Re: [Samba] Win8 account sees its home share, but "does not have permissions to access"
Being a Debian user, I don't have to deal with selinux; I've got a whole different set of problems. That being said, the 1st topic under troubleshooting in the Samba wiki is selinux. https://wiki.samba.org/index.php/Samba_Troubleshooting Hopefully, you'll find something in there to help you. On 07/03/2013 1:50 PM, Mark Galeck wrote: how do I check this? On Wed, Jul 3, 2013 at 7:18 AM, Dale Schroeder < d...@briannassaladdressing.com> wrote: This being a Red Hat derivative, is selinux configured to allow this? On 07/02/2013 2:54 PM, Mark Galeck wrote: Fedora release 17 (Beefy Miracle) On Tue, Jul 2, 2013 at 12:16 PM, Ricky Nance wrote: Mark, which distro are you running? On Tue, Jul 2, 2013 at 2:00 PM, Mark Galeck wrote: Can you log into the linux machine with the user mark and write files to /home/mark without issue? Certainly. I don't know Samba, but I do know Unix/Linux and as far as I can tell, everything on Linux is working fine, as well as on the Windows 8 side. What is the output of smbclient //localhost/homes -Umark -d5 (then at a smb:\> do ls) ?? Command not found - I can't execute this on Linux. I use /bin/systemctl status smb.service to get status On Tue, Jul 2, 2013 at 11:52 AM, Ricky Nance wrote: Can you log into the linux machine with the user mark and write files to /home/mark without issue? What is the output of smbclient //localhost/homes -Umark -d5 (then at a smb:\> do ls). Just a couple of things I would look at\try. Ricky -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] Win8 account sees its home share, but "does not have permissions to access"
You just did, there are rules there ' unconfined_u:object_r:user_home_dir_t' this leads me to think selinux is your issue, however, I can't say that I have messed around with selinux at all, so maybe someone else can chime in and help you out. You should be able to disable it temporarly just to check. Please refer to the following thread https://ask.fedoraproject.org/question/10507/how-to-disable-fedora-17-selinux/ Thanks, Ricky -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] Win8 account sees its home share, but "does not have permissions to access"
how do I check this? On Wed, Jul 3, 2013 at 7:18 AM, Dale Schroeder < d...@briannassaladdressing.com> wrote: > This being a Red Hat derivative, is selinux configured to allow this? > > > > On 07/02/2013 2:54 PM, Mark Galeck wrote: > >> Fedora release 17 (Beefy Miracle) >> >> >> On Tue, Jul 2, 2013 at 12:16 PM, Ricky Nance >> wrote: >> >> Mark, which distro are you running? >>> >>> >>> On Tue, Jul 2, 2013 at 2:00 PM, Mark Galeck wrote: >>> >>> Can you log into the linux machine with the user mark and write files to > /home/mark without issue? Certainly. I don't know Samba, but I do know Unix/Linux and as far as I can tell, everything on Linux is working fine, as well as on the Windows 8 side. What is the output of smbclient //localhost/homes -Umark -d5 (then at a > smb:\> do ls) ?? Command not found - I can't execute this on Linux. I use > /bin/systemctl status smb.service > to get status On Tue, Jul 2, 2013 at 11:52 AM, Ricky Nance >>> >wrote: Can you log into the linux machine with the user mark and write files > to > /home/mark without issue? What is the output of smbclient > //localhost/homes > -Umark -d5 (then at a smb:\> do ls). Just a couple of things I would > look > at\try. > > Ricky > > > > -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] Win8 account sees its home share, but "does not have permissions to access"
[root@v64-sw-dev003-mark /]# ls -alhZ /home | grep mark drwx--. mark mark unconfined_u:object_r:user_home_dir_t:s0 mark On Wed, Jul 3, 2013 at 6:26 AM, Ricky Nance wrote: > So what is the output of `ls -alhZ /home | grep mark` ? > > Ricky > -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] Win8 account sees its home share, but "does not have permissions to access"
