[Samba] Peculiar Samba permission denied error

Benjamin Allen ballen at jeffcolib.org
Tue Jun 15 09:01:31 MDT 2010


Thank you for the responses.

Here is The complete smb.conf, as I'm trying it with the test setup
suggested.

[global]
        workgroup = DOMAIN
        passdb backend = tdbsam
        printing = cups
        printcap name = cups
        printcap cache time = 750
        cups options = raw
        map to guest = Bad User
        logon path = \\%L\profiles\.msprofile
        logon home = \\%L\%U\.9xprofile
        logon drive = P:
        usershare allow guests = No
        idmap gid = 10000-20000
        idmap uid = 10000-20000
        realm = DOMAIN.FULL
        security = ADS
        template homedir = /home/%D/%U
        template shell = /bin/bash
        winbind separator = +
        winbind refresh tickets = yes
        wins server = 10.10.10.5
        wins support = No
        log level = 2

[home]
        comment = X Drive Repository
        path = /share/samba/domain/home
        hide unreadable = no
        read only = no

Here is the log output:

tail /var/log/samba/log.smbd
[2010/06/15 09:46:54,  2] auth/auth.c:310(check_ntlm_password)
  check_ntlm_password:  authentication for user [myname] -> [myname] ->
[DOMAIN+myname] succeeded
[2010/06/15 09:46:54,  0] smbd/service.c:1009(make_connection_snum)
  '/share/samba/domain/home' does not exist or permission denied when
connecting to [home] Error was Permission denied
[2010/06/15 09:46:57,  2] auth/auth.c:320(check_ntlm_password)
[2010/06/15 09:46:57,  2] smbd/service.c:584(create_connection_server_info)
  guest user (from session setup) not permitted to access this share (home)
[2010/06/15 09:46:57,  1] smbd/service.c:676(make_connection_snum)
  create_connection_server_info failed: NT_STATUS_ACCESS_DENIED

On the off hand chance this is something related to how the drive is
mounted:

cat /proc/mounts:

...
/dev/mapper/nhvg-nhsvr /share reiserfs rw,relatime,acl,user_xattr 0 0
...


df -h:

...
/dev/mapper/nhvg-nhsvr
                      568G  113G  456G  20% /share


...


None of the other errors existed before using this setup, so I figure this
is still the root of the issue:

"[2010/06/15 09:46:54,  0] smbd/service.c:1009(make_connection_snum)
  '/share/samba/domain/home' does not exist or permission denied when
connecting to [home] Error was Permission denied"

It seems like an obvious error of "Permission denied."

But I don't have SELinux enabled, the share is chown'd to my user, and it's
chmod'd to 777.

I can run "su DOMAIN+myname", receive a shell in that directory and create
and delete files. "Smbpasswd" shouldn't be needed (as far as I understand),
because all the usernames and passwords are drawn from out Win2003 Domain
Controller.

Thanks,

Ben

On Tue, Jun 15, 2010 at 9:35 AM, Chris Smith <smb_77 at chrissmith.org> wrote:

> On Tue, Jun 15, 2010 at 9:47 AM, Benjamin Allen <ballen at jeffcolib.org>
> wrote:
> > Is there anything else this could possibly be?
>
> Did you try simplifying the share for testing purposes?
> Remove a few lines, something like:
> =================================
> [xdrives]
> comment = X Drive Repository
>      path = /share/samba/domain/home
>      browseable = yes
>       valid users = @OURDOMAIN+smb  (this is a group)
>       hide unreadable = no
>      read only = no
> =================================
>
> Maybe even remove the valid users line (you're troubleshooting - it
> may help to determine what's going on):
> =================================
> [xdrives]
> comment = X Drive Repository
>      path = /share/samba/domain/home
>      browseable = yes
>       hide unreadable = no
>      read only = no
> =================================
>
> Also check that there is no 'valid users' line in the global section
> (you didn't supply all of that section).
>
> Chris
> --
> To unsubscribe from this list go to the following URL and read the
> instructions:  https://lists.samba.org/mailman/options/samba
>



-- 
Benjamin T. Allen
Junior Network Administrator
Jefferson County Library Central Services


More information about the samba mailing list