[samba] probleme d'acces (droits)

probleme d'acces (droits) [samba] - réseaux et sécurité - Linux et OS Alternatifs

Marsh Posté le 04-01-2003 à 10:50:27    

j'essais d'acceder a un partage samba sur une redhat 8.0 avec un xp sp1, j'arrive bien a voir le rep mais je ne peut y acceder, windows me dit que je n'ai pas les droits.
 
j'ai public = yes  
     writable = no
     printable = no
     
faut il que j'enleve qqch ou que je rajoute ?


---------------
Et toi, tu crois que les ours polaires vont chier dans les bois ?
Reply

Marsh Posté le 04-01-2003 à 10:50:27   

Reply

Marsh Posté le 04-01-2003 à 12:15:26    

Nodus a écrit :

j'essais d'acceder a un partage samba sur une redhat 8.0 avec un xp sp1, j'arrive bien a voir le rep mais je ne peut y acceder, windows me dit que je n'ai pas les droits.
 
j'ai public = yes  
     writable = no
     printable = no
     
faut il que j'enleve qqch ou que je rajoute ?
 


 
les droits du rep (les droits de base) tu les a vérifiés ?


---------------
Bitcoin, Magical Thinking, and Political Ideology
Reply

Marsh Posté le 04-01-2003 à 12:32:03    

yap j'ai fait un chmod 777 sur le rep


---------------
Et toi, tu crois que les ours polaires vont chier dans les bois ?
Reply

Marsh Posté le 04-01-2003 à 12:35:13    

tu as SECURITY=SHARE dans la section 'global' ? (c'est le mode windows pour le partage).


---------------
Celui qui excelle ne discute pas, il maîtrise sa science et se tait.
Reply

Marsh Posté le 04-01-2003 à 12:36:26    

yes for sure


---------------
Et toi, tu crois que les ours polaires vont chier dans les bois ?
Reply

Marsh Posté le 04-01-2003 à 13:11:37    

Il faut que tu cree un utilisateur invite qui ait les droits d'accès à ce rep.

Reply

Marsh Posté le 04-01-2003 à 13:53:40    

je cree un utilisateur avec adduser ? peut on specifier que l'utilisateur n'ai acces qu'a ce rep ?


---------------
Et toi, tu crois que les ours polaires vont chier dans les bois ?
Reply

Marsh Posté le 04-01-2003 à 14:14:45    

Kuei-Saho a écrit :

Il faut que tu cree un utilisateur invite qui ait les droits d'accès à ce rep.


 
pas besoin


---------------
Bitcoin, Magical Thinking, and Political Ideology
Reply

Marsh Posté le 04-01-2003 à 14:18:58    

# This is the main Samba configuration file. You should read the
# smb.conf(5) manual page in order to understand the options listed
# here. Samba has a huge number of configurable options (perhaps too
# many!) most of which are not shown in this example
#
# Any line which starts with a ; (semi-colon) or a # (hash)  
# is a comment and is ignored. In this example we will use a #
# for commentry and a ; for parts of the config file that you
# may wish to enable
#
# NOTE: Whenever you modify this file you should run the command "testparm"
# to check that you have not many any basic syntactic errors.  
#
#======================= Global Settings =====================================
[global]
 
# workgroup = NT-Domain-Name or Workgroup-Name, eg: LINUX2
   workgroup = REZO
 
# server string is the equivalent of the NT Description field
   server string = Samba Server
 
# This option is important for security. It allows you to restrict
# connections to machines which are on your local network. The
# following example restricts access to two C class networks and
# the "loopback" interface. For more examples of the syntax see
# the smb.conf man page
;   hosts allow = 192.168.1. 192.168.2. 127.
 
