Samba: win to linux fine, natilus (linux) to linux asks for password

Hi!
Basically that is my particular issue, adding that I’ve set it up over openvpn as well, to the same server.

[win -> linux]

  • see public (for existing users) shares and try to enter them
  • when asked for user and password, can see the contents of the public share along with my home folder
  • can see the shared local printer, and open and view current print jobs on the server (cannot print tough, will write another post about that)

[linux to linux]

  • try to access the server via smbclient -L and can see shares ok
  • from nautilus, with the address smb://10.22.22.1 can see the public shares, but it won’t let me in, asking for user, workgroup and password no matter what type.

Huges, peace, love and beer for everyone!

On Thu September 23 2010 11:36 am, mgnome wrote:

>
> Hi!
> Basically that is my particular issue, adding that I’ve set it up over
> openvpn as well, to the same server.
>
> [win -> linux]
> - see public (for existing users) shares and try to enter them
> - when asked for user and password, can see the contents of the public
> share along with my home folder
> - can see the shared local printer, and open and view current print
> jobs on the server (cannot print tough, will write another post about
> that)
>
>
> [linux to linux]
> - try to access the server via smbclient -L and can see shares ok
> - from nautilus, with the address smb://10.22.22.1 can see the public
> shares, but it won’t let me in, asking for user, workgroup and password
> no matter what type.
>
> Huges, peace, love and beer for everyone!
>
>
mgnome;

Go over the HowTo: http://opensuse.swerdna.org/suselanprimer.html
If you can still not get it to work then please post your /etc/samba/smb.conf
files from both linux machines. Make sure to create Samba users on each
linux machine with:


su
smbpasswd -a <username>


P. V.
“We’re all in this together, I’m pulling for you.” Red Green

Thanks!
Well… I have revised those tutorials and I think I don’t get it work.
Please note that at this time I’m in other office so I’m doing all test over the vpn. The vpn is actually the only case that interest me to work.

Perhaps I can revert smb.conf on the server to the version in which doing smbclient -U walter -L 10.22.22.1 used to list my shares on my terminal. I was not aware that I needed to do anything on the client’s smb.conf, so mine is the default of opensuse 11.3 and smb is not enabled as a service.

Now I’ve changed the ip address of the vpn server to 10.14.18.1.

client smb.conf

[global]
	workgroup = WORKGROUP
	passdb backend = tdbsam
	printing = cups
	printcap name = cups
	printcap cache time = 750
	cups options = raw
	map to guest = Bad User
	include = /etc/samba/dhcp.conf
	logon path = \\%L\profiles\.msprofile
	logon home = \\%L\%U\.9xprofile
	logon drive = P:
	usershare allow guests = Yes
[homes]
	comment = Home Directories
	valid users = %S, %D%w%S
	browseable = No
	read only = No
	inherit acls = Yes
[profiles]
	comment = Network Profiles Service
	path = %H
	read only = No
	store dos attributes = Yes
	create mask = 0600
	directory mask = 0700
[users]
	comment = All users
	path = /home
	read only = No
	inherit acls = Yes
	veto files = /aquota.user/groups/shares/
[groups]
	comment = All groups
	path = /home/groups
	read only = No
	inherit acls = Yes
[printers]
	comment = All Printers
	path = /var/tmp
	printable = Yes
	create mask = 0600
	browseable = No
[print$]
	comment = Printer Drivers
	path = /var/lib/samba/drivers
	write list = @ntadmin root
	force group = ntadmin
	create mask = 0664
	directory mask = 0775

server smb.conf

[global]
        workgroup = CXXXXXXX.NET
        netbios name = SERVERCYYYYY01
        passdb backend = tdbsam
        name resolve order  = bcast host lmhosts wins
        server string  =
        map to guest = Bad User
        usershare allow guests = Yes
        wins support = No
        usershare max shares = 100
        #bind interfaces only = yes
        hosts allow = 192.168.1.0/24 10.14.18.0/24 127.0.0.1
        interfaces = 192.168.1.0/24 10.14.18.0/24
        local master = yes
        preferred master = yes
        os level = 65
        printing  = cups
        printcap name = cups
        printcap cache time  = 750
        cups options = raw
        use client driver = yes
        load printers = yes

[homes]
        comment = Carpetas personales
        valid users = %S, %D%w%S
        browseable = No
        read only = No
        inherit acls = Yes

