Groups > eComStation > eComStation networking > Re: Samba Server - access denied




Samba Server - access denied

Samba Server - access denied
Thu, 26 Jul 2007 11:42:15 +020
System eCS 1.25. Samba server 3.0.25b installed like in 
http://svn.netlabs.org/samba is running.

I have defined 2 resources like this :

[D]
    comment = Dysk D
    path = d:/
    public = no
    writable = yes
    printable = no
    valid users = lesiok
    create mask = 0665
    directory mask = 0775


Client eCS 1.25 with IBM LAN Client logged as lesiok.
I can create directories, read and write existing files but can't create 
new files. I have ACCESS DENIED error. This same I observe with Win XP.

What is wrong in resource definition ?

-- 

Best regards

Post Reply
Re: Samba Server - access denied
Thu, 26 Jul 2007 12:47:08 +020
Leszek KUBRAK wrote:
> System eCS 1.25. Samba server 3.0.25b installed like in 
> http://svn.netlabs.org/samba is running.
> 
> I have defined 2 resources like this :
> 
> [D]
>    comment = Dysk D
>    path = d:/
>    public = no
>    writable = yes
>    printable = no
>    valid users = lesiok
>    create mask = 0665
>    directory mask = 0775
> 
> 
> Client eCS 1.25 with IBM LAN Client logged as lesiok.
> I can create directories, read and write existing files but can't create 
> new files. I have ACCESS DENIED error. This same I observe with Win XP.
> 
> What is wrong in resource definition ?
> 

Strange, Win 2000 client is working.

-- 

Best regards

Post Reply
Re: Samba Server - access denied
Fri, 27 Jul 2007 07:13:13 GMT
On Thu, 26 Jul 2007 09:42:15 UTC, Leszek KUBRAK <lesiok@infokub.com.pl>
wrote:
Hi Leszek,

> I have defined 2 resources like this :
>  
> [D]
>     comment = Dysk D
>     path = d:/
>     public = no

I don't know the OS/2 port for the Samba server 
(but used Linux/MAC-OSX versions).

For an OS/2 port the 'D:/' looks a bit supicious, 
I would expect 'D:\'

Unless they stick to Unix standards there too, or accept both ...

Regards, JvW


-- 
Post Reply
Re: Samba Server - access denied
Fri, 27 Jul 2007 09:34:08 +020
Jan van Wijk wrote:
> On Thu, 26 Jul 2007 09:42:15 UTC, Leszek KUBRAK
<lesiok@infokub.com.pl> wrote:
> Hi Leszek,
> 
>> I have defined 2 resources like this :
>>  
>> [D]
>>     comment = Dysk D
>>     path = d:/
>>     public = no
> 
> I don't know the OS/2 port for the Samba server 
> (but used Linux/MAC-OSX versions).
> 
> For an OS/2 port the 'D:/' looks a bit supicious, 
> I would expect 'D:\'
> 
> Unless they stick to Unix standards there too, or accept both ...
> 
> Regards, JvW
> 
> 

Using slashes (/) is correct.
In many ports from Unix to OS/2 You must use slashes in dir paths.

-- 

Best regards

Post Reply
Re: Samba Server - access denied
Tue, 31 Jul 2007 02:23:09 +020
Leszek KUBRAK wrote:
> System eCS 1.25. Samba server 3.0.25b installed like in 
> http://svn.netlabs.org/samba is running.
> 
> I have defined 2 resources like this :
> 
> [D]
>    comment = Dysk D
>    path = d:/
>    public = no
>    writable = yes
>    printable = no
>    valid users = lesiok
>    create mask = 0665
>    directory mask = 0775
> 
> 
> Client eCS 1.25 with IBM LAN Client logged as lesiok.
> I can create directories, read and write existing files but can't create 
> new files. I have ACCESS DENIED error. This same I observe with Win XP.
> 
> What is wrong in resource definition ?
> 

Be prepared for a long reply.

