Fedora Servers :: Samba Share When Selinux Is In Permissive Mode?
May 13, 2009
I don't think it has anything to do with the config file. More to do with SElinux. I need to know how to configure SElinux so I can see my samba share when SELinux is on. When I setenforce 0 I can seen all the files and folders set it to setenforce 1 cannot see anything.
Here is the output when I ran [root@fileserver /]# getsebool -a | grep smb
allow_smbd_anon_write --> on
smbd_disable_trans --> on
These two options were off I tried turning them on.
This is another one of the commands I tried running. I did change a few options but I am not sure which I do need to change. I am running a stand alone server so I don't need the DC option.
[root@fileserver /]# getsebool -a | grep samba
samba_domain_controller --> off
samba_enable_home_dirs --> off
samba_export_all_ro --> on
samba_export_all_rw --> off
samba_share_nfs --> off
use_samba_home_dirs --> on
I can also post a copy of my smb.conf file too.
View 1 Replies
ADVERTISEMENT
Dec 4, 2009
I made the Selinux inactive with easylife how can I reactivate it.
View 6 Replies
View Related
Jul 19, 2010
It seem that I can set selinux to permissive but when i reboot it turns back on? Can I unistall it? I am running RED HAY 5 and Centos 4
View 2 Replies
View Related
May 8, 2009
I don't think it has anything to do with the config file.More to do with SElinux. I need to know how to configure SElinux so I can see my samba share when SELinuxis on. When I setenforce 0 I can seen all the files and folders set it to setenforce 1 cannot see anything.Here is the output when I ran [root@fileserver /]# getsebool -a | grep smballow_smbd_anon_write --> onsmbd_disable_trans --> onThese two options were off I tried turning them on.This is another one of the commands I tried running. I did change a few options but I am not sure which I do need to change. I am running a stand alone server so I don't need the DC option.
[root@fileserver /]# getsebool -a | grep samba
samba_domain_controller --> off
samba_enable_home_dirs --> off
[code]....
View 2 Replies
View Related
Oct 6, 2010
I'm running a Samba server (3.5.2-60.fc13) on Fedora 13 (64 bit). I want to share the user home directories and want to allow following of symlinks out of the share tree. So in smb.conf I used
unix extensions = no
wide links = yes
For SELinux I did:
setsebool -P samba_enable_home_dirs=1
getsebool -a | grep samba
samba_create_home_dirs --> off
samba_domain_controller --> off
[code]....
However I can't follow the symlinks when mounting my home directory on a Windows machine, unless I disable SeLinux.
View 5 Replies
View Related
Feb 23, 2009
You can find a list of all the booleans for SELinux (Fedora 10) using getsebool -a My question is, is there a reference online that describes each one. Most of obvious but it's one of those "I have to know because it's there situation).
View 5 Replies
View Related
Jan 26, 2011
I wan't whatever file/folder that ends up in the public folder to automaticly be open to whosoever access that folder. Right know I have to "chmod -R 777 file/folder.* "
View 4 Replies
View Related
May 29, 2009
I have a server which currently has a samba share for a printer and my home directory. Both have been working fine for a while now. I have a drobo (which is like a little USB RAID machine) connect via USB to the linux box. While trying to share it via samba I get weird messages from my windows machine (see screenshot). I have tried to share multiple folders on this drobo and no luck, all the same result.
I also tried a symbolic link, no good.
Here is a screen shot
http://aivila.com/temp/screen.jpg
Here is my smb.conf file:
Code:
[home]
path = /home/savona
read only = no
[Code]...
View 12 Replies
View Related
Sep 3, 2010
How can I set permissions for users within the share?
Example: I have a share called Programming and some user can create folders within it most others can not, can read the documents.
How do I set permissions?
View 2 Replies
View Related
Mar 26, 2009
how to config details of samba with commands not from gui
View 2 Replies
View Related
Mar 31, 2009
if i try to connect to my samba server ( share ) from my windows xp ( or vista, i've tried both ) it says, that the network share cannot be found. i've installed all necessary rpms on my fedora 10, necessary for running a samba server:
Quote:
[root@********* samba]# rpm -qa |grep samba
samba-common-3.2.8-0.27.fc10.i386
samba-3.2.8-0.27.fc10.i386
samba-winbind-3.2.8-0.27.fc10.i386
after that, i've configured the smb.conf file, as follows:
Quote:
[root@*********** samba]# cat /etc/samba/smb.conf
#======================= Global Settings =====================================
[global]
# ----------------------- Netwrok Related Options -------------------------
workgroup = GROUP
[code]....
there is no iptables definition, or any other firewall installed, neither on the server nor the client. i've read through alot of howtos an manuals, but was not able to find the problem.