This being a Red Hat derivative, is selinux configured to allow this? On 07/02/2013 2:54 PM, Mark Galeck wrote: Fedora release 17 (Beefy Miracle) On Tue, Jul 2, 2013 at 12:16 PM, Ricky Nance wrote: Mark, which distro are you running? On Tue, Jul 2, 2013 at 2:00 PM, Mark Galeck wrote: Can you log into the linux machine with the user mark and write files to /home/mark without issue? Certainly. I don't know Samba, but I do know Unix/Linux and as far as I can tell, everything on Linux is working fine, as well as on the Windows 8 side. What is the output of smbclient //localhost/homes -Umark -d5 (then at a smb:\> do ls) ?? Command not found - I can't execute this on Linux. I use /bin/systemctl status smb.service to get status On Tue, Jul 2, 2013 at 11:52 AM, Ricky Nance wrote: Can you log into the linux machine with the user mark and write files to /home/mark without issue? What is the output of smbclient //localhost/homes -Umark -d5 (then at a smb:\> do ls). Just a couple of things I would look at\try. Ricky -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] Win8 account sees its home share, but "does not have permissions to access"
So what is the output of `ls -alhZ /home | grep mark` ? Ricky -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] Win8 account sees its home share, but "does not have permissions to access"
>Also, does it work from windows 8 if you do a start -> run -> \\ 192.168.221.32\homes instead of \\192.168.221.32\mark ? No. Same error. The output from smbclient which I now installed, that you requested, is below. Thank you very much Ricky. [root@v64-sw-dev003-mark /]# smbclient //localhost/homes -Umark -d5 INFO: Current debug levels: all: 5 tdb: 5 printdrivers: 5 lanman: 5 smb: 5 rpc_parse: 5 rpc_srv: 5 rpc_cli: 5 passdb: 5 sam: 5 auth: 5 winbind: 5 vfs: 5 idmap: 5 quota: 5 acls: 5 locking: 5 msdfs: 5 dmapi: 5 registry: 5 lp_load_ex: refreshing parameters Initialising global parameters rlimit_max: increasing rlimit_max (1024) to minimum Windows limit (16384) INFO: Current debug levels: all: 5 tdb: 5 printdrivers: 5 lanman: 5 smb: 5 rpc_parse: 5 rpc_srv: 5 rpc_cli: 5 passdb: 5 sam: 5 auth: 5 winbind: 5 vfs: 5 idmap: 5 quota: 5 acls: 5 locking: 5 msdfs: 5 dmapi: 5 registry: 5 params.c:pm_process() - Processing configuration file "/etc/samba/smb.conf" Processing section "[global]" doing parameter client signing = no doing parameter log file = /var/log/samba/log.%m doing parameter max log size = 50 doing parameter security = user pm_process() returned Yes Substituting charset 'UTF-8' for LOCALE added interface eth0 ip=fe80::5054:ff:fe2c:3d38%eth0 bcast=fe80:::::%eth0 netmask=::::: added interface eth0 ip=192.168.221.32 bcast=192.168.221.255 netmask=255.255.254.0 Netbios name list:- my_netbios_names[0]="V64-SW-DEV003-MARK" Client started (version 3.6.12-1.fc17). Enter mark's password: Opening cache file at /var/lib/samba/gencache.tdb Opening cache file at /var/lib/samba/gencache_notrans.tdb sitename_fetch: No stored sitename for no entry for localhost#20 found. resolve_lmhosts: Attempting lmhosts lookup for name localhost<0x20> resolve_lmhosts: Attempting lmhosts lookup for name localhost<0x20> getlmhostsent: lmhost entry: 127.0.0.1 localhost namecache_store: storing 1 address for localhost#20: 127.0.0.1 Connecting to 127.0.0.1 at port 445 Socket options: SO_KEEPALIVE = 0 SO_REUSEADDR = 0 SO_BROADCAST = 0 TCP_NODELAY = 1 TCP_KEEPCNT = 9 TCP_KEEPIDLE = 7200 TCP_KEEPINTVL = 75 IPTOS_LOWDELAY = 0 IPTOS_THROUGHPUT = 0 SO_SNDBUF = 663750 SO_RCVBUF = 262006 SO_SNDLOWAT = 1 SO_RCVLOWAT = 1 SO_SNDTIMEO = 0 SO_RCVTIMEO = 0 TCP_QUICKACK = 1 session request ok Substituting charset 'UTF-8' for LOCALE Doing spnego session setup (blob length=58) got OID=1.3.6.1.4.1.311.2.2.10 got principal=NONE Got challenge flags: Got NTLMSSP neg_flags=0x608a8215 NTLMSSP_NEGOTIATE_UNICODE NTLMSSP_REQUEST_TARGET NTLMSSP_NEGOTIATE_SIGN NTLMSSP_NEGOTIATE_NTLM NTLMSSP_NEGOTIATE_ALWAYS_SIGN NTLMSSP_NEGOTIATE_NTLM2 NTLMSSP_NEGOTIATE_TARGET_INFO NTLMSSP_NEGOTIATE_128 NTLMSSP_NEGOTIATE_KEY_EXCH NTLMSSP: Set final flags: Got NTLMSSP neg_flags=0x60088215 NTLMSSP_NEGOTIATE_UNICODE NTLMSSP_REQUEST_TARGET NTLMSSP_NEGOTIATE_SIGN NTLMSSP_NEGOTIATE_NTLM NTLMSSP_NEGOTIATE_ALWAYS_SIGN NTLMSSP_NEGOTIATE_NTLM2 NTLMSSP_NEGOTIATE_128 NTLMSSP_NEGOTIATE_KEY_EXCH NTLMSSP Sign/Seal - Initialising with flags: Got NTLMSSP neg_flags=0x60088215 NTLMSSP_NEGOTIATE_UNICODE NTLMSSP_REQUEST_TARGET NTLMSSP_NEGOTIATE_SIGN NTLMSSP_NEGOTIATE_NTLM NTLMSSP_NEGOTIATE_ALWAYS_SIGN NTLMSSP_NEGOTIATE_NTLM2 NTLMSSP_NEGOTIATE_128 NTLMSSP_NEGOTIATE_KEY_EXCH Domain=[WORKGROUP] OS=[Unix] Server=[Samba 3.6.12-1.fc17] session setup ok tconx ok smb: \> do ls do: command not found smb: \> ls NT_STATUS_ACCESS_DENIED listing \* smb: \> On Tue, Jul 2, 2013 at 2:08 PM, Ricky Nance wrote: > Try yum install samba-client as root, then see if that command will work. > If smbclient works then, it would probably be best to see if we can get a > packet capture of when you try to access the share from the windows 8 > machine (btw, which version of windows 8 are you running?). Also, does it > work from windows 8 if you do a start -> run -> \\192.168.221.32\homes > instead of \\192.168.221.32\mark ? > > Ricky > > -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] Win8 account sees its home share, but "does not have permissions to access"
