[Samba] Error was Permission denied

[david rankin]

>From: "Dan" <dmisc at charter.net>
>
> David,
>
>      I run 'smbpasswd -a dsmith' and also 'smbpasswd -a dan'.  I created a 
> user dan because I thought that would maybe get it working, but it didn't 
> help.  With the creation of 'dan' the user on Windows and Linux are the 
> same.  Under map network drive you can specify a different user to login 
> and as and I have tried both dsmith and dan.  I have put a line 'username 
> = dsmith' in the dan share and that didn't help either.  I have also 
> added both dan and dsmith to valid users, still didn't help.  I tried 
> changing security from 'user' to 'share' that didn't help.  In fact I can 
> see 'dan on samba server (localhost)' under 'My Network Places' .  However 
> I don't seem to be able to get to the files.
>
> All the best,
> Dan
>

Dan,

    Don't fret. Samba is really a "fire and forget" solution. It works every 
time and there are no tricks -- really. I've used it since 2.02 on mandrake 
7.2 since '01 and it simply -- just works. If you have created a smbpasswd 
entry for dan or dsmith, then that is no longer the problem.

    You say you are running Samba 3.0.23a-1.FC5.1 so the SID/GID problem 
with 3.0.23b shouldn't be your problem. (it is being worked and a patch is 
out). You have posted your smb.conf, and I don't see any problems with it. 
But, .... I don't know why you have "username = dsmith" in you share, ... it 
might be right, I just don't know.

    First, here is my global settings:

[global]
        workgroup = RB_LAW
        server string = Samba %v
        map to guest = Bad User
        log level = 10
        log file = /var/log/samba/log.%m
        max log size = 50
        name resolve order = wins lmhosts bcast
        time server = Yes
        socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
        printcap name = cups
        show add printer wizard = No
        os level = 60
        preferred master = Yes
        domain master = Yes
        dns proxy = No
        wins support = Yes
        hosts allow = 192.168.7., 192.168.6., 127., 66.76.63.60

    Second, here is the way I do all my shares:

[skyline]
        comment = Skyline Share
        path = /home/samba/skyline
        valid users = @skyline     # (this is just an /etc/group group that 
has the users I want to have access to the share.)
        admin users = david        # (me obviously)
        force group = skyline
        read only = No
        inherit permissions = Yes

    Here is the holy grail for diagnosing where the problem is: 
http://us5.samba.org/samba/docs/man/Samba-HOWTO-Collection/diagnosis.html 
The only thing that jumps out at me is your username= entry in the share.

    You can ping each maching right?? (by name and IP)(since you're using 
the IP in your smbclient test I presume this is OK) Your name resolution is 
working right?? (/etc/hosts; etc/resolve.conf or bind/dhcpd/dhcpcd)

    Just a shot in the dark, but what does "route -n" show??

    Your "smith" workgroup is right on both machines -- right??

    From XP can you use "windows explorer" to browse "My Network Places" -> 
"Entire Network" -> "smith" and see both computers?? And, if so, you can 
open the linux box and see the "dan" share -- right?

    That's about is for my guesswork......... Really, work the 
diagnosis.html steps and report back which step gives you the problem.....

    OH, ONE LAST STUPID GUESS, YOU ARE RESTARTING SMB AND NMB AFTER YOU 
CHANGE THE SMB.CONF FILE RIGHT???? "/etc/rc.d/init.d/smb restart" and 
"/etc/rc.d/init.d/nmb restart" (I don't know if FC splits them like SuSE or 
combines the init like RH/Mandriva)

    Good Luck -- Report back.......


> At 06:35 AM 8/25/2006, you wrote:
>
>>Dan,
>>
>>    A guess, but back to the basics:
>>
>>(1) have you created an entry in the smbpasswd file for yourself? I 
>>presume your username on the linux box is 'dsmith.' So have you run 
>>'smbpasswd -a dsmith' ?
>>(2) is your XP login name and password the same as it is on the linux box?
>>(3) you can always add 'valid users = dsmith' to your dan share
>>
>>These are only educated guesses.
>>
>>> Dan wrote:
>>>Samba version  Samba 3.0.23a-1.FC5.1
>>>Linux Fedora 5 (localhost)  User: dsmith  192.168.1.104
>>>Windows XP SP2 with lastest updates (T2385) User: dan  192.168.1.100
>>>Linksys 8 port router
>>>
>>>I have tried a few days on an off to get samba to work, but need some 
>>>help.
>>>
>>>I found a couple problems with the checklist and fixed them.  A couple 
>>>problems I wasn't able to solve.
>>>Here are the problems:
>>>1)
>>>smbclient //192.168.1.104/dan -Udsmith
>>>tree connect failed: NT_STATUS_BAD_NETWORK_NAME
>>>smbpasswd is set, both dsmith and dan
>>>testparm runs fine  I have cleared allow hosts, specified allow hosts, 
>>>etc.
>>>Have disable both firewalls, Linux and Windows.
>>>2)
>>>nmblookup -d 2 '*'
>>>Linux box responds fine. Never have got a response from Windows.
>>>3)
>>>cat T2385.log
>>>[2006/08/20 01:33:26, 0] smbd/service.c:make_connection_snum (911)
>>>'/home/dsmith' does not exist or permission denied when connecting to 
>>>[dan]
>>>Error was Permission denied
>>>I have changed permissions on /home and /dsmith to 777.  It didn't help
>>>I created a user dan.  It didn't help.
>>>On Windows I'm using map network drive. Y:  //192.168.1.104/dan
>>>I use login as different user:  dsmith and password
>>>
>>>Here is smb.conf
>>># Samba config file created using SWAT
>>># from 127.0.0.1 (127.0.0.1)
>>># Date: 2006/08/19 23:38:24
>>>
>>>[global]
>>>         workgroup = SMITH
>>>         server string = Samba Server
>>>         log file = /var/log/samba/%m.log
>>>         max log size = 50
>>>         preferred master = Yes
>>>         dns proxy = No
>>>         ldap ssl = no
>>>         hosts allow = 192.168.1., 127.
>>>         cups options = raw
>>>
>>>[printers]
>>>         comment = All Printers
>>>         path = /usr/spool/samba
>>>         printable = Yes
>>>         browseable = No
>>>
>>>[dan]
>>>         path = /home/dsmith
>>>         username = dsmith
>>>
>>>
>>>--
>>>No virus found in this outgoing message.
>>>Checked by AVG Anti-Virus.
>>>Version: 7.1.394 / Virus Database: 268.11.3/423 - Release Date: 8/18/2006
>>>
>>>--
>>>To unsubscribe from this list go to the following URL and read the
>>>instructions:  https://lists.samba.org/mailman/listinfo/samba
>>
>>
>>
>>--
>>No virus found in this incoming message.
>>Checked by AVG Anti-Virus.
>>Version: 7.1.394 / Virus Database: 268.11.6/427 - Release Date: 8/24/2006
>
>
> -- 
> No virus found in this outgoing message.
> Checked by AVG Anti-Virus.
> Version: 7.1.394 / Virus Database: 268.11.6/428 - Release Date: 8/25/2006
>
>

--
David C. Rankin, J.D., P.E.
RANKIN LAW FIRM, PLLC
510 Ochiltree Street
Nacogdoches, Texas 75961
(936) 715-9333
(936) 715-9339 fax
www.rankinlawfirm.com
--