View 14 Replies
View Related
Mar 13, 2011
Running samba-3.5.6-71.fc14.x86_64. Why cant I access samba share by short-hostname from win7. When I ping short-hostname, the answer is the actual ip and short-hostname.mydomain.com
sa pinging short-hostname does work, but accessing it from start-run does not! Accessing by ip or short-hostname.mydomain.com works fine. ssh by short-hostname from win7 works fine too.
View 14 Replies
View Related
Mar 23, 2011
My Fedora router has three nic's, one for the internet, one for lan and one for the wireless network, which uses hostapd. I have set up samba in order to enable windows file sharing from wireless lan to wired lan. Using the samba documentation I have enabled the wins server and wins proxy which should allow met to browse the shares across the networks, which theoretically should do the trick but it doesn't work as expected. I can see the pc's from the other network using windows neighbourhood, but as soon as I access one of them it fails saying that "network path could not be found" or something like this. Tried using windows 7, windows xp and linux for browsing but the result is the same. As firewall I have shorewall and the samba specific ports are enabled for both networks. How to setup samba for inter-network browsing?
I have attached the global config section from smb.conf file:
Code:
[global]
server string = Samba Server
interfaces = eth1, lo, wlan0
bind interfaces only = Yes
security = SHARE
log file = /var/log/samba/%m.log
max log size = 50 .....
View 9 Replies
View Related
Jan 3, 2010
I just recently constructed a computer to create a nice Fedora Linux server to replace a Mac Mini server that I have been using for a few years. I'm attempting to create a Samba share for my machines, a Windoze 7 machine as well as a couple MacOS 10.6 machines. I've set up Samba, started the service, allowed Samba in the firewall, and used system-config-samba to set up a share with a user. I created a User called "space", and a share /media/peliculas/Movies (a mounted hard drive). When I type in \IP_ADDRESS in the address bar in windows 7, I get the option to log in. I log in correctly and I see two directories "space" and "Movies." Unfortunately when I click on one of them I get the following error message:
Windows cannot access \IP_ADDRESSMovies Check the spelling of the name. Otherwize, there might be a problem with your network. To try and identify and resolve network problems, click Diagnose. I also get something similar when I attempt to connect with my mac machine. Using "Connect to Server" I type in: smb:\IP_ADDRESS, and login, I have the option to mount "Movies" or "space." If I select any of these, I get the following error message: There was an error connecting to the server "IP_ADDRESS." Check the server name or IP addres, and then try again. If you are unable to resolve the problem contact your system administrator.
Also, if I type 'smbclient -U space -L IP_ADDRESS' I can see the "Movies" in the "Sharename." At this point I'm not sure what else to do, and have been trying to figure this out for the last few days (losing sleep due to being baffled). The only thing that I can think of is that I have something wrong with the smb.conf file. Here is what it currently displays:
Global Settings
workgroup = WORKGROUP
server string = Samba Server Version %v
log file = /var/log/samba/log.%m
max log size = 50
[code].....
One last thing, when I check the log files, there are error messages that state: smbd/service.c:1009(make_connection_snum) '/home/space' does not exist or permission denied when connecting to [peliculas] Error was Permission denied --Windoze 7 and MacOS 10.6 log files
View 5 Replies
View Related
Feb 24, 2009
I've got my Samba shares up and running. I can stream files from the server, I can create files on the server, and I can copy files from the server.
Running a Windows program (from a Windows box) directly from the Samba server, however, is turning into a nightmare. I'm getting Access is Denied errors from the Windows box, yet I can copy/create/etc from the entire directory with no problems.
Are there any special permissions I need to run EXE files from a Windows box, located on a Samba share? I've already chmod'd everything to 777, and I show full access when ls -Z is used.
View 2 Replies
View Related
Feb 24, 2009
I'm trying to setup a Samba network share with a Fedora Directory Server backend. This will be used primarily for Windows users to authenticate before accessing the share. I am using Fedora Core 10 and have all of the latest updates installed. When I try to connect from a Windows machine, I am prompted for a username and password. I enter the username and password of the account I created in Fedora Directory Server in OU=People. The credentials are rejected. At the same time in the log file I see this:
[2009/02/24 16:50:16, 3] auth/auth_sam.c:check_sam_security(282)
check_sam_security: Couldn't find user 'Administrator' in passdb.
