linux, samba
т.е. люди могут зайти в
smb://host.domain/data2 и
smb://host.domain/data3,
а в smb://host.domain/data не могут, причем на папки одинаковые права?
Тогда ждем юниксоидов...
smb://host.domain/data2 и
smb://host.domain/data3,
а в smb://host.domain/data не могут, причем на папки одинаковые права?
Тогда ждем юниксоидов...
нет, люди видят список шар data1, data2, data3, но ни в одну из них зайти не могут.
да? а с правами точно всё нормально?
да.
пример:
[data]
case sensitive = no
guest only = yes
msdfs proxy = no
path = /mnt/data/
read only = true
ls /mnt/data/ -la
drwxr-xr-x 15 worsediablo users 656 2007-03-04 16:49 .
пример:
[data]
case sensitive = no
guest only = yes
msdfs proxy = no
path = /mnt/data/
read only = true
ls /mnt/data/ -la
drwxr-xr-x 15 worsediablo users 656 2007-03-04 16:49 .
smbclient -N //wdm.domain/data
Domain=[WDM] OS=[Unix] Server=[Samba 3.0.24]
Connection to �ﷰ failed
Domain=[WDM] OS=[Unix] Server=[Samba 3.0.24]
Connection to �ﷰ failed
guest ok = yes
?
?
dos charset = 866
unix charset = UTF-8
restrict anonymous = no
domain master = no
preferred master = no
workgroup = domain
;max protocol = NT
ldap ssl = No
server signing = no
;map to guest = Bad User
guest ok = yes
server string = worsediablo
interfaces = eth0 wlan0 lo
unix charset = UTF-8
restrict anonymous = no
domain master = no
preferred master = no
workgroup = domain
;max protocol = NT
ldap ssl = No
server signing = no
;map to guest = Bad User
guest ok = yes
server string = worsediablo
interfaces = eth0 wlan0 lo
Ты ССЗБ
guest ok вписывается в настройки шары, а не в [global]
и вааще, полезно пользоваться testparm'ом.
guest ok вписывается в настройки шары, а не в [global]
и вааще, полезно пользоваться testparm'ом.
Ты ССЗБЭто что означает?
ывается в настройки шары, а не в [global]
не помогло.
самбу рестартил?
самба сама релоадит конфиг каждую минуту, если заметит изменения.
не помогло.http://forum.b.gz.ru/positive
когда уже дойдет запостить вывод testparm'а?
гм... то есть каждую минуту она изменения проверяет? Прикольно...
security = share
не, user рулит.
когда ты уточнишь ключи запуска
testparm -v /etc/samba/smb.conf ?
testparm -v /etc/samba/smb.conf ?
у меня самба работает отменно 
testparm -v
testparm -v
[global]
security = user
workgroup = V
log file = /var/log/samba/log.%m
max log size = 50
bind interfaces only = yes
interfaces = fxp0 fxp1
socket options = TCP_NODELAY SO_RCVBUF=32768 SO_SNDBUF=32768 IPTOS_LOWDELAY
passdb backend = smbpasswd, guest
local master = no
os level = 19
domain master = no
preferred master = no
wins server = 10.0.0.1
display charset = KOI8-R
unix charset = KOI8-R
dos charset = CP1251
null passwords = yes
guest account = nobody
map to guest = Bad User
# printcap name = cups
# printing = cups
#============================ Share Definitions ==============================
[lib.ru]
path = /usr/home/moshkow/archive
guest ok = yes
writable = no
у меня тоже до какого-то момента было так.
И сейчас не работает только на ноуте.
Load smb config files from /etc/samba/smb.conf
Processing section "[data]"
Processing section "[cdrom]"
Processing section "[info]"
Processing section "[flash]"
Processing section "[flash2]"
Processing section "[tmp]"
Loaded services file OK.
Server role: ROLE_STANDALONE
Press enter to see a dump of your service definitions
[global]
dos charset = 866
unix charset = UTF-8
display charset = LOCALE
workgroup = domain
netbios name = WDM
netbios aliases =
netbios scope =
server string = worsediablo
interfaces = eth0, wlan0, lo
bind interfaces only = No
security = USER
auth methods =
encrypt passwords = Yes
update encrypted = No
client schannel = Auto
server schannel = Auto
allow trusted domains = Yes
map to guest = Bad User
null passwords = No
obey pam restrictions = No
password server = *
smb passwd file = /var/lib/samba/private/smbpasswd
private dir = /var/lib/samba/private
passdb backend = smbpasswd
algorithmic rid base = 1000
root directory =
guest account = nobody
enable privileges = Yes
pam password change = No
passwd program =
passwd chat = *new*password* %n\n *new*password* %n\n *changed*
passwd chat debug = No
passwd chat timeout = 2
check password script =
username map =
password level = 0
username level = 0
unix password sync = No
restrict anonymous = 0
lanman auth = Yes
ntlm auth = Yes
client NTLMv2 auth = No
client lanman auth = Yes
client plaintext auth = Yes
preload modules =
use kerberos keytab = No
log level = 5
syslog = 1
syslog only = No
log file = /var/log/samba/log.%m
max log size = 50
debug timestamp = Yes
debug hires timestamp = No
debug pid = No
debug uid = No
enable core files = Yes
smb ports = 445 139
large readwrite = Yes
max protocol = NT1
min protocol = CORE
read bmpx = No
read raw = Yes
write raw = Yes
disable netbios = No
reset on zero vc = No
acl compatibility = auto
defer sharing violations = Yes
nt pipe support = Yes
nt status support = Yes
announce version = 4.9
announce as = NT
max mux = 50
max xmit = 16644
name resolve order = lmhosts wins host bcast
max ttl = 259200
max wins ttl = 518400
min wins ttl = 21600
time server = No
unix extensions = Yes
use spnego = Yes
client signing = auto
server signing = No
client use spnego = Yes
enable asu support = No
svcctl list =
deadtime = 0
getwd cache = Yes
keepalive = 300
kernel change notify = Yes
fam change notify = Yes
lpq cache time = 30
max smbd processes = 0
paranoid server security = Yes
max disk size = 0
max open files = 10000
open files database hash size = 10007
socket options = TCP_NODELAY SO_RCVBUF=32768 SO_SNDBUF=32768
use mmap = Yes
hostname lookups = No
name cache timeout = 660
load printers = No
printcap cache time = 750
printcap name =
cups server =
iprint server =
disable spoolss = No
addport command =
enumports command =
addprinter command =
deleteprinter command =
show add printer wizard = Yes
os2 driver map =
mangling method = hash2
mangle prefix = 1
max stat cache size = 0
stat cache = Yes
machine password timeout = 604800
add user script =
rename user script =
delete user script =
add group script =
delete group script =
add user to group script =
delete user from group script =
set primary group script =
add machine script =
shutdown script =
abort shutdown script =
username map script =
logon script =
logon path =
logon drive =
logon home =
domain logons = No
os level = 20
lm announce = Auto
lm interval = 60
preferred master = No
local master = No
domain master = No
browse list = Yes
enhanced browsing = Yes
dns proxy = No
wins proxy = No
wins server =
wins support = No
wins hook =
kernel oplocks = Yes
lock spin count = 3
lock spin time = 10
oplock break wait time = 0
ldap admin dn =
ldap delete dn = No
ldap group suffix =
ldap idmap suffix =
ldap machine suffix =
ldap passwd sync = no
ldap replication sleep = 1000
ldap suffix =
ldap ssl = no
ldap timeout = 15
ldap page size = 1024
ldap user suffix =
add share command =
change share command =
delete share command =
eventlog list =
config file =
preload =
lock directory = /var/cache/samba
pid directory = /var/run/samba
utmp directory =
wtmp directory =
utmp = No
default service =
message command =
get quota command =
set quota command =
remote announce =
remote browse sync =
socket address = 0.0.0.0
homedir map =
afs username map =
afs token lifetime = 604800
log nt token command =
time offset = 0
NIS homedir = No
usershare allow guests = No
usershare max shares = 0
usershare owner only = Yes
usershare path = /var/cache/samba/usershares
usershare prefix allow list =
usershare prefix deny list =
usershare template share =
panic action =
host msdfs = Yes
passdb expand explicit = No
idmap backend =
idmap uid =
idmap gid =
template homedir = /home/%D/%U
template shell = /bin/false
winbind separator = \
winbind cache time = 300
winbind enum users = No
winbind enum groups = No
winbind use default domain = No
winbind trusted domains only = No
winbind nested groups = Yes
winbind nss info = template
winbind refresh tickets = No
winbind offline logon = No
comment =
path =
username =
invalid users =
valid users =
admin users =
read list =
write list =
printer admin =
force user =
force group =
rea
И сейчас не работает только на ноуте.
Load smb config files from /etc/samba/smb.conf
Processing section "[data]"
Processing section "[cdrom]"
Processing section "[info]"
Processing section "[flash]"
Processing section "[flash2]"
Processing section "[tmp]"
Loaded services file OK.
Server role: ROLE_STANDALONE
Press enter to see a dump of your service definitions
[global]
dos charset = 866
unix charset = UTF-8
display charset = LOCALE
workgroup = domain
netbios name = WDM
netbios aliases =
netbios scope =
server string = worsediablo
interfaces = eth0, wlan0, lo
bind interfaces only = No
security = USER
auth methods =
encrypt passwords = Yes
update encrypted = No
client schannel = Auto
server schannel = Auto
allow trusted domains = Yes
map to guest = Bad User
null passwords = No
obey pam restrictions = No
password server = *
smb passwd file = /var/lib/samba/private/smbpasswd
private dir = /var/lib/samba/private
passdb backend = smbpasswd
algorithmic rid base = 1000
root directory =
guest account = nobody
enable privileges = Yes
pam password change = No
passwd program =
passwd chat = *new*password* %n\n *new*password* %n\n *changed*
passwd chat debug = No
passwd chat timeout = 2
check password script =
username map =
password level = 0
username level = 0
unix password sync = No
restrict anonymous = 0
lanman auth = Yes
ntlm auth = Yes
client NTLMv2 auth = No
client lanman auth = Yes
client plaintext auth = Yes
preload modules =
use kerberos keytab = No
log level = 5
syslog = 1
syslog only = No
log file = /var/log/samba/log.%m
max log size = 50
debug timestamp = Yes
debug hires timestamp = No
debug pid = No
debug uid = No
enable core files = Yes
smb ports = 445 139
large readwrite = Yes
max protocol = NT1
min protocol = CORE
read bmpx = No
read raw = Yes
write raw = Yes
disable netbios = No
reset on zero vc = No
acl compatibility = auto
defer sharing violations = Yes
nt pipe support = Yes
nt status support = Yes
announce version = 4.9
announce as = NT
max mux = 50
max xmit = 16644
name resolve order = lmhosts wins host bcast
max ttl = 259200
max wins ttl = 518400
min wins ttl = 21600
time server = No
unix extensions = Yes
use spnego = Yes
client signing = auto
server signing = No
client use spnego = Yes
enable asu support = No
svcctl list =
deadtime = 0
getwd cache = Yes
keepalive = 300
kernel change notify = Yes
fam change notify = Yes
lpq cache time = 30
max smbd processes = 0
paranoid server security = Yes
max disk size = 0
max open files = 10000
open files database hash size = 10007
socket options = TCP_NODELAY SO_RCVBUF=32768 SO_SNDBUF=32768
use mmap = Yes
hostname lookups = No
name cache timeout = 660
load printers = No
printcap cache time = 750
printcap name =
cups server =
iprint server =
disable spoolss = No
addport command =
enumports command =
addprinter command =
deleteprinter command =
show add printer wizard = Yes
os2 driver map =
mangling method = hash2
mangle prefix = 1
max stat cache size = 0
stat cache = Yes
machine password timeout = 604800
add user script =
rename user script =
delete user script =
add group script =
delete group script =
add user to group script =
delete user from group script =
set primary group script =
add machine script =
shutdown script =
abort shutdown script =
username map script =
logon script =
logon path =
logon drive =
logon home =
domain logons = No
os level = 20
lm announce = Auto
lm interval = 60
preferred master = No
local master = No
domain master = No
browse list = Yes
enhanced browsing = Yes
dns proxy = No
wins proxy = No