# If you want to automatically load your printer list rather
# than setting them up individually then you'll need this
   load printers = yes
 
# you may wish to override the location of the printcap file
;   printcap name = /etc/printcap
 
# on SystemV system setting printcap name to lpstat should allow
# you to automatically obtain a printer list from the SystemV spool
# system
;   printcap name = lpstat
 
# It should not be necessary to specify the print system type unless
# it is non-standard. Currently supported print systems include:
# bsd, sysv, plp, lprng, aix, hpux, qnx
;   printing = bsd
 
# Uncomment this if you want a guest account, you must add this to /etc/passwd
# otherwise the user "nobody" is used
;  guest account = pcguest
 
# this tells Samba to use a separate log file for each machine
# that connects
   log file = /var/log/samba.%m
 
# Put a capping on the size of the log files (in Kb).
   max log size = 50
 
# Security mode. Most people will want user level security. See
# security_level.txt for details.  NOTE:  To get the behaviour of
# Samba-1.9.18, you'll need to use "security = share".
   security = share
 
# Use password server option only with security = server
# The argument list may include:
#   password server = My_PDC_Name [My_BDC_Name] [My_Next_BDC_Name]
# or to auto-locate the domain controller/s
#   password server = *
;   password server = <NT-Server-Name>
 
# Note: Do NOT use the now deprecated option of "domain controller"
# This option is no longer implemented.
 
# You may wish to use password encryption. Please read
# ENCRYPTION.txt, Win95.txt and WinNT.txt in the Samba documentation.
# Do not enable this option unless you have read those documents
;  encrypt passwords = yes
 
# Where to find the SSL certificates:
   ssl CA certDir = /etc/ssl/certs
 
# Using the following line enables you to customise your configuration
# on a per machine basis. The %m gets replaced with the netbios name
# of the machine that is connecting
;   include = /usr/local/samba/lib/smb.conf.%m
 
# Most people will find that this option gives better performance.
# See speed.txt and the manual pages for details
# You may want to add the following on a Linux system:
#         SO_RCVBUF=8192 SO_SNDBUF=8192
   socket options = TCP_NODELAY  
 
# Configure Samba to use multiple interfaces
# If you have multiple network interfaces then you must list them
# here. See the man page for details.
;   interfaces = 192.168.12.2/24 192.168.13.2/24  
 
# Browser Control Options:
# set local master to no if you don't want Samba to become a master
# browser on your network. Otherwise the normal election rules apply
;   local master = no
 
# OS Level determines the precedence of this server in master browser
# elections. The default value should be reasonable
;   os level = 33
 
# Domain Master specifies Samba to be the Domain Master Browser. This
# allows Samba to collate browse lists between subnets. Don't use this
# if you already have a Windows NT domain controller doing this job
;   domain master = yes  
 
# Preferred Master causes Samba to force a local browser election on startup
# and gives it a slightly higher chance of winning the election
;   preferred master = yes
 
# Enable this if you want Samba to be a domain logon server for  
# Windows95 workstations.  
;   domain logons = yes
 
# if you enable domain logons then you may want a per-machine or
# per user logon script
# run a specific logon batch file per workstation (machine)
;   logon script = %m.bat
# run a specific logon batch file per username
;   logon script = %U.bat
 
# Where to store roving profiles (only for Win95 and WinNT)
#        %L substitutes for this servers netbios name, %U is username
#        You must uncomment the [Profiles] share below
;   logon path = \\%L\Profiles\%U
 
# Windows Internet Name Serving Support Section:
# WINS Support - Tells the NMBD component of Samba to enable it's WINS Server
;   wins support = yes
 
# WINS Server - Tells the NMBD components of Samba to be a WINS Client
# Note: Samba can be either a WINS Server, or a WINS Client, but NOT both
;   wins server = w.x.y.z
 
# WINS Proxy - Tells Samba to answer name resolution queries on
# behalf of a non WINS capable client, for this to work there must be
# at least one WINS Server on the network. The default is NO.
;   wins proxy = yes
 
# DNS Proxy - tells Samba whether or not to try to resolve NetBIOS names
# via DNS nslookups. The built-in default for versions 1.9.17 is yes,
# this has been changed in version 1.9.18 to no.
   dns proxy = no  
 
#pour recevoir des messages linpopup
 
#message command = /bin/sh -c '/usr/local/bin/linpopup "%f" "%m" %s; rm  
#%s'
message command = /usr/local/bin/linpopup "%f" "%m" %s; rm %s
 
 
#============================ Share Definitions ==============================
[homes]
   comment = Home Directories
   browseable = no
   writable = yes
 
# Un-comment the following and create the netlogon directory for Domain Logons
; [netlogon]
;   comment = Network Logon Service
;   path = /usr/local/samba/lib/netlogon
;   guest ok = yes
;   writable = no
;   share modes = no
 
 
# Un-comment the following to provide a specific roving profile share
# the default is to use the user's home directory
;[Profiles]
;    path = /usr/local/samba/profiles
;    browseable = no
;    guest ok = yes
 
 
# NOTE: If you have a BSD-style print system there is no need to  
# specifically define each individual printer
[printers]
   comment = All Printers
   path = /var/spool/samba
   browseable = no
# Set public = yes to allow user 'guest account' to print
   guest ok = no
   writable = no
   printable = yes
 
# This one is useful for people to share files
;[tmp]
;   comment = Temporary file space
;   path = /tmp
;   read only = no
;   public = yes
 
# A publicly accessible directory, but read only, except for people in
# the "staff" group
[public]
   comment = Public Stuff
   path = /home/samba
   public = yes
   guest ok = yes
   writable = no
   read only = yes
   printable = no
   write list = @staff
 
# Other examples.  
#
# A private printer, usable only by fred. Spool data will be placed in fred's
# home directory. Note that fred must have write access to the spool directory,
# wherever it is.
;[fredsprn]
;   comment = Fred's Printer
;   valid users = fred
;   path = /homes/fred
;   printer = freds_printer
;   public = no
;   writable = no
;   printable = yes
 
# A private directory, usable only by fred. Note that fred requires write
# access to the directory.
;[fredsdir]
;   comment = Fred's Service
;   path = /usr/somewhere/private
;   valid users = fred
;   public = no
;   writable = yes
;   printable = no
 
# a service which has a different directory for each machine that connects
# this allows you to tailor configurations to incoming machines. You could
# also use the %U option to tailor it by user name.
# The %m gets replaced with the machine name that is connecting.
;[pchome]
;  comment = PC Directories
;  path = /usr/pc/%m
;  public = no
;  writable = yes
 
# A publicly accessible directory, read/write to all users. Note that all files
# created in the directory by users will be owned by the default user, so
# any user with access can delete any other user's files. Obviously this
# directory must be writable by the default user. Another user could of course
# be specified, in which case all files would be owned by that user instead.
;[public]
;   path = /usr/somewhere/else/public
;   public = yes
;   only guest = yes
;   writable = yes
;   printable = no
 
# The following two entries demonstrate how to share a directory so that two
# users can place files there that will be owned by the specific users. In this
# setup, the directory should be writable by both users and should have the
# sticky bit set on it to prevent abuse. Obviously this could be extended to
# as many users as required.
;[myshare]
;   comment = Mary's and Fred's stuff
;   path = /usr/somewhere/shared
;   valid users = mary fred
;   public = no
;   writable = yes
;   printable = no
;   create mask = 0765


Message édité par farib le 04-01-2003 à 14:20:02

---------------
Bitcoin, Magical Thinking, and Political Ideology
Reply

Marsh Posté le 05-01-2003 à 10:48:41    

j'ai bien etudié le tiens mais rien ne fait, voici le miens au cas ou :
 
 