[2009/02/24 16:50:16, 2] auth/auth.c:check_ntlm_password(318)
check_ntlm_password: Authentication for user [Administrator] -> [Administrator] FAILED with error NT_STATUS_NO_SUCH_USER
Administrator is the user I created in Fedora Directory Server. If I perform an ldapsearch it will find the user as uid: Administrator so I know it is able to be looked up in FDS. But I'm guessing that's not the problem.
[Code]...
View 4 Replies
View Related
May 17, 2011
I can not edit my own .ppt file from samba share. Current desktop OS is windows 7. Samba server having RHEL 5 with following samba packages installed.
Code:
libsmbclient0-3.5.6-43.el5
pam_smb-1.1.7-7.2.1
pam_smb-1.1.7-7.2.1
I can able to edit and save the file if I copy this file from samba to local system. But from Samba share it open in read only mode.
View 7 Replies
View Related
Jan 12, 2011
Have an issue with my CentOS server. I have a fully updated Centos 5.5 server and I have samba set up to serve shares to a couple of groups in my home office. I have it set up to force user/group and force directory create mode 770 and force file mode of 770. This set up works perfectly well for normal connections to the server; no matter who connects, all files and directories are owned by the specified users/group and create modes I specify. The problem is when I try to rsync some files to the same shares. When I do this, rsync ignores the directory/file forced create mode. It will honor the user/group, however. As an example, if I create a directory on one machine connected to the samba share, I get the following:
drwxr-x--- 3 nobody users 0 2010-12-26 20:42 Misc Pics
View 14 Replies
View Related
Nov 11, 2010
I have a removable USB drive formated with NTFS. I enabled all the samba boolians in the SElinux GUI but it still doesn't seem to work. If i put it on permissive it will work. What more is there that i need to do to get my directories to show up on samba with selinux enabled?
View 2 Replies
View Related
Jun 20, 2010
My first post, and I'm an Ubuntu n00b. But I've done a lot of reading and still can't seem to get anywhere with this. First of all. I know that I've set Samba up correctly because I can create a share in /home/documents which is mounted on my primary hard drive /dev/sda1, Windows 7 can access it no problem. But, when I try to set up a Samba share on my second hard drive /dev/sdb1, Windows 7 cannot access it. I've mounted the share in /media/Share The error I get in Window 7 is: " Windows cannot access \HOMESERVERData Check the spelling of the name. Otherwise, there might be a problem with your network."
My first thought is I must have the hard drive mounted or formatted incorrectly, but I can't find anything on this forum to tell me otherwise. I feel like I need to restart the process of this Samba set up. Can someone please guide me through: reformatting sdb1, mounting sdb1, setting up my smb.conf, fstab, and any other config files required to use my second hard drive as a Samba share?
View 6 Replies
View Related
Sep 5, 2009
i have problem with samba share everytime when i want to browse shared folders on fedora machine from windows i always get this msg (SELinux is preventing samba (smbd) "getattr" to /proc/fs/nfsd (nfsd_fs_t).)here is my selinuxlog
Summary:
SELinux is preventing samba (smbd) "getattr" to /proc/fs/nfsd (nfsd_fs_t).
%
View 6 Replies
View Related
Jan 14, 2010
I have a Windows 2k8 server acting as my domain controller. My goal is to have my Ubuntu 9.10 Server box share some folders via Samba, which should be authenticated via the PDC. So far, it seems to be mostly working. The Ubuntu machine has joined the domain, and is browse-able to domain users. The only problem at this point, is that the shares are not writable.
Code:
[global]
workgroup = smatech
netbios name = smalinux001
security = domain
idmap uid = 15000-20000
idmap gid = 15000-20000
winbind enum users = yes
winbind enum groups = yes
winbind use default domain = yes
password server = 10.10.10.2
domain master = no
local master = yes
[www]
path = /var/www
writable=yes
View 5 Replies
View Related
Jun 25, 2010
Code:
# Sample configuration file for the Samba suite for Debian GNU/Linux.
#
[code]...
View 5 Replies
View Related
Oct 13, 2010
I'm trying to set up my samba server so that all the shares are visible to everybody but that some shares can only be accessed by certain users. I have a folder Video that everybody can access without a username or password. I now want to create a share that only I can access called webserver.
This is my samba.conf
Code:
[global]
dns proxy = No
netbios name = DATABOX
guest account = nobody
restrict anonymous = no
browseable = yes
server string = server
workgroup = WORKGROUP
public = yes
security = share
[Video]
Writeable = yes
Path = /media/data/Video
Public = yes
[webserver]
Writeable = yes
Public = no
User = malteser
Path = /media/data/Webserver
Windows does not let me enter a username or password. I'm pretty sure this used to work.
