Re: FedoraCore 6 smbd /write acces problem



Hi:

Don't know if you got it figured out already. But i thought, it could be
a bit of help. I experienced the problem before; and it turned out to be
SELinux restrictions.I fixed it by the GUI
"System->Administration->Security Level and Firewall"; then check on
these 2 boxes below:

- "Allow Samba to share users home directories"
- "Allow Samba to write files in directories labeled public_content_rw_t


Khem

On Tue, 2007-02-06 at 17:35 +0000, Anne Wilson wrote:
On Tuesday 06 February 2007 16:39, Andrada Meda Felegean wrote:
Hello to All,

I have installed Fedora Core 6 (Zod) on a machine meant to sustain the
WinMentor database for an internal network. I have configured smb.conf and
tested it with testparm and everything went OK. [root@CIEmentor usr]#
testparm
Load smb config files from /etc/samba/smb.conf
Processing section "[CIEWinMentor]"
Loaded services file OK.
Server role: ROLE_STANDALONE
Press enter to see a dump of your service definitions
[root@CIEmentor usr]#

Here is my smb.conf file:
#======================= Global Settings
===================================== [global]
workgroup = MATRICON
server string = Mentor Server
security = share
hosts allow = 192.168.0.
guest account = root
log file = /var/log/samba/%m.log
max log size = 50
local master = no
os level = 33
preferred master = no
dns proxy = no
add machine script = /usr/sbin/adduser -n -g machines -c Machine -d
/dev/null -s /bin/false %u #============================ Share Definitions
============================== [CIEWinMentor]
comment = CIE WinMentor Databases
path = /usr/mentor
guest ok = yes
writable = yes
create mask = 777
sync always = yes
hosts allow = 192.168.0.9 192.168.0.10
public = yes

The problem is that when i try to create a new file or folder from the
browser, my acces is denied. I am able to see and access the folders/files
that i have already copied on the Hdd, i am able to copy data and create
new directories via ssh connection, but i have no write access from the
browser. The error that i receive is:

[root@CIEmentor usr]# tail -f /var/log/messages
Feb 6 15:54:49 CIEmentor kernel: audit(1170770089.930:70): avc: denied {
write } for pid=12486 comm="smbd" name="mentor" dev=dm-0 ino=7791439
scontext=root:system_r:smbd_t:s0 tcontext=root:object_r:usr_t:s0 tclass=dir
Feb 6 15:54:49 CIEmentor kernel: audit(1170770089.934:71): avc: denied {
write } for pid=12486 comm="smbd" name="mentor" dev=dm-0 ino=7791439
scontext=root:system_r:smbd_t:s0 tcontext=root:object_r:usr_t:s0 tclass=dir
Feb 6 15:54:49 CIEmentor kernel: audit(1170770089.934:72): avc: denied {
write } for pid=12486 comm="smbd" name="mentor" dev=dm-0 ino=7791439
scontext=root:system_r:smbd_t:s0 tcontext=root:object_r:usr_t:s0 tclass=dir
Feb 6 15:54:49 CIEmentor kernel: audit(1170770089.938:73): avc: denied {
write } for pid=12486 comm="smbd" name="mentor" dev=dm-0 ino=7791439
scontext=root:system_r:smbd_t:s0 tcontext=root:object_r:usr_t:s0 tclass=dir

What can go wrong?

/usr/anything is not considered a good place for shared directories. Take a
look at

ls -l /usr/

Also, I wouldn't be happy with the line

guest account = root

Anne
--
fedora-list mailing list
fedora-list@xxxxxxxxxx
To unsubscribe: https://www.redhat.com/mailman/listinfo/fedora-list

--
fedora-list mailing list
fedora-list@xxxxxxxxxx
To unsubscribe: https://www.redhat.com/mailman/listinfo/fedora-list



Relevant Pages

  • Re: Same question, still no answer!!!
    ... You'd be happier buying Win 2000 Server. ... > to use) but the other 4 pc's all only share a "temp" folder. ... > Expectation #1) keep the ethernet more or less as is. ... > this Guest account just moves the problem to item #2. ...
    (microsoft.public.windowsxp.basics)
  • Re: Shared folder access problem
    ... Could you please post the results of an ipconfig /all for the server and ... I also noticed the following two events in the client application log: ... The browser was unable to retrieve a list of servers from ... I setup a folder. ...
    (microsoft.public.windows.server.sbs)
  • Re: mobile 6 cant access shares
    ... The event viewer on the server though shows a successful login. ... We had no problems accessing the folder with the Mobile running the PC ... SBS showed a user Guest as being connected. ... So i enabled guest and gave the Guest account full control to the folder ...
    (microsoft.public.pocketpc.phone_edition)
  • Re: mobile 6 cant access shares
    ... The event viewer on the server though shows a successful login. ... had no problems accessing the folder with the Mobile running the PC 2003. ... SBS showed a user Guest as being connected. ... So i enabled guest and gave the Guest account full control to the folder ...
    (microsoft.public.pocketpc.phone_edition)
  • Re: Web page is not updating?
    ... I have a folder on drive d: of my server named personal. ... This is linked to a virtual directory on my IIS also named personal ... > I would think it'd be more of a browser issue. ...
    (microsoft.public.inetserver.iis)