Fedora-Fr

Ce site est optimisé pour être consulté depuis un navigateur moderne dans lequel JavaScript est activé.

Problèmes de droits...

cortezz

Bonjour,

J'ai réussi à partager un document sur mon pc équipé de fédora 8 pour permettre à mon portable avec xp de le consulter.
Mais j'ai un autre problème... je vois le dossier partagé, mais je n'arrive pas à y entrer, j'ai bataillé avec samba, créé des utilisateurs, mais rien n'y fait samba me laisse pas entrer...

Quelle est le problème? je veux simplement partager un fichier :@
voici mon fichier smb.conf:

#======================= Global Settings =====================================

[global]

# ----------------------- Netwrok Related Options -------------------------
#
workgroup = FEDORA
#
# server string is the equivalent of the NT Description field
#
# netbios name can be used to specify a server name not tied to the hostname
#
# Interfaces lets you configure Samba to use multiple interfaces
# If you have multiple network interfaces then you can list the ones
# you want to listen on (never omit localhost)
#
# Hosts Allow/Hosts Deny lets you restrict who can connect, and you can
# specifiy it as a per share option as well
#
server string = Samba Server Version %v

; netbios name = MYSERVER

; interfaces = lo eth0 192.168.1.3/255.255.255.0
;

# --------------------------- Logging Options -----------------------------
#
# Log File let you specify where to put logs and how to split them up.
#
# Max Log Size let you specify the max size log files should reach

# logs split per machine
log file = /var/log/samba/log.%m
# max 50KB per log file, then rotate
max log size = 50

# ----------------------- Standalone Server Options ------------------------
#
# Scurity can be set to user, share(deprecated) or server(deprecated)
#
# Backend to store user information in. New installations should
# use either tdbsam or ldapsam. smbpasswd is available for backwards
# compatibility. tdbsam requires no further configuration.

security = share
passdb backend = tdbsam

# ----------------------- Domain Members Options ------------------------
#
# Security must be set to domain or ads
#
# Use the realm option only with security = ads
# Specifies the Active Directory realm the host is part of
#
# Backend to store user information in. New installations should
# use either tdbsam or ldapsam. smbpasswd is available for backwards
# compatibility. tdbsam requires no further configuration.
#
# Use password server option only with security = server or if you can't
# use the DNS to locate Domain Controllers
# The argument list may include:
# password server = My_PDC_Name [My_BDC_Name] [My_Next_BDC_Name]
# or to auto-locate the domain controller/s
# password server = *

; security = user
; passdb backend = tdbsam
; realm = MY_REALM

; password server = <NT-Server-Name>

# ----------------------- Domain Controller Options ------------------------
#
# Security must be set to user for domain controllers
#
# Backend to store user information in. New installations should
# use either tdbsam or ldapsam. smbpasswd is available for backwards
# compatibility. tdbsam requires no further configuration.
#
# Domain Master specifies Samba to be the Domain Master Browser. This
# allows Samba to collate browse lists between subnets. Don't use this
# if you already have a Windows NT domain controller doing this job
#
# Domain Logons let Samba be a domain logon server for Windows workstations.
#
# Logon Scrpit let yuou specify a script to be run at login time on the client
# You need to provide it in a share called NETLOGON
#
# Logon Path let you specify where user profiles are stored (UNC path)
#
# Various scripts can be used on a domain controller or stand-alone
# machine to add or delete corresponding unix accounts
#
; security = user
; passdb backend = tdbsam

; domain master = yes
; domain logons = yes

# the login script name depends on the machine name
; logon script = %m.bat
# the login script name depends on the unix user used
; logon script = %u.bat
; logon path = \%L\Profiles\%u
# disables profiles support by specifing an empty path
; logon path =

; add user script = /usr/sbin/useradd "%u" -n -g users
; add group script = /usr/sbin/groupadd "%g"
; add machine script = /usr/sbin/useradd -n -c "Workstation (%u)" -M -d /nohome -s /bin/false "%u"
; delete user script = /usr/sbin/userdel "%u"
; delete user from group script = /usr/sbin/userdel "%u" "%g"
; delete group script = /usr/sbin/groupdel "%g"

# ----------------------- Browser Control Options ----------------------------
#
# set local master to no if you don't want Samba to become a master
# browser on your network. Otherwise the normal election rules apply
#
# OS Level determines the precedence of this server in master browser
# elections. The default value should be reasonable
#
# Preferred Master causes Samba to force a local browser election on startup
# and gives it a slightly higher chance of winning the election
; local master = no
; os level = 33
; preferred master = yes

#----------------------------- Name Resolution -------------------------------
# Windows Internet Name Serving Support Section:
# Note: Samba can be either a WINS Server, or a WINS Client, but NOT both
#
# - WINS Support: Tells the NMBD component of Samba to enable it's WINS Server
#
# - WINS Server: Tells the NMBD components of Samba to be a WINS Client
#
# - WINS Proxy: Tells Samba to answer name resolution queries on
# behalf of a non WINS capable client, for this to work there must be
# at least one WINS Server on the network. The default is NO.
#
# DNS Proxy - tells Samba whether or not to try to resolve NetBIOS names
# via DNS nslookups.