View 1 Replies
View Related
Sep 1, 2010
My Fedora box is giving me an SELinux security error:
Code: Summary:
SELinux is preventing the samba daemon from reading users' home directories.
Detailed Description:
SELinux has denied the samba daemon access to users' home directories. Someone
is attempting to access your home directories via your samba daemon. If you only
setup samba to share non-home directories, this probably signals an intrusion
attempt. For more information on SELinux integration with samba, look at the
samba_selinux man page. (man samba_selinux)
Allowing Access: If you want samba to share home directories you need to turn on the
samba_enable_home_dirs boolean: "setsebool -P samba_enable_home_dirs=1"
Fix Command:
setsebool -P samba_enable_home_dirs=1
Additional Information:
Source Context system_u:system_r:smbd_t:s0
Target Context unconfined_u:object_r:user_home_dir_t:s0
Target Objects /home/micah [ dir ]
Source smbd
[code]....
View 2 Replies
View Related
Jan 12, 2010
I recently set up a Samba server (Ubuntu 8.10 desktop) in a Social Businness Office. in there have different laptops and OS.
Here is how my smb.conf file look in the share section.
[private folder]
path = /path/to/private
comment = private
valid users = user1 user2
directory mask = 0777
[Code]....
It work fine for Win and Ubuntu, but access this folder with Mac OsX gives this error:
smb_mount: open session failed!: syserr = Broken pipe
It seems that authentication is ok, but for some reason it cannot mount the device.
I know this is not the right place to talk about OsX issues.
I would like to exclude if there are some options I miss in the smb.conf.
View 4 Replies
View Related
Mar 23, 2010
i have setup a samba server and created samba shares on it, i have configured the samba server to authenticates users from a windows server 2003 DC,
i have 2 shares call IT and MYSHARE, I want to give read and write permissions to sevaral users to those two shares and read only permisson to all the other users.
i tried editing the smb.conf file with the following settings , but no one can write or modify the files in the shares including the users specified in the
write list = cweerasinghe,njayarathna.
[IT]
writeable = Yes
browseable = yes
public = no
comment = IT share
[Code]....
how can i give access to the write list = cweerasinghe,njayarathna users to
read, write and modify the files in the shares ??
View 4 Replies
View Related
Aug 9, 2010
I am a php devloper and recently my company purchased an IBM X3400 M2 Server and i was told to set up the server.I installed the Ubuntu 10.04 LTS Server i386 version. Everything went up smoothly and i have some queries to be asked.
1.)Our scenario is like this,--> we have an a production LAMP Server and we need the to backup all the contents of www folder and all Mysql files.I plan to do this with a shell script and use the rsync for syncing and backup.
Again i have a mysql backup shell script that i want to activate on system shut down Like when i shut down my server,the backup script should run taking all the backups, just before the Shutdown.The script should run take the backups, one, on the server itself and other on a remote machine sync with rsync and system should then go for Final shut down.How can we achieve this.I know of cron jobs but i prefer the above way.Suggestion requested here.
2.)To Set up a Special Samba share. I need to set up a samba share that will allow only files to be copied and not be deleted.For eg i will create a folder "WEBSITE-BACKUPS"(will contain the list of all finished website works plus mysql dump)
The user on the network will have only permission to paste into this folder.Like a user just paste his work say 'abcwebsite',he will have only this privilege and no DELETE privilege or right.Can this be done?
3.)I have a LAN, in this the IBM Machine is acting as Production LAMP server with around 20 machines connecting and working with files on this server.All other machines are Windows.Can i get a log based on the ip like who has accessed with files at what times or last modification time from an IP address. I usually get complaints from my fellow developers that somebody has deleted or modified their work which is in this IBM Server.So is there any way to monitor this.I also know about subversion,the versioning system but most people here are uncomfortable with check in / check out commands.
View 3 Replies
View Related
Oct 18, 2010
I've been running Samba for a couple of years now. Bumped up from 9.04 to 10.10 server (64 bit), and nothing wants to work. I have a really simple share that I want to be accessible by all Windows clients without a login (guest access). Here is my config:
Code:
[global]
security = share
[code]....
View 3 Replies
View Related
Feb 15, 2011
I have a couple of user accounts where each member belongs to a group i have created: Each user access the share using their own user account credentials.
How can I configure Samba in a way so that each modification done on the share gets the owner of the user and my group instead of the user and the users own group? I would also like the access rights to be 770 to each modification.
In other words, today each modification by "userA" get the owner "userA.userA" and I would like it to be "userA.MyGroup" with "rwxrwx---" permissions.
View 3 Replies
View Related
