Samba I Problem Z Dostepem Do Czegokolwiek

[marcini]

Witam!

 

Pomozcie mi prosze w konfiuracji Samby, bo kombinuje i juz nie wiem co z tym zrobic.

Ma byc 2 uzytkownikow Samby: pup i gosc. Zalozylem te konta w systemie (useradd) i ustawilem hasla. Potem dodalem userow do Samby. Probowalem juz korzystac z smbpasswd i tdbsam, ale tak i tak nie dziala.

 

Jak lacze sie z WinXP z \\samba, to prosi o haslo. Podaje uzytkownika pup, haslo i widze udostepnione katalogi (czyli user w smbpasswd jest ok, bo sie moge zalogowac).

Potem jak probuje wejsc w katalog test, to znowu pyta o haslo, ale juz nie udaje mi sie zalogowac do niego.

 

Probowalem sie polaczyc z localhosta:

[root@localhost ~]# smbclient //localhost/test -U pup

Password:

Domain=[sAMBA] OS=[unix] Server=[samba 3.0.21b-2]

tree connect failed: NT_STATUS_BAD_NETWORK_NAME

Co oznacza ten blad?

 

Dodam, ze jak robie smbclient -L samba -U pup, to widze liste udostepnionych udzialow.

 

Wynik polecenia testparm:

[global]

        workgroup = PUP

        netbios name = SAMBA

        server string = Samba Server

        null passwords = Yes

        passdb backend = smbpasswd, tdbsam

        guest account = gosc

        username map = /etc/samba/smbusers

        log file = /var/log/samba/%m.log

        max log size = 50

        socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192

        printcap name = /etc/printcap

        preferred master = Yes

        dns proxy = No

        guest ok = Yes

        hosts allow = 192.168.0., 127.

        cups options = raw

 

[homes]

        comment = Home Directories

        read only = No

        browseable = No

 

[printers]

        comment = All Printers

        path = /var/spool/samba

        printable = Yes

        browseable = No

 

[public]

        path = /dane/samba/public

        read only = No

        guest only = Yes

 

[test]

        path = /dane/samba/test

 

Zamieszczam tez wynik tail -f /var/log/messages, w czasie gdy probuje sie zalogowac z Windowsa do \\samba\test:

May 15 10:14:09 localhost nmbd[26877]:  Samba name server SAMBA is now a local master browser for workgroup PUP on subnet 192.168.0.201

May 15 10:14:09 localhost nmbd[26877]:

May 15 10:14:09 localhost nmbd[26877]:  *****

May 15 10:15:35 localhost smbd[26890]: [2006/05/15 10:15:35, 0] smbd/service.c:make_connection_snum(663)

May 15 10:15:35 localhost smbd[26890]:  '/dane/samba/test' does not exist or permission denied when connecting to [test] Error was Permission denied

May 15 10:15:35 localhost kernel: audit(1147680935.115:60): avc:  denied  { search } for  pid=26890 comm="smbd" name="/" dev=sdb1 ino=2 scontext=root:system_r:smbd_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir

May 15 10:15:35 localhost smbd[26890]: [2006/05/15 10:15:35, 0] smbd/service.c:make_connection_snum(663)

May 15 10:15:35 localhost smbd[26890]:  '/dane/samba/test' does not exist or permission denied when connecting to [test] Error was Permission denied

May 15 10:15:35 localhost kernel: audit(1147680935.207:61): avc:  denied  { search } for  pid=26890 comm="smbd" name="/" dev=sdb1 ino=2 scontext=root:system_r:smbd_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir

May 15 10:15:35 localhost smbd[26890]: [2006/05/15 10:15:35, 0] smbd/service.c:make_connection_snum(663)

May 15 10:15:35 localhost smbd[26890]:  '/dane/samba/test' does not exist or permission denied when connecting to [test] Error was Permission denied

May 15 10:15:35 localhost kernel: audit(1147680935.875:62): avc:  denied  { search } for  pid=26890 comm="smbd" name="/" dev=sdb1 ino=2 scontext=root:system_r:smbd_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir

May 15 10:15:35 localhost smbd[26890]: [2006/05/15 10:15:35, 0] smbd/service.c:make_connection_snum(663)

May 15 10:15:35 localhost smbd[26890]:  '/dane/samba/test' does not exist or permission denied when connecting to [test] Error was Permission denied

May 15 10:15:35 localhost kernel: audit(1147680935.899:63): avc:  denied  { search } for  pid=26890 comm="smbd" name="/" dev=sdb1 ino=2 scontext=root:system_r:smbd_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir

May 15 10:15:35 localhost smbd[26890]: [2006/05/15 10:15:35, 0] smbd/service.c:make_connection_snum(663)

May 15 10:15:35 localhost kernel: audit(1147680935.903:64): avc:  denied  { search } for  pid=26890 comm="smbd" name="/" dev=sdb1 ino=2 scontext=root:system_r:smbd_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir

May 15 10:15:35 localhost smbd[26890]:  '/dane/samba/test' does not exist or permission denied when connecting to [test] Error was Permission denied

May 15 10:15:36 localhost smbd[26890]: [2006/05/15 10:15:36, 0] smbd/service.c:make_connection_snum(663)

May 15 10:15:36 localhost smbd[26890]:  '/dane/samba/test' does not exist or permission denied when connecting to [test] Error was Permission denied

May 15 10:15:36 localhost kernel: audit(1147680936.224:65): avc:  denied  { search } for  pid=26890 comm="smbd" name="/" dev=sdb1 ino=2 scontext=root:system_r:smbd_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir

May 15 10:15:36 localhost smbd[26890]: [2006/05/15 10:15:36, 0] smbd/service.c:make_connection_snum(663)

May 15 10:15:36 localhost smbd[26890]:  '/dane/samba/test' does not exist or permission denied when connecting to [test] Error was Permission denied

May 15 10:15:36 localhost kernel: audit(1147680936.232:66): avc:  denied  { search } for  pid=26890 comm="smbd" name="/" dev=sdb1 ino=2 scontext=root:system_r:smbd_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir

May 15 10:15:45 localhost smbd[26890]: [2006/05/15 10:15:45, 0] smbd/service.c:make_connection_snum(663)

May 15 10:15:45 localhost smbd[26890]:  '/dane/samba/test' does not exist or permission denied when connecting to [test] Error was Permission denied

May 15 10:15:45 localhost kernel: audit(1147680945.740:67): avc:  denied  { search } for  pid=26890 comm="smbd" name="/" dev=sdb1 ino=2 scontext=root:system_r:smbd_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir

May 15 10:14:09 localhost nmbd[26877]: [2006/05/15 10:14:09, 0] nmbd/nmbd_become_lmb.c:become_local_master_stage2(396)

May 15 10:14:09 localhost nmbd[26877]:  *****

 

Przepraszam, jesli post jest za dlugi, ale staralem sie podac jak najwiecej informacji.

 

Aha, prawa do katalou /dane/samba i podkatalogow mam na 777, wlasciciel pup:users.

[mynus]

[test]
 path = /dane/samba/test
 public = no
 writable = yes
 browseable = yes
 valid users = pup,gosc 

 

 

[marcini]

Niestety nie pomoglo:

[root@localhost ~]# smbclient //samba/test -U pup

Password:

Domain=[sAMBA] OS=[unix] Server=[samba 3.0.21b-2]

tree connect failed: NT_STATUS_BAD_NETWORK_NAME

Prosze o dalsze wskazowki...

 

EDIT:

Znalazlem przyczyne wszystkich klopotow: SELinux.

Nie wiem jeszcze jak zmodyfikowac jego polityke, tak zeby wszystko dzialalo, a jednoczesnie zeby nie wylaczac ochrony dla calej Samby.

Na razie przelaczylem na Permissive i bede sie staral do tego dojsc. Swoja droga, czy to nie przesada z tym poziomem ochrony, jesli w domyslnej konfiuracji blokuje on mozliwosc udostepnienia czegokolwiek?