; wins support = yes
; wins server = w.x.y.z
; wins proxy = yes

; dns proxy = yes

# --------------------------- Printing Options -----------------------------
#
# Load Printers let you load automatically the list of printers rather
# than setting them up individually
#
# Cups Options let you pass the cups libs custom options, setting it to raw
# for example will let you use drivers on your Windows clients
#
# Printcap Name let you specify an alternative printcap file
#
# You can choose a non default printing system using the Printing option

load printers = yes
cups options = raw
restrict anonymous = no
domain master = no
preferred master = no
max protocol = NT
acl compatibility = winnt
ldap ssl = No
server signing = Auto
guest account = no
map to guest = Bad User
guest ok = yes

; printcap name = /etc/printcap
#obtain list of printers automatically on SystemV
; printcap name = lpstat
; printing = cups

# --------------------------- Filesystem Options ---------------------------
#
# The following options can be uncommented if the filesystem supports
# Extended Attributes and they are enabled (usually by the mount option
# user_xattr). Thess options will let the admin store the DOS attributes
# in an EA and make samba not mess with the permission bits.
#
# Note: these options can also be set just per share, setting them in global
# makes them the default for all shares

; map archive = no
; map hidden = no
; map read only = no
; map system = no
; store dos attributes = yes

#============================ Share Definitions ==============================

[homes]
comment = Home Directories
browseable = no
#read only = no
;# valid users = %S
;# valid users = MYDOMAIN\%S

[printers]
comment = All Printers
path = /var/spool/samba
browseable = no
printable = yes

[Disque sur Jessy]
path = /disque2

pmarion

Si tu désires accéder as 'Disque sur Jessy' je te conseille un nom de partage plus simple 'Jessy', encore qu'avec xp cela devrait fonctionner.

Pour les droits peux-tu faire un :
ls -ld /disque2

Pour voir ce qui se passe, peux tu, après un accès infructueux à partir de ton xp, regarder les logs de samba dans /var/log/samba.

On vérifiera ta config par la suite

cortezz

salut pmarion,

Selon les logs, j'ai permission non accordée :s
voici mon ls - ld disque2
[root@jessy lexington]# ls -ld disque2
drwxr-xr-x 19 root root 16384 jan 1 1970 disque2

je vois bien que groupe et autres ne conviennent pas( selon moi ) et j'ai essayé de changer avec chmod les droits en drwxr-rwx-rwx, mais j'y arrive pas 🙁
Sous la session root, je change les droits sur le repertoire directement, mais dès que je reviens sur ceux-ci, ils apparaissent comme si je n'avais rien modifier...
pourriez vous m'indiquer la commande chmod correcte?

pmarion

Si tu fais
chmod 777 /disque2
tu devrais avoir
ls -ld /disque2
drwxrwxrwx 19 root root 16384 jan 1 1970 disque2

Mais comment montes-tu disque2
Est-ce un disque externe

Ce qui m'étonne, c'est 'jan 1 1970' pour /disque2

cortezz

ben j'ai fais le chmod 777 et ça ne change rien aux droits...

root@jessy lexington]# ls -ld disque2
drwxr-xr-x 19 root root 16384 jan 1 1970 disque2

c'est un disque dur interne que j'ai rajouté à mon pc,
dans /etc/fstab

j'ai rentré :

/dev/sdb2 /home/lexington/disque2 vfat rw,quiet,auto,users 1 1

puis j'ai fais un mount -a voila...

pmarion

ls -ld /home
ls -ld /home/lexington
ls -ld /home/lexington/disque2

cortezz

Bon en faite ça n'avait rien à voir avec les droits du dossier...
setroubleshoot m'a donné la réponse, fallait etiquetter le partage dans samba
en tapant :
sudo chcon -R -t samba_share_t '/home/lexington/disque2'

maintenant je peux accéder via xp à mon partage sur fedora.
Voila pour ceux qui rencontreront le même problème...

pmarion

cortezz wrote:Selon les logs, j'ai permission non accordée

Quels logs ?
Quels étaient les messages d'erreur ?

cortezz

Ben dans /var/log/samba

jai un fichier log.[adresseIp de mon portabe]

et j'ai plein de ligne

smbd/service.c:make_connection_snum(1003)
'/home/lexington/disque2' does not exist or permission denied when connecting to [DISQUE2] Error was permission non accordée

donc j'ai juste rajouté :

sudo chcon -R -t samba_share_t '/home/lexington/disque2'

et c'est bon je peux entrer dans le repertoire et copier ce que je veux.