Try yum install samba-client as root, then see if that command will work. If smbclient works then, it would probably be best to see if we can get a packet capture of when you try to access the share from the windows 8 machine (btw, which version of windows 8 are you running?). Also, does it work from windows 8 if you do a start -> run -> \\192.168.221.32\homes instead of \\192.168.221.32\mark ? Ricky -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] Win8 account sees its home share, but "does not have permissions to access"
Fedora release 17 (Beefy Miracle) On Tue, Jul 2, 2013 at 12:16 PM, Ricky Nance wrote: > Mark, which distro are you running? > > > On Tue, Jul 2, 2013 at 2:00 PM, Mark Galeck wrote: > >> >Can you log into the linux machine with the user mark and write files to >> /home/mark without issue? >> >> Certainly. I don't know Samba, but I do know Unix/Linux and as far as I >> can tell, everything on Linux is working fine, as well as on the Windows 8 >> side. >> >> >What is the output of smbclient //localhost/homes -Umark -d5 (then at a >> smb:\> do ls) >> >> ?? Command not found - I can't execute this on Linux. I use >> >/bin/systemctl status smb.service >> to get status >> >> >> On Tue, Jul 2, 2013 at 11:52 AM, Ricky Nance wrote: >> >>> Can you log into the linux machine with the user mark and write files to >>> /home/mark without issue? What is the output of smbclient //localhost/homes >>> -Umark -d5 (then at a smb:\> do ls). Just a couple of things I would look >>> at\try. >>> >>> Ricky >>> >> >> > -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] Win8 account sees its home share, but "does not have permissions to access"
Mark, which distro are you running? On Tue, Jul 2, 2013 at 2:00 PM, Mark Galeck wrote: > >Can you log into the linux machine with the user mark and write files to > /home/mark without issue? > > Certainly. I don't know Samba, but I do know Unix/Linux and as far as I > can tell, everything on Linux is working fine, as well as on the Windows 8 > side. > > >What is the output of smbclient //localhost/homes -Umark -d5 (then at a > smb:\> do ls) > > ?? Command not found - I can't execute this on Linux. I use > >/bin/systemctl status smb.service > to get status > > > On Tue, Jul 2, 2013 at 11:52 AM, Ricky Nance wrote: > >> Can you log into the linux machine with the user mark and write files to >> /home/mark without issue? What is the output of smbclient //localhost/homes >> -Umark -d5 (then at a smb:\> do ls). Just a couple of things I would look >> at\try. >> >> Ricky >> > > -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] Win8 account sees its home share, but "does not have permissions to access"
>Can you log into the linux machine with the user mark and write files to /home/mark without issue? Certainly. I don't know Samba, but I do know Unix/Linux and as far as I can tell, everything on Linux is working fine, as well as on the Windows 8 side. >What is the output of smbclient //localhost/homes -Umark -d5 (then at a smb:\> do ls) ?? Command not found - I can't execute this on Linux. I use >/bin/systemctl status smb.service to get status On Tue, Jul 2, 2013 at 11:52 AM, Ricky Nance wrote: > Can you log into the linux machine with the user mark and write files to > /home/mark without issue? What is the output of smbclient //localhost/homes > -Umark -d5 (then at a smb:\> do ls). Just a couple of things I would look > at\try. > > Ricky > -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] Win8 account sees its home share, but "does not have permissions to access"
Can you log into the linux machine with the user mark and write files to /home/mark without issue? What is the output of smbclient //localhost/homes -Umark -d5 (then at a smb:\> do ls). Just a couple of things I would look at\try. Ricky -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] Win8 account sees its home share, but "does not have permissions to access"
Dale, thank you for your help! However... I had already checked all the things you are asking. Permissions are good, I tried without this parameter, and there is not any error indication in the logs. Still the same problem. On Mon, Jul 1, 2013 at 9:11 AM, Dale Schroeder < d...@briannassaladdressing.com> wrote: > Mark, > > First verify that the posix permissions are good for your home directory: > ls -lA /home/mark > If those are good, then I would try removing the hosts allow parameter in > [global]. > If that doesn't work, checking the Samba logs is always a good idea. > > Dale > > > On 06/28/2013 6:03 PM, Mark Galeck wrote: > >> Hello, >> >> I am a beginner to Samba and I RTFMd carefully but cannot get started. >> >> I want to access my user account "mark" home directory on Linux, with the >> same account name on Windows 8. >> >> The user "mark" has the same password on Linux and Windows 8. In addition >> I did this on Linux >> >> smbpasswd -a mark >>> >> and gave the same password. >> >> Following the manuals on samba website I edited the samba configuration >> smb.conf file so: >> >> [global] >> hosts allow = ALL >> client signing = no >> # log files split per-machine: >> log file = /var/log/samba/log.%m >> # maximum size of 50KB per log file, then rotate: >> max log size = 50 >> security = user >> >> [homes] >> valid users = %S >> read only = No >> >> >> and successfully started the samba service. >> >> I can then see "mark" share on that Linux machine from Windows, I can map >> it to a drive letter in Windows Explorer, and I also see this: >> >> [root@v64-sw-dev003-mark /]# smbstatus >> >> Samba version 3.6.12-1.fc17 >> PID Username Group Machine >> --**--**--- >> 14678 mark mark mark-pc (192.168.221.76) >> >> Service pid machine Connected at >> --**- >> mark 14678 mark-pc Fri Jun 28 15:56:39 2013 >> >> No locked files >> >> >> >> This all looks very good to me, as Samba server sees my client with the >> correct username, Windows machine name and IP address. >> >> >> YET, when I actually try to double-click on the share in the Windows >> Explorer, I get an error dialog: >> >> >> Windows cannot access \\192.168.221.32\mark >> You do not have permission to access \\192.168.221.32\mark\. Contact your >> network administrator to request access. >> >> >> 192.168.221.32 is the Linux machine address. >> >> Please, what am I doing wrong?? >> >> Thank you, >> >> Mark >> > > > -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] Win8 account sees its home share, but "does not have permissions to access"
Mark, First verify that the posix permissions are good for your home directory: ls -lA /home/mark If those are good, then I would try removing the hosts allow parameter in [global]. If that doesn't work, checking the Samba logs is always a good idea. Dale On 06/28/2013 6:03 PM, Mark Galeck wrote: Hello, I am a beginner to Samba and I RTFMd carefully but cannot get started. I want to access my user account "mark" home directory on Linux, with the same account name on Windows 8. The user "mark" has the same password on Linux and Windows 8. In addition I did this on Linux smbpasswd -a mark and gave the same password. Following the manuals on samba website I edited the samba configuration smb.conf file so: [global] hosts allow = ALL client signing = no # log files split per-machine: log file = /var/log/samba/log.%m # maximum size of 50KB per log file, then rotate: max log size = 50 security = user [homes] valid users = %S read only = No and successfully started the samba service. I can then see "mark" share on that Linux machine from Windows, I can map it to a drive letter in Windows Explorer, and I also see this: [root@v64-sw-dev003-mark /]# smbstatus Samba version 3.6.12-1.fc17 PID Username Group Machine --- 14678 mark mark mark-pc (192.168.221.76) Service pid machine Connected at --- mark 14678 mark-pc Fri Jun 28 15:56:39 2013 No locked files This all looks very good to me, as Samba server sees my client with the correct username, Windows machine name and IP address. YET, when I actually try to double-click on the share in the Windows Explorer, I get an error dialog: Windows cannot access \\192.168.221.32\mark You do not have permission to access \\192.168.221.32\mark\. Contact your network administrator to request access. 192.168.221.32 is the Linux machine address. Please, what am I doing wrong?? Thank you, Mark -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba