[CentOS] Samba help

2017-11-14 Thread david

Folks

I have a Centos7 system (SOFA) and want to install a Samba share 
named "STUFF" for the machines inside my home.  All users in my home 
have read access to the share, but only one user "me" has write 
permission.  The configuration below worked just fine when the Samba 
system was on Centos 6, but did not work under Centos 7.  The client 
machine is Windows 10.  I have changed all "private" information for 
this message.


The Centos 7 machine is running with SELINUX disabled, and 
effectively without firewall.


Windows network browsing finds the computer, but not the share.  (it 
used to find the share with Centos 6).


The server name is SOFA
The share name is STUFF
the Workgroup name is MYGROUP

The Linux account is "melinux"
The logon name from windows is "me"

I have issued the command
  smbpass -a me



smb.conf contains:
-

# Samba Configuration

[global]
 dns proxy  = no
 hosts allow= 192.168. 127. 10. localhost
 hosts deny = ALL
 log file   = /var/log/samba/%m.log
 max log size   = 50
 netbios name   = SOFA
 printcap name  = /dev/null
 printing   = bsd
 security   = user
 server string  = Samba %v on sofa
 socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
 username map   = /etc/samba/smbusers
 winbind use default domain = no
 workgroup  = MYGROUP
[STUFF]
 browsable  = yes
 case sensitive = no
 comment= STUFF on sofa
 create mask= 0755
 directory mask = 0755
 force user = melinux
 guest ok   = yes
 path   = /home/samba-share
 write list = melinux

--

smbusers contains:
--

melinux = me

--

Where have I gone wrong?  What changed from C6 to C7.  Any advice 
would be appreciated.


David




___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Samba help

2017-11-14 Thread Albert McCann
> -Original Message-
> From: CentOS [mailto:centos-boun...@centos.org] On Behalf Of david
> Sent: Tuesday, November 14, 2017 9:11 PM
> To: CentOS mailing list 
> Subject: [CentOS] Samba help
> 
> Folks
> 
> I have a Centos7 system (SOFA) and want to install a Samba share
> named "STUFF" for the machines inside my home.  All users in my home
> have read access to the share, but only one user "me" has write
> permission.  The configuration below worked just fine when the Samba
> system was on Centos 6, but did not work under Centos 7.  The client
> machine is Windows 10.  I have changed all "private" information for
> this message.
> 
> The Centos 7 machine is running with SELINUX disabled, and
> effectively without firewall.
> 
> Windows network browsing finds the computer, but not the share.  (it
> used to find the share with Centos 6).
> 
> The server name is SOFA
> The share name is STUFF
> the Workgroup name is MYGROUP
> 
> The Linux account is "melinux"
> The logon name from windows is "me"
> 
> I have issued the command
>smbpass -a me
>  
>  
> 
> smb.conf contains:
> -
> 
> # Samba Configuration
> 
> [global]
>   dns proxy  = no
>   hosts allow= 192.168. 127. 10. localhost
>   hosts deny = ALL
>   log file   = /var/log/samba/%m.log
>   max log size   = 50
>   netbios name   = SOFA
>   printcap name  = /dev/null
>   printing   = bsd
>   security   = user
>   server string  = Samba %v on sofa
>   socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
>   username map   = /etc/samba/smbusers
>   winbind use default domain = no
>   workgroup  = MYGROUP
> [STUFF]
>   browsable  = yes
>   case sensitive = no
>   comment= STUFF on sofa
>   create mask= 0755
>   directory mask = 0755
>   force user = melinux
>   guest ok   = yes
>   path   = /home/samba-share
>   write list = melinux
> 
> --
> 
> smbusers contains:
> --
> 
> melinux = me
> 
> --
> 
> Where have I gone wrong?  What changed from C6 to C7.  Any advice
> would be appreciated.
> 
> David

See if adding these under [global] helps in smb.conf:

server max protocol = SMB3
client signing = required
max protocol = SMB2
server signing = auto
client use spnego = no
client ntlmv2 auth = no
client ipc max protocol = NT1
client ipc signing = auto
idmap config * : backend = tdb

These are what I added when upgrading from C5's Samba 3 to C7's Samba 4.

Also, one of the recent Windows updates may have disabled SMBv1, here that 
caused the inability to 'browse' the server shares
(yet mapping a share still worked).

On Windows 7 to enable SMBv1 on the SMB client (workstations), run the 
following commands:

sc.exe config lanmanworkstation depend= bowser/mrxsmb10/mrxsmb20/nsi
sc.exe config mrxsmb10 start= auto

I don't know if they will work on Windows 10 or not.

Al
___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Samba help

2017-11-14 Thread John R Pierce

On 11/14/2017 6:41 PM, Albert McCann wrote:

See if adding these under [global] helps in smb.conf:

server max protocol = SMB3
client signing = required
max protocol = SMB2
server signing = auto
client use spnego = no
client ntlmv2 auth = no
client ipc max protocol = NT1
client ipc signing = auto
idmap config * : backend = tdb

These are what I added when upgrading from C5's Samba 3 to C7's Samba 4.



if you're coming from C6, I do believe I'd add these one at a time, as 
C5 was *way* older.


in particular, I suspect 'max protocol = SMB2' isn't going to play well 
with win10.