wins server =
wins support = No
wins hook =
kernel oplocks = Yes
lock spin count = 3
lock spin time = 10
oplock break wait time = 0
ldap admin dn =
ldap delete dn = No
ldap group suffix =
ldap idmap suffix =
ldap machine suffix =
ldap passwd sync = no
ldap replication sleep = 1000
ldap suffix =
ldap ssl = no
ldap timeout = 15
ldap page size = 1024
ldap user suffix =
add share command =
change share command =
delete share command =
eventlog list =
config file =
preload =
lock directory = /var/cache/samba
pid directory = /var/run/samba
utmp directory =
wtmp directory =
utmp = No
default service =
message command =
get quota command =
set quota command =
remote announce =
remote browse sync =
socket address = 0.0.0.0
homedir map =
afs username map =
afs token lifetime = 604800
log nt token command =
time offset = 0
NIS homedir = No
usershare allow guests = No
usershare max shares = 0
usershare owner only = Yes
usershare path = /var/cache/samba/usershares
usershare prefix allow list =
usershare prefix deny list =
usershare template share =
panic action =
host msdfs = Yes
passdb expand explicit = No
idmap backend =
idmap uid =
idmap gid =
template homedir = /home/%D/%U
template shell = /bin/false
winbind separator = \
winbind cache time = 300
winbind enum users = No
winbind enum groups = No
winbind use default domain = No
winbind trusted domains only = No
winbind nested groups = Yes
winbind nss info = template
winbind refresh tickets = No
winbind offline logon = No
comment =
path =
username =
invalid users =
valid users =
admin users =
read list =
write list =
printer admin =
force user =
force group =
rea
не, user рулит.а можно узнать почему?
ибо в этом случае клиента требуют присылать пару юзер-пароль при подключении к серверу => не требуется костылей для определения имени пользователя.
далее см man smb.conf
далее см man smb.conf
Шара на виндовом разделе?
убедись что у тебя есть юзер nobody в /etc/passwd и в /etc/samba/private/smbpasswd и что он имеет право на чтение директории которую ты share
bonus: /var/log/samba/
bonus: /var/log/samba/
разумеется нет.
у меня виндовый раздел на vmware
у меня виндовый раздел на vmware
bonus: /var/log/samba/
я умею читать логи.
я могу запостить что туда пишется при запросе, мне это не помогает.
Насколько обязательно наличие пользователя nobody в файле /etc/samba/private/smbpasswd?
msdfs proxy = no
вот это зачем?
вот это зачем?
не знаю.
стоит как параметр, вроде не мешает.
стоит как параметр, вроде не мешает.
читал, для чего он нужен и что у него в значении пишется?
man smb.conf
man smb.conf
читал, для чего он нужен и что у него в значении пишетсяЧитал. не понял.
Правда, если эту строчку закоментить samba сразу работать начинает.
Спасибо.
но появился другой вопрос
есть другая машина, на которой в шарах прописано
msdfs proxy = no
и при этом samba работает.
есть другая машина, на которой в шарах прописано
msdfs proxy = no
и при этом samba работает.
Без GUI современному продвинутому (то есть не умеющему читать) человеку - никуда.!
это не флаг а ссылка на шару другой машины
Example: msdfs proxy = \otherserver\someshare
Example: msdfs proxy = \otherserver\someshare
то есть при запросе, он пытается искать комп "no" ?
типа того
Оставить комментарий
megan
есть samba-3.0.24 на ноуте под gentooдругие компы могут зайти на сам компьютер по самбе (как виндовые так и линуксовые)
а вот в конкретную шару, например smb://host.domain/data не могут.
с правами на папки все нормально.
Можете что-нибудь посоветовать?