Code :
  1. # This is the main Samba configuration file. You should read the
  2. # smb.conf(5) manual page in order to understand the options listed
  3. # here. Samba has a huge number of configurable options (perhaps too
  4. # many!) most of which are not shown in this example
  5. #
  6. # Any line which starts with a ; (semi-colon) or a # (hash)
  7. # is a comment and is ignored. In this example we will use a #
  8. # for commentry and a ; for parts of the config file that you
  9. # may wish to enable
  10. #
  11. # NOTE: Whenever you modify this file you should run the command "testparm"
  12. # to check that you have not made any basic syntactic errors.
  13. #
  14. #======================= Global Settings =====================================
  15. [global]
  16. # workgroup = NT-Domain-Name or Workgroup-Name
  17.    workgroup = GTR
  18. # server string is the equivalent of the NT Description field
  19.    server string = Samba Server
  20. # This option is important for security. It allows you to restrict
  21. # connections to machines which are on your local network. The
  22. # following example restricts access to two C class networks and
  23. # the "loopback" interface. For more examples of the syntax see
  24. # the smb.conf man page
  25. ;   hosts allow = 192.168.1. 192.168.2. 127.
  26. # if you want to automatically load your printer list rather
  27. # than setting them up individually then you'll need this
  28.    printcap name = /etc/printcap
  29.    load printers = yes
  30. # It should not be necessary to spell out the print system type unless
  31. # yours is non-standard. Currently supported print systems include:
  32. # bsd, sysv, plp, lprng, aix, hpux, qnx
  33.    printing = lprng
  34. # Uncomment this if you want a guest account, you must add this to /etc/passwd
  35. # otherwise the user "nobody" is used
  36. ;  guest account = pcguest
  37. # this tells Samba to use a separate log file for each machine
  38. # that connects
  39.    log file = /var/log/samba/%m.log
  40. # Put a capping on the size of the log files (in Kb).
  41.    max log size = 0
  42. # Security mode. Most people will want user level security. See
  43. # security_level.txt for details.
  44.    security = share
  45. # Use password server option only with security = server
  46. # The argument list may include:
  47. #   password server = My_PDC_Name [My_BDC_Name] [My_Next_BDC_Name]
  48. # or to auto-locate the domain controller/s
  49. #   password server = *
  50. ;   password server = <NT-Server-Name>
  51. # Password Level allows matching of _n_ characters of the password for
  52. # all combinations of upper and lower case.
  53. ;  password level = 8
  54. ;  username level = 8
  55. # You may wish to use password encryption. Please read
  56. # ENCRYPTION.txt, Win95.txt and WinNT.txt in the Samba documentation.
  57. # Do not enable this option unless you have read those documents
  58.    encrypt passwords = yes
  59.    smb passwd file = /etc/samba/smbpasswd
  60. # The following is needed to keep smbclient from spouting spurious errors
  61. # when Samba is built with support for SSL.
  62. ;   ssl CA certFile = /usr/share/ssl/certs/ca-bundle.crt
  63. # The following are needed to allow password changing from Windows to
  64. # update the Linux system password also.
  65. # NOTE: Use these with 'encrypt passwords' and 'smb passwd file' above.
  66. # NOTE2: You do NOT need these to allow workstations to change only
  67. #        the encrypted SMB passwords. They allow the Unix password
  68. #        to be kept in sync with the SMB password.
  69.    unix password sync = Yes
  70.    passwd program = /usr/bin/passwd %u
  71.    passwd chat = *New*password* %n\n *Retype*new*password* %n\n *passwd:*all*authentication*tokens*updated*successfully*
  72. # You can use PAM's password change control flag for Samba. If
  73. # enabled, then PAM will be used for password changes when requested
  74. # by an SMB client instead of the program listed in passwd program.
  75. # It should be possible to enable this without changing your passwd
  76. # chat parameter for most setups.
  77.    pam password change = yes
  78. # Unix users can map to different SMB User names
  79. ;  username map = /etc/samba/smbusers
  80. # Using the following line enables you to customise your configuration
