[Samba] Re: What's wrong with my smb.conf? Access Denied with 3.0.23c

Aaron Kincer kincera at gmail.com
Tue Sep 12 21:43:20 GMT 2006


I'm just comparing your smb.conf to mine and I have these lines where 
you don't that might make a difference:

password server = *
encrypt passwords = yes

Give those a shot and see if they help.

Nolan Garrett wrote:
> Nolan Garrett wrote:
>   
>> Still having problems with my Samba configuration, even after upgrade to
>> the latest FC5 samba package.  Getting "Access Denied" errors when
>> trying to connect with a member of the group "Domain Users" to the MP3s
>> share.  The W2K3 server shows that authentication was successful.  I
>> can't find any errors in the logs at all, and winbind appears to be
>> working (I can su to the user, and can do other things, just not access
>> any share other than the home directory).
>>
>> Here's my smb.conf:
>> [global]
>>         workgroup = MASSIVEGEEK
>>         server string = Samba Server
>>         printcap name = /etc/printcap
>>         load printers = yes
>>         printer admin = MASSIVEGEEK+ngarrett MASSIVEGEEK+Administrator root
>>         cups options = raw
>>
>>         log file = /var/log/samba/%m.log
>>         max log size = 50
>>  ;      log level = 10
>>         security = ADS
>>         realm = MASSIVEGEEK.LOCAL
>>         socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
>>         dns proxy = no
>>         idmap uid = 16777216-33554431
>>         idmap gid = 16777216-33554431
>>         template shell = /bin/bash
>>         winbind use default domain = yes
>>         username map = /etc/samba/smbusers
>>         winbind separator = +
>>         winbind enum users = yes
>>         winbind enum groups = yes
>>         template homedir = /home/winnt/%D/%U
>>         admin users = @"MASSIVEGEEK+Domain Admins"
>>
>> [homes]
>>         comment = Home Directories
>>         browseable = no
>>         writeable = yes
>>
>> [printers]
>>         comment = All Printers
>>         path = /var/spool/samba
>>         browseable = no
>>         public = yes
>>         guest ok = yes
>>         printable = yes
>>
>> [MP3s]
>>         path = /home/samba/MP3s
>>         browseable = yes
>>         valid users = @"Domain Users"
>>         writeable = yes
>>
>> [print$]
>>         comment = Printer Driver Download Area
>>         path = /etc/samba/drivers
>>         browseable = yes
>>         guest ok = yes
>>         read only = no
>>
>> Domain Admins can access this share without any problems.  I've also
>> tried specifying valid users as @"MASSIVEGEEK+Domain Users", but then I
>> get the error:
>>
>> [2006/09/11 09:56:27, 0] smbd/service.c:make_connection_snum(773)
>>   make_connection: connection to MP3s denied due to security descriptor.
>>
>> I am currently running samba-3.0.23c-2, from the FC5 development tree.
>>
>> Any help would be appreciated!
>>
>> Nolan
>>
>>
>>     
>
> Just wanted to give this a quick "bump" - anyone have any thoughts for
> me regarding this issue?
>
>
>   



More information about the samba mailing list