--
john r pierce, recycling bits in santa cruz

___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Samba help

2017-11-15 Thread Jose Maria Terry Jimenez

El 15/11/17 a las 3:11, david escribió:


Folks

I have a Centos7 system (SOFA) and want to install a Samba share named 
"STUFF" for the machines inside my home.  All users in my home have 
read access to the share, but only one user "me" has write 
permission.  The configuration below worked just fine when the Samba 
system was on Centos 6, but did not work under Centos 7.  The client 
machine is Windows 10.  I have changed all "private" information for 
this message.


The Centos 7 machine is running with SELINUX disabled, and effectively 
without firewall.


Windows network browsing finds the computer, but not the share. (it 
used to find the share with Centos 6).


The server name is SOFA
The share name is STUFF
the Workgroup name is MYGROUP

The Linux account is "melinux"
The logon name from windows is "me"

I have issued the command
  smbpass -a me
    
    

smb.conf contains:
-

# Samba Configuration

[global]
 dns proxy  = no
 hosts allow    = 192.168. 127. 10. localhost
 hosts deny = ALL
 log file   = /var/log/samba/%m.log
 max log size   = 50
 netbios name   = SOFA
 printcap name  = /dev/null
 printing   = bsd
 security   = user
 server string  = Samba %v on sofa
 socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
 username map   = /etc/samba/smbusers
 winbind use default domain = no
 workgroup  = MYGROUP
[STUFF]
 browsable  = yes
 case sensitive = no
 comment    = STUFF on sofa
 create mask    = 0755
 directory mask = 0755
 force user = melinux
 guest ok   = yes
 path   = /home/samba-share
 write list = melinux

--

smbusers contains:
--

melinux = me

--

Where have I gone wrong?  What changed from C6 to C7.  Any advice 
would be appreciated.


David


Is the path right? The permissions/owner/group are correct for your users?

Once i got fool looking for a similar problem and the share path was wrong!
___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Samba help

2017-11-15 Thread david

At 02:51 AM 11/15/2017, you wrote:

El 15/11/17 a las 3:11, david escribió:


Folks

I have a Centos7 system (SOFA) and want to 
install a Samba share named "STUFF" for the 
machines inside my home.  All users in my home 
have read access to the share, but only one 
user "me" has write permission.  The 
configuration below worked just fine when the 
Samba system was on Centos 6, but did not work 
under Centos 7.  The client machine is Windows 
10.  I have changed all "private" information for this message.


The Centos 7 machine is running with SELINUX 
disabled, and effectively without firewall.


Windows network browsing finds the computer, 
but not the share. (it used to find the share with Centos 6).


The server name is SOFA
The share name is STUFF
the Workgroup name is MYGROUP

The Linux account is "melinux"
The logon name from windows is "me"

I have issued the command
  smbpass -a me
    
    

smb.conf contains:
-

# Samba Configuration

[global]
 dns proxy                  = no
 hosts allow                = 192.168. 127. 10. localhost
 hosts deny                 = ALL
 log file                   = /var/log/samba/%m.log
 max log size               = 50
 netbios name               = SOFA
 printcap name              = /dev/null
 printing                   = bsd
 security                   = user
 server string              = Samba %v on sofa
 socket options             = 
TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192

 username map               = /etc/samba/smbusers
 winbind use default domain = no
 workgroup                  = MYGROUP
[STUFF]
 browsable      = yes
 case sensitive = no
 comment        = STUFF on sofa
 create mask    = 0755
 directory mask = 0755
 force user     = melinux
 guest ok       = yes
 path           = /home/samba-share
 write list     = melinux

--

smbusers contains:
--

melinux = me

--

Where have I gone wrong?  What changed from C6 
to C7.  Any advice would be appreciated.


David

Is the path right? The permissions/owner/group are correct for your users?

Once i got fool looking for a similar problem and the share path was wrong!
___



I have verified the owner/group settings on the 
share.  The directory (/home/samba-share) is 
drwxr-xr-x and owned by melinux and the melinux 
group.  There is a file in that directory, with 
permissions -rwxr--r-- and the same 
owner/group.  I suspect that's not the problem.


David 


___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Samba help

2017-11-15 Thread Gordon Messmer

On 11/14/2017 06:11 PM, david wrote:

# Samba Configuration
[global]
[STUFF]
 force user = melinux
 guest ok   = yes
 path   = /home/samba-share
 write list = melinux 


You may need to enable the samba_enable_home_dirs option:
    setsebool -P samba_enable_home_dirs=1

You might also want to double check that you haven't given write access 
to everyone.  I'm mostly sure that forcing the user to "melinux" and 
adding that user to the write list will give write access to everyone.

___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos