Link to home
Start Free TrialLog in
Avatar of racone
raconeFlag for United States of America

asked on

Samba 4.9 Causing guest Account Problems on RHEL 7

Upgraded from Samba 4.8.3 to Samba 4.9.1 on RHEL 7.  Now, guest account shares do not appear to be working the same (or at all).  I need some precise assistance with a Samba expert for the required smb.conf changes to get us back to working like we have been for the past 10 years.
Avatar of racone
racone
Flag of United States of America image

ASKER

[root@t7serv1 ~]# systemctl status smb
● smb.service - Samba SMB Daemon
   Loaded: loaded (/usr/lib/systemd/system/smb.service; enabled; vendor preset:
disabled)
   Active: failed (Result: exit-code) since Mon 2019-10-28 14:09:55 MDT; 7min ag
o
     Docs: man:smbd(8)
           man:samba(7)
           man:smb.conf(5)
  Process: 2438 ExecStart=/usr/sbin/smbd --foreground --no-process-group $SMBDOP
TIONS (code=exited, status=255)
 Main PID: 2438 (code=exited, status=255)

Oct 28 14:09:55 t7serv1 systemd[1]: Starting Samba SMB Daemon...
Oct 28 14:09:55 t7serv1 smbd[2438]: [2019/10/28 14:09:55.463277,  0] ../sou...t)

Oct 28 14:09:55 t7serv1 smbd[2438]:   create_local_token failed: NT_STATUS_...RY

Oct 28 14:09:55 t7serv1 smbd[2438]: [2019/10/28 14:09:55.463622,  0] ../sou...n)

Oct 28 14:09:55 t7serv1 systemd[1]: smb.service: main process exited, code=.../a

Oct 28 14:09:55 t7serv1 systemd[1]: Failed to start Samba SMB Daemon.
Oct 28 14:09:55 t7serv1 systemd[1]: Unit smb.service entered failed state.
Oct 28 14:09:55 t7serv1 systemd[1]: smb.service failed.
Hint: Some lines were ellipsized, use -l to show in full.
Avatar of racone

ASKER

[global]
     netbios name = t7serv1
     server string = Samba
     local master = no
     preferred master = no
     security = user
     map to guest = bad user
     username map = /etc/samba/users.map
     wins support = no
     wins server = 192.168.101.3
     workgroup = SPS1
     log level = 1
     guest account = samba
     max xmit = 65535
     interfaces = team0
     bind interfaces only = yes
     hosts allow = 192.168.101.0/24
     browseable = no
     nt acl support = no
[t7serv1]
     comment = t7serv1
     force user = dl4ub
     force group = dl4ub
     create mode = 0000
     force create mode = 0660
     directory mode = 0000
     force directory mode = 0770
     path = /
     read only = no
     guest ok = yes
     guest only = yes
     mangled names = no
     hide special files = yes
     hide unreadable = yes
     hide unwriteable files = yes
     veto files = /.*/bin/boot/cgroup/chroot/dev/dtr/etc/home/lib/lib64/lost+fou
nd/media/misc/mnt/net/opt/proc/root/run/sbin/selinux/spsntint/srv/sys/tftpboot/t
mp/u_newsystem/u_snapshot/usr/var/ \
     veto files = /.*/ach/achdirect/achpc/actum/apache/arc/axos/blast/bofa/bu/da
ily/dl4/dl4ub/dxf/dxport/earlywarning/eftcanada/eftnetwork/email/emailb.sps/enca
sh/epc/fil/ \
     veto files = /ftp9xd/ftpaid/ftpbck/ftpbdt/ftpbzi/ftpccv/ftpcdc/ftpchs/ftpck
v/ftpdbb/ftpdpb/ftpe4u/ftpeco/ftpecp/ftpedc/ftpeft/ftpegv/ftpepn/ftpeps/ftpest/f
tpevt/ftpews/ftpezc/ftpfhm/ftpfwf/ftpget/ftpgms/ftphms/ftpide/ftpima/ftpipp/ftpj
db/ftplls/ftplsr/ftpmal/ftpmam/ftpmbs/ftpmdf/ftpmrp/ftpmye/ \
     veto files = /ftpnet/ftpnpp/ftpnrg/ftporl/ftppac/ftppay/ftppin/ftpppi/ftppp
t/ftpral/ftprdm/ftprem/ftprnn/ftprsr/ftpsgm/ftpsgs/ftpsim/ftpslp/ftpspp/ftpsps/f
tpsun/ftptbi/ftptlg/ftptpy/ftpupa/ftpval/ftpvck/ftpvrc/ftpwdc/ftpymc/ftpzip/ \
     veto files = /g/geti/htm/httpdsp/httpdwn/httpmjm/httprdm/ifinance/iss/micro
bilt/mlink/mysql/nabco/nbcal/odbcdl4/payliance/paywithmybank/rcone/rem/rep/ropp/
sallard/scanzmod/scn/sme/ssh/svb/tmp/ub/ub2dl4/uucp/vme/wnb/zmdsol/
     dont descend = u/lanhostimaging u/prt
Avatar of racone

ASKER

Anybody have any input on this?

I am just looking for the changes to my smb.conf so that guest account usage works the same as it has for the past 15 years.
This question needs an answer!
Become an EE member today
7 DAY FREE TRIAL
Members can start a 7-Day Free trial then enjoy unlimited access to the platform.
View membership options
or
Learn why we charge membership fees
We get it - no one likes a content blocker. Take one extra minute and find out why we block content.