  81. # on a per machine basis. The %m gets replaced with the netbios name
  82. # of the machine that is connecting
  83. ;   include = /etc/samba/smb.conf.%m
  84. # This parameter will control whether or not Samba should obey PAM's
  85. # account and session management directives. The default behavior is
  86. # to use PAM for clear text authentication only and to ignore any
  87. # account or session management. Note that Samba always ignores PAM
  88. # for authentication in the case of encrypt passwords = yes
  89.   obey pam restrictions = yes
  90. # Most people will find that this option gives better performance.
  91. # See speed.txt and the manual pages for details
  92.    socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
  93. # Configure Samba to use multiple interfaces
  94. # If you have multiple network interfaces then you must list them
  95. # here. See the man page for details.
  96. ;   interfaces = 192.168.12.2/24 192.168.13.2/24
  97. # Configure remote browse list synchronisation here
  98. #  request announcement to, or browse list sync from:
  99. # a specific host or from / to a whole subnet (see below)
  100. ;   remote browse sync = 192.168.3.25 192.168.5.255
  101. # Cause this host to announce itself to local subnets here
  102. ;   remote announce = 192.168.1.255 192.168.2.44
  103. # Browser Control Options:
  104. # set local master to no if you don't want Samba to become a master
  105. # browser on your network. Otherwise the normal election rules apply
  106. ;   local master = no
  107. # OS Level determines the precedence of this server in master browser
  108. # elections. The default value should be reasonable
  109. ;   os level = 33
  110. # Domain Master specifies Samba to be the Domain Master Browser. This
  111. # allows Samba to collate browse lists between subnets. Don't use this
  112. # if you already have a Windows NT domain controller doing this job
  113. ;   domain master = yes
  114. # Preferred Master causes Samba to force a local browser election on startup
  115. # and gives it a slightly higher chance of winning the election
  116. ;   preferred master = yes
  117. # Enable this if you want Samba to be a domain logon server for
  118. # Windows95 workstations.
  119. ;   domain logons = yes
  120. # if you enable domain logons then you may want a per-machine or
  121. # per user logon script
  122. # run a specific logon batch file per workstation (machine)
  123. ;   logon script = %m.bat
  124. # run a specific logon batch file per username
  125. ;   logon script = %U.bat
  126. # Where to store roving profiles (only for Win95 and WinNT)
  127. #        %L substitutes for this servers netbios name, %U is username
  128. #        You must uncomment the [Profiles] share below
  129. ;   logon path = \\%L\Profiles\%U
  130. # Windows Internet Name Serving Support Section:
  131. # WINS Support - Tells the NMBD component of Samba to enable it's WINS Server
  132. ;   wins support = yes
  133. # WINS Server - Tells the NMBD components of Samba to be a WINS Client
  134. # Note: Samba can be either a WINS Server, or a WINS Client, but NOT both
  135. ;   wins server = w.x.y.z
  136. # WINS Proxy - Tells Samba to answer name resolution queries on
  137. # behalf of a non WINS capable client, for this to work there must be
  138. # at least one WINS Server on the network. The default is NO.
  139. ;   wins proxy = yes
  140. # DNS Proxy - tells Samba whether or not to try to resolve NetBIOS names
  141. # via DNS nslookups. The built-in default for versions 1.9.17 is yes,
  142. # this has been changed in version 1.9.18 to no.
  143.    dns proxy = no
  144. # Case Preservation can be handy - system default is _no_
  145. # NOTE: These can be set on a per share basis
  146. ;  preserve case = no
  147. short preserve case = no
  148. # Default case is normally upper case for all DOS files
  149. default case = lower
  150. # Be very careful with case sensitivity - it can break things!
  151. case sensitive = no
  152. #============================ Share Definitions ==============================
  153. [homes]
  154.    comment = Home Directories
  155.    browseable = no
  156.    writable = yes
  157.    valid users = %S
  158.    create mode = 0664
  159.    directory mode = 0775
  160. # If you want users samba doesn't recognize to be mapped to a guest user
  161. ; map to guest = bad user
