thread Ricky Nance
Can you log into the linux machine with the user mark and write files to
/home/mark without issue? What is the output of smbclient //localhost/homes
-Umark -d5 (then at a smb:\> do ls). Just a couple of things I would look
at\try.

Ricky
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Win8 account sees its home share, but "does not have permissions to access"

2013-07-02 Thread Mark Galeck
Dale, thank you for your help!  However...

I had already checked all the things you are asking.  Permissions are good,
I tried without this parameter, and there is not any error indication in
the logs.  Still the same problem.


On Mon, Jul 1, 2013 at 9:11 AM, Dale Schroeder <
d...@briannassaladdressing.com> wrote:

> Mark,
>
> First verify that the posix permissions are good for your home directory:
> ls -lA /home/mark
> If those are good, then I would try removing the hosts allow parameter in
> [global].
> If that doesn't work, checking the Samba logs is always a good idea.
>
> Dale
>
>
> On 06/28/2013 6:03 PM, Mark Galeck wrote:
>
>> Hello,
>>
>> I am a beginner to Samba and I RTFMd carefully but cannot get started.
>>
>> I want to access my user account "mark" home directory on Linux, with the
>> same account name on Windows 8.
>>
>> The user "mark" has the same password on Linux and Windows 8.  In addition
>> I did this on Linux
>>
>>  smbpasswd -a mark
>>>
>> and gave the same password.
>>
>> Following the manuals on samba website I edited the samba configuration
>> smb.conf file so:
>>
>> [global]
>>  hosts allow = ALL
>>  client signing = no
>>  # log files split per-machine:
>>  log file = /var/log/samba/log.%m
>>  # maximum size of 50KB per log file, then rotate:
>>  max log size = 50
>>  security = user
>>
>> [homes]
>>  valid users = %S
>>  read only = No
>>
>>
>> and successfully started the samba service.
>>
>> I can then see "mark" share on that Linux machine from Windows, I can map
>> it to a drive letter in Windows Explorer, and I also see this:
>>
>> [root@v64-sw-dev003-mark /]# smbstatus
>>
>> Samba version 3.6.12-1.fc17
>> PID Username  Group Machine
>> --**--**---
>> 14678 mark  mark  mark-pc  (192.168.221.76)
>>
>> Service  pid machine   Connected at
>> --**-
>> mark 14678   mark-pc   Fri Jun 28 15:56:39 2013
>>
>> No locked files
>>
>>
>>
>> This all looks very good to me, as Samba server sees my client with the
>> correct username, Windows machine name and IP address.
>>
>>
>> YET, when I actually try to double-click on the share in the Windows
>> Explorer, I get an error dialog:
>>
>>
>> Windows cannot access \\192.168.221.32\mark
>> You do not have permission to access \\192.168.221.32\mark\. Contact your
>> network administrator to request access.
>>
>>
>> 192.168.221.32 is the Linux machine address.
>>
>> Please, what am I doing wrong??
>>
>> Thank you,
>>
>> Mark
>>
>
>
>
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Win8 account sees its home share, but "does not have permissions to access"

2013-07-01 Thread Dale Schroeder

Mark,

First verify that the posix permissions are good for your home 
directory: ls -lA /home/mark
If those are good, then I would try removing the hosts allow parameter 
in [global].

If that doesn't work, checking the Samba logs is always a good idea.

Dale

On 06/28/2013 6:03 PM, Mark Galeck wrote:

Hello,

I am a beginner to Samba and I RTFMd carefully but cannot get started.

I want to access my user account "mark" home directory on Linux, with the
same account name on Windows 8.

The user "mark" has the same password on Linux and Windows 8.  In addition
I did this on Linux


smbpasswd -a mark

and gave the same password.

Following the manuals on samba website I edited the samba configuration
smb.conf file so:

[global]
 hosts allow = ALL
 client signing = no
 # log files split per-machine:
 log file = /var/log/samba/log.%m
 # maximum size of 50KB per log file, then rotate:
 max log size = 50
 security = user

[homes]
 valid users = %S
 read only = No


and successfully started the samba service.

I can then see "mark" share on that Linux machine from Windows, I can map
it to a drive letter in Windows Explorer, and I also see this:

[root@v64-sw-dev003-mark /]# smbstatus

Samba version 3.6.12-1.fc17
PID Username  Group Machine
---
14678 mark  mark  mark-pc  (192.168.221.76)

Service  pid machine   Connected at
---
mark 14678   mark-pc   Fri Jun 28 15:56:39 2013

No locked files



This all looks very good to me, as Samba server sees my client with the
correct username, Windows machine name and IP address.


YET, when I actually try to double-click on the share in the Windows
Explorer, I get an error dialog:


Windows cannot access \\192.168.221.32\mark
You do not have permission to access \\192.168.221.32\mark\. Contact your
network administrator to request access.


192.168.221.32 is the Linux machine address.

Please, what am I doing wrong??

Thank you,

Mark



--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


[Samba] Win8 account sees its home share, but "does not have permissions to access"

2013-06-28 Thread Mark Galeck
Hello,

I am a beginner to Samba and I RTFMd carefully but cannot get started.

I want to access my user account "mark" home directory on Linux, with the
same account name on Windows 8.

The user "mark" has the same password on Linux and Windows 8.  In addition
I did this on Linux

>smbpasswd -a mark

and gave the same password.

Following the manuals on samba website I edited the samba configuration
smb.conf file so:

[global]
hosts allow = ALL
client signing = no
# log files split per-machine:
log file = /var/log/samba/log.%m
# maximum size of 50KB per log file, then rotate:
max log size = 50
security = user

[homes]
valid users = %S
read only = No


and successfully started the samba service.

I can then see "mark" share on that Linux machine from Windows, I can map
it to a drive letter in Windows Explorer, and I also see this:

[root@v64-sw-dev003-mark /]# smbstatus

Samba version 3.6.12-1.fc17
PID Username  Group Machine
---
14678 mark  mark  mark-pc  (192.168.221.76)

Service  pid machine   Connected at
---
mark 14678   mark-pc   Fri Jun 28 15:56:39 2013

No locked files



This all looks very good to me, as Samba server sees my client with the
correct username, Windows machine name and IP address.


YET, when I actually try to double-click on the share in the Windows
Explorer, I get an error dialog:


Windows cannot access \\192.168.221.32\mark
You do not have permission to access \\192.168.221.32\mark\. Contact your
network administrator to request access.


192.168.221.32 is the Linux machine address.

Please, what am I doing wrong??

Thank you,

Mark
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba