asked on

Problem connecting Linux to Win2k share with Samba

Hi:
After reinstalling my Win2k server, when I mount a Samba Windows 2000 share from my Linux clients I get this error:

# smbmount //pc1/dir1 /dir2
Password: <ENTER>
Anonymous login successful
11729: tree connect failed: ERRDOS - ERRnoaccess (Access denied.)

I'm accesing as anonymous without password.

Anonymous login seems successful, but I have no access to the shares:

# smbclient -L pc1
added interface ip=192.168.1.9 bcast=192.168.1.255 nmask=255.255.255.0
Got a positive name query response from 192.168.1.5 ( 192.168.1.5 )

Anonymous login successful
Domain=[domain1] OS=[Windows 5.0] Server=[Windows 2000 LAN Manager]

Sharename Type Comment
--------- ---- -------
Error returning browse list: NT_STATUS_ACCESS_DENIED

Server Comment
--------- -------
pc1
pc2
PCSOL Samba Server

Workgroup Master
--------- -------
domain1 pc1

If I mount with the Win2k admin user I get access to the shares:

# smbclient -L pc1 -U administrator (type administrator password)

added interface ip=192.168.1.9 bcast=192.168.1.255 nmask=255.255.255.0
Got a positive name query response from 192.168.1.5 ( 192.168.1.5 )

Domain=[domain1] OS=[Windows 5.0] Server=[Windows 2000 LAN Manager]

Sharename Type Comment
--------- ---- -------
IPC$ IPC IPC remota
D$ Disk Recurso predeterminado
print$ Disk Controladores de impresora
RH Disk
dir1 Disk Proyectos
F Disk
ADMIN$ Disk Admin remota

Server Comment
--------- -------
pc1
pc2
pc3 Samba Server

Workgroup Master
--------- -------
domain1 pc1

but if I try:
# smbmount //pc1/dir1 /dir2 username=administrator
Password: <pass>
11749: session setup failed: ERRDOS - ERRnoaccess (Access denied.)

I CAN connect to Win98 shares, so I understand the problem must be in the Win2k server (just reinstalled :-), where I have activated "ANONYMOUS LOGON". What am I forgeting?

Thanks in advance for any ideas!

psimation

Well, I don't think that just activating anonymous login will do the trick.
Try to do the following:
add a user on the win2k machine with the same name as you Linux machine. Give it a password and setup the share to allow access to that user, then smbmount in the same fashion, using the password assigned to the new user on the win2k machine.

You could also try to explicitly state the username as "anonymous" in your smbmount line.

raulmontero

ASKER

Thanks for your tip, psimation:

I have created new users with passwords in the Win2k server, setup the share to allow access and so on...

If I run:
# smbclient -L pc1 -U raul

I can browse all the shares available, but if I run:
# smbmount //pc1/dir1 /dir2 username=raul

I get the same error:
11749: session setup failed: ERRDOS - ERRnoaccess (Access denied.)
SMB connection failed

raulmontero

ASKER

Kelly Black

Make sure the permissions mask on the target directory is
correct (usually world readable), and the login encryption is working.

Check the client log also.

~KB

raulmontero

ASKER

Kelly Black

Maybe you need -W domain too?

Kelly W. Black

raulmontero

ASKER

Sorry for those repetitions... :-(

Thanks for your comments kblack05:

The target directory (/dir2) is drwx-r-xr-x.

I have taken a look at /var/log/samba, in pc1.log I found these errors:

in pc1.log (pc1 is the Win2k server) I found several lines with this error:

passdb/pdb_smbpasswd.c:pdb_getsampwnam (1367)
unable to open passdb database

Does this say anything to you? How do I check the login encryption?

Thanks a lot.

Kelly Black

Make sure you have not veto option lines in the smb.conf
file on the win box.

[GLOBAL]
workgroup = homenet
coding system = HEX
client code page = 932
guest account = smbadmin
printcap name = /etc/printcap
log file = /usr/local/samba/var/samba.log
socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
encrypt passwords = yes
security = share
hosts allow = 192.168.0.0/255.255.255.0
##veto files = /.*/*.{*}/*.eml/*.nws/some.dll/

~Kelly W. Black

Kelly Black

Also I forgot to mention, be sure you have allowed access
to the network you are on. For example if you are on
123.456.78.90

put a line for :

123.456.78.90/24

Restart samba.

Also make sure you have this line:

encrypt passwords = yes

ASKER CERTIFIED SOLUTION

kiranghag

membership

This solution is only available to members.

To access this solution, you must be a member of Experts Exchange.

Start Free Trial

raulmontero

ASKER

Hi kblack05 & kiranghag:

Thanks for your help.

No veto files defined in smb.conf

I don't have restrictions to machines. This line is commented:
; host allow = ...

smb.conf includes:
encrypt passwords = yes

Regarding, Guest Account, it is defined in Win2k, but it had a X deactivated sign!!! I reactivated and now I can connect.

kiranghag, you got it. ;-)

kblack05, thanks a lot for your help.