[public]
        comment = Carpeta pública
        path = /home/public
        force user = walter
        force group = users
        read only = No

[printers]
        comment = Impresora en server
        path = /var/spool/samba
        printer admin = root, walter
        create mask = 0700
        guest ok = Yes
        printable = Yes
        use client driver = Yes
        browseable = No

syslog entries include these:

Sep 23 05:26:43 cfs smbd[3861]: [2010/09/23 05:26:43.457672,  0] lib/util_sock.c:1432(get_peer_addr_internal)
Sep 23 05:26:43 cfs smbd[3861]:   getpeername failed. Error was El otro extremo de la conexión no está conectado
Sep 23 05:26:43 cfs smbd[3861]: [2010/09/23 05:26:43.458373,  0] lib/util_sock.c:1432(get_peer_addr_internal)
Sep 23 05:26:43 cfs smbd[3861]:   getpeername failed. Error was El otro extremo de la conexión no está conectado
Sep 23 05:26:43 cfs smbd[3861]: [2010/09/23 05:26:43.458605,  0] lib/access.c:410(check_access)
Sep 23 05:26:43 cfs smbd[3861]: [2010/09/23 05:26:43.458654,  0] lib/util_sock.c:1432(get_peer_addr_internal)
Sep 23 05:26:43 cfs smbd[3861]:   getpeername failed. Error was El otro extremo de la conexión no está conectado
Sep 23 05:26:43 cfs smbd[3861]:   Denied connection from  (0.0.0.0)
Sep 23 05:26:43 cfs smbd[3861]: [2010/09/23 05:26:43.458804,  0] lib/util_sock.c:1432(get_peer_addr_internal)
Sep 23 05:26:43 cfs smbd[3861]:   getpeername failed. Error was El otro extremo de la conexión no está conectado
Sep 23 05:26:43 cfs smbd[3861]:   Connection denied from 0.0.0.0
Sep 23 05:26:43 cfs smbd[3861]: [2010/09/23 05:26:43.458921,  0] lib/util_sock.c:675(write_data)
Sep 23 05:26:43 cfs smbd[3861]: [2010/09/23 05:26:43.458986,  0] lib/util_sock.c:1432(get_peer_addr_internal)
Sep 23 05:26:43 cfs smbd[3861]:   getpeername failed. Error was El otro extremo de la conexión no está conectado
Sep 23 05:26:43 cfs smbd[3861]:   write_data: write failure in writing to client 0.0.0.0. Error Conexión reinicializada por la máquina remota
Sep 23 05:26:43 cfs smbd[3861]: [2010/09/23 05:26:43.459123,  0] smbd/process.c:79(srv_send_smb)
Sep 23 05:26:43 cfs smbd[3861]:   Error writing 5 bytes to client. -1. (El otro extremo de la conexión no está conectado)
Sep 23 05:26:54 cfs kernel:  5096.194678] martian source 192.168.1.102 from 10.14.18.6, on dev eth0
Sep 23 05:26:54 cfs kernel:  5096.194683] ll header: 00:25:22:39:0a:d5:00:26:82:2b:2c:01:08:00

I apologize if I didn’t explained well. I have two issues I’ve separated from each other in the aim of keep a post topic unique.

  1. The print from windows issue [http://forums.opensuse.org/english/get-help-here/network-internet/446914-cups-some-nasty-error-nt_status_unsuccesful.html]
  2. The case of this post: linux to linux from my linux laptop to the linux server trhough openvpn, provided that openvpn and samba are being used with no problem.

On Thu September 23 2010 05:06 pm, mgnome wrote:

>
> Thanks!
> Well… I have revised those tutorials and I think I don’t get it
> work.
> Please note that at this time I’m in other office so I’m doing all test
> over the vpn. The vpn is actually the only case that interest me to
> work.
>
> Perhaps I can revert smb.conf on the server to the version in which
> doing smbclient -U walter -L 10.22.22.1 used to list my shares on my
> terminal. I was not aware that I needed to do anything on the client’s
> smb.conf, so mine is the default of opensuse 11.3 and smb is not enabled
> as a service.
>
> Now I’ve changed the ip address of the vpn server to 10.14.18.1.
>
> CLIENT SMB.CONF
>
> Code:
> --------------------
> [global]
> workgroup = WORKGROUP
> passdb backend = tdbsam
> printing = cups
> printcap name = cups
> printcap cache time = 750
> cups options = raw
> map to guest = Bad User
> include = /etc/samba/dhcp.conf
> logon path = \%L\profiles.msprofile
> logon home = \%L%U.9xprofile
> logon drive = P:
> usershare allow guests = Yes
> [homes]
> comment = Home Directories
> valid users = %S, %D%w%S
> browseable = No
> read only = No
> inherit acls = Yes
> [profiles]
> comment = Network Profiles Service
> path = %H
> read only = No
> store dos attributes = Yes
> create mask = 0600
> directory mask = 0700
> [users]
> comment = All users
> path = /home
> read only = No
> inherit acls = Yes
> veto files = /aquota.user/groups/shares/
> [groups]
> comment = All groups
> path = /home/groups
> read only = No
> inherit acls = Yes
> [printers]
> comment = All Printers
> path = /var/tmp
> printable = Yes
> create mask = 0600
> browseable = No
> [print$]
> comment = Printer Drivers
> path = /var/lib/samba/drivers
> write list = @ntadmin root
> force group = ntadmin
> create mask = 0664
> directory mask = 0775
> --------------------
>
>
> SERVER SMB.CONF
>
> Code:
> --------------------
> [global]
> workgroup = CXXXXXXX.NET
> netbios name = SERVERCYYYYY01
> passdb backend = tdbsam
> name resolve order = bcast host lmhosts wins
> server string =
> map to guest = Bad User
> usershare allow guests = Yes
> wins support = No
> usershare max shares = 100
> #bind interfaces only = yes
> hosts allow = 192.168.1.0/24 10.14.18.0/24 127.0.0.1
> interfaces = 192.168.1.0/24 10.14.18.0/24
> local master = yes
> preferred master = yes
> os level = 65
> printing = cups
> printcap name = cups
> printcap cache time = 750
> cups options = raw
> use client driver = yes
> load printers = yes
>
> [homes]
> comment = Carpetas personales
> valid users = %S, %D%w%S
> browseable = No
> read only = No
> inherit acls = Yes
>
> [public]
> comment = Carpeta pública
> path = /home/public
> force user = walter
> force group = users
> read only = No
>
> [printers]
> comment = Impresora en server
> path = /var/spool/samba
> printer admin = root, walter
> create mask = 0700
> guest ok = Yes
> printable = Yes
> use client driver = Yes
> browseable = No
>
> --------------------
>
<snip>
mgnome;

Set the workgroup parameter in both smb.conf to the same value. I would
suggest you change the workgroup parameter of the client to:


workgroup = CXXXXXXX.NET

Assuming the client and server are on the same subnet (either both on
192.168.1.0/24 or both on 10.14.18.0/24, then also on the client set this
parameter:


name resolve order  = bcast host lmhosts wins

If they are on different subnets, names can not be resolved by bcast and the
easiest way is to use a wins server. In this case modify the smb.conf on the
server by adding/editing to:


wins support = yes
name resolve order = wins bcast host lmhosts

And on the client change the smb.conf to have:


wins server = <IP of server>
name resolve order = wins bcast host lmhosts

You will also need to have the network config on your windows machines point
to your wins server. If you use dhcp for the windows machines, the wins
server can be dished out by the dhcp server. Make sure the IP of the server
stays the same.


P. V.
“We’re all in this together, I’m pulling for you.” Red Green

Well thank you venzkep! Following your suggestions I modified them a little and got his configuration that worked:

Server: I left bcast first in resolve order and wins last
Client: This is my [global] section
workgroup = WORKGROUP #the same as the server’s
passdb backend = tdbsam
wins server = 10.14.18.1
name resolve order = wins bcast host lmhosts
printing = cups
printcap name = cups
printcap cache time = 750
cups options = raw
map to guest = Bad User
include = /etc/samba/dhcp.conf
usershare allow guests = Yes

Best regards!

On Tue October 5 2010 12:36 pm, mgnome wrote:

>
> Well thank you venzkep! Following your suggestions I modified them a
> little and got his configuration that worked:
>
> Server: I left bcast first in resolve order and wins last
> Client: This is my [global] section
> workgroup = WORKGROUP #the same as the server’s
<snip>
>
>
> Best regards!
>
>
Glad to hear you have it all sorted out. Happy to have helped. I read your
private note, but felt it best to keep things on the forum just incase others
had similar problems.

P. V.
“We’re all in this together, I’m pulling for you.” Red Green