I replicated a share like this on eCS 1.2 using samba server and VPC.
The smb.conf was:

[global]
workgroup = VPC
netbios name = os2server
server string = Samba %v op %h
interfaces = 192.168.123.6/255.255.255.0
bind interfaces only = Yes
; Again, bind to LAN interface only
hosts allow = 192.168.123.0/255.255.255.0
hosts deny = 0.0.0.0/0
os level = 40
lm announce = Yes
wins support = No
; name resolve order = hosts bcast
name resolve order =  hosts bcast lmhosts
;My Linux samba server is the domain master on thuis
;This one uses the domain VPC
preferred master = Yes
local master = Yes
domain logons = Yes
domain master = Yes
printing = bsd
printcap name = f:/mptn/etc/printcap
; printing = cups
; printcap name = cups
print command = lpr
printer name = HPColorL
load printers = no

guest account = guest
; null passwords = no
security = USER
encrypt passwords = Yes
; An alternative: not needed for the LANMAN2 encrypted passwords from OS/2
; encrypt passwords = No
; update encrypted = Yes
; unix password sync probably dos not work under OS/2 (not tested yet).
unix password sync = no
log level = 2
dos charset = CP850
unix charset = CP850
display charset = LOCALE
ea support = Yes

;  This next option sets a separate log file for each client. Remove
;  it if you want a combined log file.
    log file = log.%m

;  You will need a world readable lock directory and "share
modes=yes"
;  if you want to support the file sharing modes for multiple users
;  of the same files
;  lock directory = /usr/local/samba/var/locks


;  share modes = yes


[homes]
    comment = Home Directories
    browseable = yes
    read only = no
    create mode = 0750

[D]
    comment = Dysk D
    path = u:/test
    public = no
    writable = yes
    printable = no
    valid users = sjoerd
    create mask = 0665
    directory mask = 0775


[IPC$]
     path = u:/tmp
     guest ok = yes
     valid users =


[printers]
    comment = All Printers
    browseable = no
    printable = yes
    public = no
    writable = no
    create mode = 0700

[werk]
    comment = werk
    read only = no
    path = u:/werk



I had some questions with your
	create mask = 0665
	directory mask = 0775
As the OS/2 JFS or HPFS are not supposed to support them.
The shares were laid down on JFS (who knows we detect some JFS hidden
features ;-).

This configuration loads well:

[U:\USR\LOCAL\SAMBA]smbd.exe -i -d2  2>&1
Server priority set to PRTYC_FOREGROUNDSERVER
smbd version 3.0.25rc3 started.
Copyright Andrew Tridgell and the Samba Team 1992-2007
uid=0 gid=0 euid=0 egid=0
creating default valid table
Processing section "[homes]"
Processing section "[D]"
Processing section "[IPC$]"
Processing section "[printers]"
WARNING: No path in service printers - making it unavailable!
NOTE: Service printers is flagged unavailable.
Processing section "[werk]"
added interface ip=192.168.123.6 bcast=192.168.123.255 nmask=255.255.255.0
file_init: Information only: requested 10000 open files, 9980 are available.
Registered MSG_REQ_POOL_USAGE
Registered MSG_REQ_DMALLOC_MARK and LOG_CHANGED
WARNING: Winbindd not running, mapping ids with legacy code
WARNING: Winbindd not running, mapping ids with legacy code
WARNING: Winbindd not running, mapping ids with legacy code
WARNING: Winbindd not running, mapping ids with legacy code
WARNING: Winbindd not running, mapping ids with legacy code
WARNING: Winbindd not running, mapping ids with legacy code
WARNING: Winbindd not running, mapping ids with legacy code
WARNING: Winbindd not running, mapping ids with legacy code
WARNING: Winbindd not running, mapping ids with legacy code
WARNING: Winbindd not running, mapping ids with legacy code
WARNING: Winbindd not running, mapping ids with legacy code
waiting for a connection


And nmbd:

Netbios nameserver version 3.0.25rc3 started.
Copyright Andrew Tridgell and the Samba Team 1992-2007
creating default valid table
params.c:Parameter() - Ignoring badly formed line in configuration file:
you might also want this one, notice that it is read only so as not to
giveparams.c:Parameter() - Ignoring badly formed line in configuration
file: people without an account write access.
standard input is not a socket, assuming -D option
Registered MSG_REQ_POOL_USAGE
Registered MSG_REQ_DMALLOC_MARK and LOG_CHANGED
added interface ip=192.168.123.6 bcast=192.168.123.255 nmask=255.255.255.0
making subnet name:192.168.123.6 Broadcast address:192.168.123.255
Subnet mask:255.255.255.0
making subnet name:UNICAST_SUBNET Broadcast address:0.0.0.0 Subnet
mask:0.0.0.0
making subnet name:REMOTE_BROADCAST_SUBNET Broadcast address:0.0.0.0
Subnet mask:0.0.0.0
add_domain_logon_names:
Attempting to become logon server for workgroup VPC on subnet 192.168.123.6
become_logon_server: Atempting to become logon server for workgroup VPC
on subnet 192.168.123.6
become_domain_master_browser_bcast:
Attempting to become domain master browser on workgroup VPC on subnet
192.168.123.6
become_domain_master_browser_bcast: querying subnet 192.168.123.6 for
domain master browser on workgroup VPC
become_logon_server_success: Samba is now a logon server for workgroup
VPC on subnet 192.168.123.6
become_domain_master_stage1: Becoming domain master browser for
workgroup VPC on subnet 192.168.123.
6
send_election_dgram: Sending election packet for workgroup VPC on subnet
192.168.123.6
send_election_dgram: Sending election packet for workgroup VPC on subnet
192.168.123.6
*****

Samba server OS2SERVER is now a domain master browser for workgroup VPC
on subnet 192.168.123.6

*****
send_election_dgram: Sending election packet for workgroup VPC on subnet
192.168.123.6
send_election_dgram: Sending election packet for workgroup VPC on subnet
192.168.123.6
send_election_dgram: Sending election packet for workgroup VPC on subnet
192.168.123.6
run_elections: >>> Won election for workgroup VPC on subnet
192.168.123.6 <<<
become_local_master_browser: Starting to become a master browser for
workgroup VPC on subnet 192.168
.123.6
*****

Samba name server OS2SERVER is now a local master browser for workgroup
VPC on subnet 192.168.123.6

*****

I could access the share using WinXP Home under VPC.

The os2server does not show up in the domain VPC
But mapping //os2erver/D worked fine.

According to Fayo (great freeware utility. Try it on XP!)
http://www.fajo.de/portal/index.php?lang=en&option=content&task=view&
;id=6&Itemid=0

The permissions in a newly created map are:
Iedereen (everybody): R -
ID of the valid user = sjoerd: RW -
ID of Root/admin: RW -

Using XP Prof (using no domain!!, being member of the WG thuis) to
access the share:

The domain VPC is shown in the network neighbourhood.
But it does not show the os2server in the domain VPC
But mapping //os2erver/D worked fine.

When viewing the newly made map under XP Prof the permissions are:

0 (Unix group\0): - -
100 (Unix user\100): - -
Iedereen (everybody): - -

Nothing permitted, nothing denied. Normally this would mean that I had
no user rights on the share. But I can create maps and files and edit
them. I get the same results when I create a new map under XP Prof (so
it seems to be permitted!) The freeware Fajo detected my real 
permissions better then the XP Prof.

Anyway, XP Home and Prof may behave differently. And the home edition 
with teh freeware utility Fayo sees the user rights better then XP Prof 
who does not seem to know how to deal with not Windows servers.

How does OS/2 (eCS 1.2) do?


[F:\]net view
Naam server    Opmerking
-------------------------------
\\LAPTOP
\\MULTIBOOT
\\OS2SERVER            SAMBA 3.0.25RC3 OP OS2SERVER
\\XPHOME
\\ZOLDER               SAMBA 3.0.23D-5.1.39-1084-SUSE-SL10.0 AT ZOLDER
De opdracht is uitgevoerd.

[F:\]net view \\os2server
Gemeenschappelijke resources bij \\os2server
Samba 3.0.25rc3 op os2server

naam resource Type         Gebruikt als   Commentaar
---------------------------------------------------------
D            Schijf       (UNC)    Dysk D
homes        Schijf       (UNC)    Home Directories
sjoerd       Schijf                Home Directories
werk         Schijf                werk
De opdracht is uitgevoerd.

[F:\]net use v: \\os2server\D
De opdracht is uitgevoerd.

[F:\]v:

[V:\]dir

The volume label in drive V is D.
The Volume Serial Number is 56C9:0044.
Directory of V:\

31-07-07  0:42          <DIR>    364 ----  .
31-07-07  0:17          <DIR>      0 ----  ..
31-07-07  0:17          <DIR>    124 ----  Nieuwe map
31-07-07  0:42          <DIR>    124 ----  Nieuwe map (2)
31-07-07  0:29          8.078    124 ----  log.xphome
         5 file(s)       8.078 bytes used
                     4.789.714 K bytes free

[V:\]

That's good.
It works. But when I opened V: in drives I got a WPS lock (Jan:
Tuesday 31-07-2007 01:04:36 - Available:   893 256Kb blocks =  223.3
Mb).Using watchcat I could recover from it.

The WPS resets and when I open V: now I get a SYS059.

The dir gives the same results but FC/2 gives on V:

Er is een onverwachte netwerkfout opgetreden. (59)
                        V:\
                       [ OK ]

[F:\]help sys059

SYS0059: Er is een onverwachte netwerkfout opgetreden.

VERKLARING: Het werkstation heeft van het netwerk een foutbericht
ontvangen dat in deze situatie niet werd verwacht.

ACTIE: Herhaal de bewerking. Als het probleem zich blijft
voordoen, raadpleegt u de netwerkbeheerder.

Try it on you pc to get the translation. Or read further.

[I:\OS2BIN\DISK\FC2_220]v:

[V:\]md dir
SYS0059: Er is een onverwachte netwerkfout opgetreden.

Because I use VPC I could see that smb crashed.
Restarting it:

waiting for a connection
Allowed connection from  (192.168.123.5)
netbios connect: name1=OS2SERVER       name2=MULTIBOOT
netbios connect: local=os2server remote=multiboot, name type = 0
setup_new_vc_session: New VC == 0, if NT4.x compatible we would close
all old resources.
WARNING: Winbindd not running, mapping ids with legacy code
check_ntlm_password:  authentication for user [SJOERD] -> [SJOERD] ->
[sjoerd] succeeded
WARNING: Winbindd not running, mapping ids with legacy code
WARNING: Winbindd not running, mapping ids with legacy code
WARNING: Winbindd not running, mapping ids with legacy code
WARNING: Winbindd not running, mapping ids with legacy code
WARNING: Winbindd not running, mapping ids with legacy code
WARNING: Winbindd not running, mapping ids with legacy code
Allowed connection from  (192.168.123.5)
multiboot (192.168.123.5) connect to service D initially as user sjoerd
(uid=100, gid=0) (pid 148)


The connection to multiboot was restored.
The WPS Drives object could open V:
 From V: I could copy an new OOO file to the desktop an open it with OOO.
But when I opened it directly from the share V under the WPS. the WPS 
crashed( I learned to make regular saves from my email messages, 
otherwise this feedback would be lost).
The WPS crash was not due to lack of low memory using OOO:

Its being logged with this documented cmd:

mode co80,50
I:\os2bin\sys\SHMEMMON\c\shmemmon\shmemmon.exe 1 i:\var\log\shmemmon.log 
1024
exit

http://www.dfsee.com/download/shmemmon.zip
Jan van Wijks Monitor shared memory (OS/2 32-bit, incl source) utility 
keeps an eye on low shared memory.
Close Mozilla and OOOrg with values of 10 MB or lower.

Usage: shmemmon interval  [logfile  [maxsize]]
Parameters:  interval    Time between samples in minutes
              logfile     Path and filename for logfile
              maxsize     Maximum size of logfile in Kb

When specified, output will be APPENDED to the logfile.
The size will be limited to the specified maximum with a
default of 512 Kb. At this point the log will be renamed
to '*.old' and a new one will be started

And the log said that there was plenty of (334 being the value after the 
reboot):

Tuesday 31-07-2007 01:15:46 - Available:   982 256Kb blocks =  245.5 Mb
Tuesday 31-07-2007 01:16:47 - Available:   982 256Kb blocks =  245.5 Mb
Tuesday 31-07-2007 01:17:48 - Available:   982 256Kb blocks =  245.5 Mb
Tuesday 31-07-2007 01:20:04 - Available:  1336 256Kb blocks =  334.0 Mb
Tuesday 31-07-2007 01:21:05 - Available:  1239 256Kb blocks =  309.8 Mb


I restarted the os2server (I had to because it was running under VPC).

Using the OS/2 WPS Netwerkverbindingen utility I could see the server. 
but when trying to open a share the WPS crashed.

Using :

[[F:\]net use v: \\os2server\D
De opdracht is uitgevoerd.

[F:\]v:

[V:\]dir

The volume label in drive V is D.
The Volume Serial Number is 56C9:0044.
Directory of V:\

31-07-07  1:17          <DIR>    364 ----  .
31-07-07  0:17          <DIR>      0 ----  ..
31-07-07  0:17          <DIR>    124 ----  Nieuwe map
31-07-07  0:42          <DIR>    124 ----  Nieuwe map (2)
31-07-07  0:29          8.078    124 ----  log.xphome
31-07-07  1:17            396    124 ----  WP ROOT. SF
         6 file(s)       8.474 bytes used
                     4.789.702 K bytes free

I can access it (now under teh WPS and PM/CLI)

BTW The WP ROOT. SF is deletable under the OS/2 WPS. So it must have 
been made under Windows I guess.

Copy a lot of files to V under the WPS:

SJOERD opened file Buxtehude/Buxtehude Dietrich,Jesus dulcis memoria, 
Kantate,live 2004,Kirkby,Chanc
e,Daniels,Harvey,Purcell Quartet.mp3 read=No write=Yes (numopen=2)

And it plays well.

One more note about the sysntaxis (and reply):

[F:\]net use \\os2server\D v:
De opdracht is uitgevoerd.

[F:\]v:
SYS0015: The system cannot find the specified drive.

[F:\]net use v: \\os2server\D
De opdracht is uitgevoerd.

[F:\]v:

[V:\]dir

The volume label in drive V is D.
The Volume Serial Number is 56C9:0044.
Directory of V:\

31-07-07  2:02          <DIR>    364 ----  .
31-07-07  0:17          <DIR>      0 ----  ..
31-07-07  2:11          <DIR>  1.737 ----  Buxtehude
31-07-07  1:52          <DIR>    514 ----  Nieuwe map
31-07-07  0:42          <DIR>    124 ----  Nieuwe map (2)
31-07-07  0:29          8.078    124 ----  log.xphome
31-07-07  2:02            396    124 ----  WP ROOT. SF
         7 file(s)       8.474 bytes used
                     4.521.762 K bytes free


[V:\]cd buxtehude

[V:\buxtehude]dir

The volume label in drive V is D.
The Volume Serial Number is 56C9:0044.
Directory of V:\buxtehude

31-07-07  2:11          <DIR>  1.737 ----  .
31-07-07  2:02          <DIR>    364 ----  ..
31-07-07  2:08      8.364.696    183 ----  Andreas Scholl - Buxtehude - 
Jubilate.mp3
31-07-07  2:03     23.482.619    124 ----  Buxtehude - BuxWV 218 - Te 
Deum laudamus.mp3
31-07-07  2:03    102.811.267    124 ----  Buxtehude - MEMBRA JESU 
NOSTRI - Monteverdi Choir English
  Baroque Soloists (1988) Gardiner - DG_ALBW.mp3
31-07-07  2:09     10.489.545    124 ----  Buxtehude - Passacaglia in d.mp3
31-07-07  2:08      9.973.725    124 ----  Buxtehude - Prelude and Fugue 
in F Major, BuxWV 145.mp3
31-07-07  2:04     23.482.619    124 ----  Buxtehude - Te Deum laudamus 
fr Orgel, BuxWV 218 - 16min1
8.mp3
31-07-07  2:06     36.853.969    252 ----  Buxtehude Dietrich! Wacht! 
Euch zum Streit - Das Jüngste
Gericht, parte 1, La Capella Ducale, Musica Fiata.mp3
31-07-07  2:08     10.165.812    124 ----  Buxtehude Dietrich,Jesus 
dulcis memoria, Kantate,live 200
4,Kirkby,Chance,Daniels,Harvey,Purcell Quartet.mp3
31-07-07  2:07     15.216.431    124 ----  Buxtehude Dietrich,Nichts 
soll uns scheiden von der Liebe
  Gottes,Kantate,live 2004,Kirkby,Chance,Daniels,Harvey,Purcell Quartet.mp3
31-07-07  2:06      3.547.776    124 ----  buxtehude In Dulci Jubilo.mp3
31-07-07  2:07     23.482.875    124 ----  Dietrich Buxtehude - Te Deum 
laudamus, BuxWV 218.mp3
        13 file(s) 267.871.334 bytes used
                     4.521.762 K bytes free

They play well under OS/2
And can be edited using Z!


Post Reply
<< Previous 1 2 3 4 5 Next >>
( Page 1 of 5 )
about | contact