  162. # Un-comment the following and create the netlogon directory for Domain Logons
  163. ; [netlogon]
  164. ;   comment = Network Logon Service
  165. ;   path = /usr/local/samba/lib/netlogon
  166. ;   guest ok = yes
  167. ;   writable = no
  168. ;   share modes = no
  169. # Un-comment the following to provide a specific roving profile share
  170. # the default is to use the user's home directory
  171. ;[Profiles]
  172. ;    path = /usr/local/samba/profiles
  173. ;    browseable = no
  174. ;    guest ok = yes
  175. # NOTE: If you have a BSD-style print system there is no need to
  176. # specifically define each individual printer
  177. [printers]
  178.    comment = All Printers
  179.    path = /var/spool/samba
  180.    browseable = no
  181. # Set public = yes to allow user 'guest account' to print
  182.    guest ok = no
  183.    writable = no
  184.    printable = yes
  185. # This one is useful for people to share files
  186. ;[tmp]
  187. ;   comment = Temporary file space
  188. ;   path = /tmp
  189. ;   read only = no
  190. ;   public = yes
  191. # A publicly accessible directory, but read only, except for people in
  192. # the "staff" group
  193. ;[public]
  194. ;   comment = Public Stuff
  195. ;   path = /home/samba
  196. ;   public = yes
  197. ;   writable = yes
  198. ;   printable = no
  199. ;   write list = @staff
  200. # Other examples.
  201. #
  202. # A private printer, usable only by fred. Spool data will be placed in fred's
  203. # home directory. Note that fred must have write access to the spool directory,
  204. # wherever it is.
  205. ;[fredsprn]
  206. ;   comment = Fred's Printer
  207. ;   valid users = fred
  208. ;   path = /home/fred
  209. ;   printer = freds_printer
  210. ;   public = no
  211. ;   writable = no
  212. ;   printable = yes
  213. # A private directory, usable only by fred. Note that fred requires write
  214. # access to the directory.
  215. ;[fredsdir]
  216. ;   comment = Fred's Service
  217. ;   path = /usr/somewhere/private
  218. ;   valid users = fred
  219. ;   public = no
  220. ;   writable = yes
  221. ;   printable = no
  222. # a service which has a different directory for each machine that connects
  223. # this allows you to tailor configurations to incoming machines. You could
  224. # also use the %U option to tailor it by user name.
  225. # The %m gets replaced with the machine name that is connecting.
  226. ;[pchome]
  227. ;  comment = PC Directories
  228. ;  path = /usr/local/pc/%m
  229. public = no
  230. ;  writable = yes
  231. # A publicly accessible directory, read/write to all users. Note that all files
  232. # created in the directory by users will be owned by the default user, so
  233. # any user with access can delete any other user's files. Obviously this
  234. # directory must be writable by the default user. Another user could of course
  235. # be specified, in which case all files would be owned by that user instead.
  236. ;[public]
  237. ;   path = /usr/somewhere/else/public
  238. ;   public = yes
  239. ;   only guest = yes
  240. ;   writable = yes
  241. ;   printable = no
  242. # The following two entries demonstrate how to share a directory so that two
  243. # users can place files there that will be owned by the specific users. In this
  244. # setup, the directory should be writable by both users and should have the
  245. # sticky bit set on it to prevent abuse. Obviously this could be extended to
  246. # as many users as required.
  247. ;[myshare]
  248. ;   comment = Mary's and Fred's stuff
  249. ;   path = /usr/somewhere/shared
  250. ;   valid users = mary fred
  251. ;   public = no
  252. ;   writable = yes
  253. ;   printable = no
  254. ;   create mask = 0765
  255. [ecriture]
  256. comment = ecriture
  257. path = /home/partage/ecriture/
  258. public = yes
  259. guest ok = yes
  260. writable = no
  261. printable = no

 
 
is something wrong ?
 
ce que je cherche a faire c'est un repertoire accessible a tous, meme ceux qui ne font pas partie de mon groupe de travail, que l'on pourrait lire et ecrire.


Message édité par nodus le 05-01-2003 à 10:49:46

---------------
Et toi, tu crois que les ours polaires vont chier dans les bois ?
Reply

Sujets relatifs:

Leave a Replay

Make sure you enter the(*)required information where indicate.HTML code is not allowed