[Samba] Samba Share : Connection refused

[Sascha Wiechmann]

Hi Rowland,

thanks for your fast reply. Maybe there was a problem on format in the
email as testparm works fine on my server. But I also did not write
about distribution and version, sorry.
This conf is given by Yast tool from SuSE LEAP 42.2 by default. I just
added the few parameters I need. So maybe I should clean out a bit - I
still do not need any domain settings.
But does this the trick?

br
Sascha


Am 09.07.2018 um 11:02 schrieb Rowland Penny via samba:
> On Mon, 9 Jul 2018 10:21:50 +0200
> Sascha Wiechmann via samba <samba at lists.samba.org> wrote:
>
>> Hi everyone,
>>
>> I have a small issue on our main samba server. We added a hardware
>> firewall with different zones and now I want to get access from new
>> development LAN (192.168.4.) to samba (192.168.0.) but I get
>> information about access denied on windows 7 (net use Error 5).
>> Firewall is open to all internal LANs. I checked the smb.conf and,
>> for me, it seems to be fine. I added hosts allow before holiday and
>> it worked, but after my holiday access is denied. Maybe I am blind
>> and you may give me a hint, please...
>>
>> Log :
>>
>> [2018/07/09 09:37:06.872551,
>> 0] ../source3/lib/access.c:338(allow_access) Denied connection from
>> 192.168.4.111 (192.168.4.111)
>>
>>
>> smb.conf :
>>
>> [global]
>>       workgroup = workgroup
>>       passdb backend = tdbsam
>>       printing = cups
>>       printcap name = cups
>>       printcap cache time = 750
>>       cups options = raw
>>       map to guest = Bad User
>>       #include = /etc/samba/dhcp.conf
>>       logon path = \\%L\profiles\.msprofile
>>       logon home = \\%L\%U\.9xprofile
>>       logon drive = P:
>>       usershare allow guests = No
>>       add machine script = /usr/sbin/useradd  -c Machine -d
>> /var/lib/nobody -s /bin/false %m$
>>       domain logons = No
>>       domain master = No
>>       security = user
>>       wins support = Yes
>>       netbios name = SRV1
>>       create mask = 0770
>>       directory mask = 0770
>>       log file = /var/log/samba/log.%I
>>       log level = 2
>>       hosts allow = 192.168.0.0/24 192.168.4.0/24
>>       hosts deny = ALL
>>
>> Thanks for your efforts !
>>
>> br
>> Sascha
>>
> There appears to be something wrong with that smb.conf. If I I copy it
> into a file on my computer and run 'testparm' against it, I get this:
> testparm testsmb.conf
> Load smb config files from testsmb.conf
> rlimit_max: increasing rlimit_max (1024) to minimum Windows limit (16384)
> Unknown parameter encountered: "    security"
> Ignoring unknown parameter "    security"
> Unknown parameter encountered: "    netbios name"
> Ignoring unknown parameter "    netbios name"
> Unknown parameter encountered: "    printing"
> Ignoring unknown parameter "    printing"
> Unknown parameter encountered: "    printcap name"
> Ignoring unknown parameter "    printcap name"
> Unknown parameter encountered: "    printcap cache time"
> Ignoring unknown parameter "    printcap cache time"
> Unknown parameter encountered: "    cups options"
> Ignoring unknown parameter "    cups options"
> Unknown parameter encountered: "    map to guest"
> Ignoring unknown parameter "    map to guest"
> Unknown parameter encountered: "    logon path"
> Ignoring unknown parameter "    logon path"
> Unknown parameter encountered: "    logon home"
> Ignoring unknown parameter "    logon home"
> Unknown parameter encountered: "    logon drive"
> Ignoring unknown parameter "    logon drive"
> Unknown parameter encountered: "    usershare allow guests"
> Ignoring unknown parameter "    usershare allow guests"
> Unknown parameter encountered: "    add machine script"
> Ignoring unknown parameter "    add machine script"
> Unknown parameter encountered: "    domain logons"
> Ignoring unknown parameter "    domain logons"
> Unknown parameter encountered: "    domain master"
> Ignoring unknown parameter "    domain master"
> Unknown parameter encountered: "    wins support"
> Ignoring unknown parameter "    wins support"
> Unknown parameter encountered: "    create mask"
> Ignoring unknown parameter "    create mask"
> Unknown parameter encountered: "    directory mask"
> Ignoring unknown parameter "    directory mask"
> Unknown parameter encountered: "    log file"
> Ignoring unknown parameter "    log file"
> Unknown parameter encountered: "    log level"
> Ignoring unknown parameter "    log level"
> Unknown parameter encountered: "    hosts allow"
> Ignoring unknown parameter "    hosts allow"
> Unknown parameter encountered: "    hosts deny"
> Ignoring unknown parameter "    hosts deny"
> Loaded services file OK.
> Server role: ROLE_STANDALONE
>
> Press enter to see a dump of your service definitions
>
> # Global parameters
> [global]
> 	idmap config * : backend = tdb
>
> Or to put it another way, it doesn't seem to like any of your
> parameters.
>
> Removing the leading blank space and replacing it with 4 spaces seems
> to cure this. It then leads to the next problem, you have 'domain
> master = No' and testparm now says your smb.conf is for a
> 'ROLE_STANDALONE', so why do you have all the domain settings ?
>
> Rowland
>
>