[Samba] Access From another subnet

Shawn Simmons shawns at precisionarch.com
Thu Jan 4 18:24:23 GMT 2007



I have setup a Samba Server to be used as a documentation repository.  The
IP address of the server resides in 192.168.1.x


I have several Windows XP workstations that reside in the 192.168.1.x
network and have no problem accessing the shares on the Samba Server.


I have several Windows XP workstations that reside in the 192.168.2.x
network that will show the Samba Server in the network neighborhood;
however, I get "access denied" errors trying to access it.


The following is my smb configuration:


# smb.conf is the main Samba configuration file. You find a full commented

# version at /usr/share/doc/packages/samba/examples/smb.conf.SUSE if the

# samba-doc package is installed.

# Date: 2006-06-16


      workgroup = PRECISIONARCH

      printing = cups

      printcap name = cups

      printcap cache time = 750

      cups options = raw

      map to guest = Bad User

      include = /etc/samba/dhcp.conf

      logon path = \\%L\profiles\.msprofile

      logon home = \\%L\%U\.9xprofile

      logon drive = P:

      idmap gid = 10000-20000

      idmap uid = 10000-20000


      security = ADS

      template homedir = /home/%D/%U

      template shell = /bin/bash

      winbind refresh tickets = yes

      domain logons = No

      domain master = No

      passdb backend = smbpasswd

      wins support = No

      winbind offline logon = yes

      add machine script = /usr/sbin/useradd  -c Machine -d /var/lib/nobody
-s /bin/false %m$

      usershare max shares = 100

      hosts allow = 192.168.1. 192.168.2.

      server string= Document-Server


      comment = Home Directories

      valid users = %S, %D%w%S

      browseable = No

      read only = No

      inherit acls = Yes


      comment = Network Profiles Service

      path = %H

      read only = No

      store dos attributes = Yes

      create mask = 0600

      directory mask = 0700


      comment = All users

      path = /home

      read only = No

      inherit acls = Yes

      veto files = /aquota.user/groups/shares/


      comment = All groups

      path = /home/groups

      read only = No

      inherit acls = Yes


      comment = All Printers

      path = /var/tmp

      printable = Yes

      create mask = 0600

      browseable = No


      comment = Printer Drivers

      path = /var/lib/samba/drivers

      write list = @ntadmin root

      force group = ntadmin

      create mask = 0664

      directory mask = 0775


      comment = Network Logon Service

      path = /var/lib/samba/netlogon

      write list = root


could someone please help me determine why the computers on the 192.168.2.x
subnet cannot access the Samba server.  Thanks.

More information about the samba mailing list