[Samba] NT_STATUS_ACCESS_DENIED Causes?

stelter at sonic.net stelter at sonic.net
Mon Dec 13 15:00:54 MST 2010


 Hello,
   I sent a previous message about this case, but I'm guessing I had too
much info.  I'll try to keep it simple.

   I'm looking for ways to further troubleshoot this error:

 [cstelter at fedorabox system]$ smbclient //fedorabox/sys
 Enter cstelter's password: 
 Domain=[STELTER] OS=[Unix] Server=[Samba 3.5.6-70.fc14]
 smb: > dir
 NT_STATUS_ACCESS_DENIED listing *

         60475 blocks of size 262144. 38455 blocks available

 I can log in and view shares, but I can't seem to access the content.

 smb.conf:

 [global]
    workgroup = STELTER
    netbios name = FEDORABOX
    passdb backend = tdbsam
    add machine script = /usr/sbin/useradd -d /dev/null -g 100 -s
/bin/false -M %u
    server string = Samba Server
    printcap name = /etc/printcap
    load printers = yes
 cups options = raw
  log level = 5
  log file = /var/log/samba/%m.log4
    max log size = 50
    security = user
    socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
    local master = yes
    os level = 33
    domain master = yes 
    preferred master = yes
    domain logons = yes
    logon path = \%LProfiles%U
    logon drive = I:
    logon home = \%L%Uwinprofile
    logon script = logon.bat
    dns proxy = no 
    idmap uid = 16777216-33554431
    idmap gid = 16777216-33554431
    template shell = /bin/false
    winbind use default domain = no
 [homes]
    comment = Home Directories
    browseable = no
    writable = yes
    valid users = %S
    invalid users = nobody, root
    create mode = 0664
    directory mode = 0775
 [netlogon]
    path = /home/netlogon
    read only = yes
    write list = root
 [Profiles]
     path = /home/profiles
     read only = no
     create mask = 0600
     directory mask = 0700
 [printers]
    comment = All Printers
    path = /var/spool/samba
    browseable = no
    guest ok = no
    writable = no
    printable = yes
 [homedir]
    comment = Commen 'system' type components
    path = /home
    read only = yes
    browseable = yes
    public = yes
 [sys]
    comment = Commen 'system' type components
    path = /share/system
    read only = no
    write list = @stelters
    browseable = yes
    public = yes

 As for the share:
 [cstelter at fedorabox system]$ ls -al /share
 total 12
 drwxr-xr-x.  3 root     root     4096 Dec 11 03:56 .
 dr-xr-xr-x. 26 root     root     4096 Dec 11 05:20 ..
 drwxr-xr-x.  8 cstelter stelters 4096 Dec 13 15:35 system

 [cstelter at fedorabox system]$ ls -al /share/system
 total 56
 drwxr-xr-x.  8 cstelter stelters 4096 Dec 13 15:35 .
 drwxr-xr-x.  3 root     root     4096 Dec 11 03:56 ..
 drwxr-xr-x.  2 cstelter stelters 4096 Sep 17  2008 bitmaps
 drwxr-xr-x.  4 cstelter stelters 4096 Feb  4  2007 Dad
 -rw-r--r--.  1 cstelter stelters 5478 May  1  2010 flight1.mid
 -rw-r--r--.  1 cstelter stelters 5478 May  1  2010 flight2.mid
 -rw-r--r--.  1 cstelter stelters 5478 May  1  2010 flight3.mid
 drwxr-xr-x. 38 cstelter stelters 4096 Oct  4  2005 infocom
 drwxr-xr-x.  2 cstelter stelters 4096 Oct  4  2005 Infocom Games
 drwxr-xr-x.  7 cstelter stelters 4096 Feb 12  2008 Program Files
 drwxr-xr-x. 51 cstelter stelters 4096 Nov 17 16:33 Utilities

 What can I do further to diagnose the problem?  I set log level = 5, but
there are a lot of log files and none of them seem to help me much and
there is too much to post here.  What should I look for and in which log
file?

 I did find ACCESS_DENIED in one log file so I've attached that.  Please
let me know where I can go from here--

 Thanks in advance!
 --
 Craig

 I did  did find ACCESS_DENIED in fedorabox.log4 so I am attaching that.
 


More information about the samba mailing list