☰

可以连接到 Samba，但拒绝访问家庭

tag-icon • tag-icon centos samba
可以连接到 Samba，但拒绝访问家庭

我可以使用 IP 地址和服务器名称连接到 samba 服务器，并且可以看到主文件夹名称，但无法连接到它

smb配置文件

[global]
    workgroup = WORKGROUP
    server string = Venus
    wins support = no
    read only = no
    browsable = yes
    create mode = 0777
    directory mode = 0777
    case sensitive = no
    dns proxy = no
    interfaces = 127.0.0.1/8 eth0
    bind interfaces only = yes
    log file = /var/log/samba/log.%m
    max log size = 1000
    syslog = 0
    security = user
    encrypt passwords = true
    passdb backend = smbpasswd
    obey pam restrictions = yes
    unix password sync = no
    passwd program = /usr/bin/passwd %u
    passwd chat = *Enter\snew\s*\spassword:* %n\n *Retype\snew\s*\spassword:* %n\n *password\supdated\ssuccessfully* .
    pam password change = no


[homes]
   comment = User Directories
   path = /data/localdevs/%u
   public = no
   browsable = yes
   writable = yes

/etc/samba 文件夹中包含以下文件

lmhosts  smb.conf  smb.conf.orig  smbusers

“sudo pdbedit -L”的输出是

user1:500:

ls -abl /数据/本地设备/

drwxr-xr-x. 4 user1 user1 4096 Jul 24 17:35 user1

当我拒绝访问 user1 的主目录时，samba 日志显示的内容如下

[2012/07/24 20:27:08.599216,  3] smbd/process.c:1489(process_smb)
  Transaction 24 of length 90 (0 toread)
[2012/07/24 20:27:08.599350,  3] smbd/process.c:1298(switch_message)
  switch message SMBntcreateX (pid 2440) conn 0x7f6758780c00
[2012/07/24 20:27:08.599373,  4] smbd/uid.c:257(change_to_user)
  change_to_user: Skipping user change - already user
[2012/07/24 20:27:08.599412,  3] smbd/vfs.c:881(check_reduced_name)
  check_reduced_name [.] [/data/localdevs/user1]
[2012/07/24 20:27:08.599485,  3] smbd/vfs.c:1038(check_reduced_name)
  check_reduced_name: . reduced to /data/localdevs/user1
[2012/07/24 20:27:08.599508,  3] smbd/vfs.c:881(check_reduced_name)
  check_reduced_name [.] [/data/localdevs/user1]
[2012/07/24 20:27:08.599552,  3] smbd/vfs.c:1038(check_reduced_name)
  check_reduced_name: . reduced to /data/localdevs/user1
[2012/07/24 20:27:08.599581,  3] smbd/dosmode.c:166(unix_mode)
  unix_mode(.) returning 0766
[2012/07/24 20:27:08.599643,  3] smbd/vfs.c:881(check_reduced_name)
  check_reduced_name [.] [/data/localdevs/user1]
[2012/07/24 20:27:08.599668,  3] smbd/vfs.c:1038(check_reduced_name)
  check_reduced_name: . reduced to /data/localdevs/user1
[2012/07/24 20:27:08.599707,  4] smbd/open.c:1990(open_file_ntcreate)
  calling open_file with flags=0x0 flags2=0x0 mode=0766, access_mask = 0x81, open_access_mask = 0x81
[2012/07/24 20:27:08.599806,  3] smbd/open.c:467(open_file)
  Error opening file . (NT_STATUS_ACCESS_DENIED) (local_flags=0) (flags=0)
[2012/07/24 20:27:08.599838,  3] smbd/error.c:80(error_packet_set)
  error packet at smbd/error.c(160) cmd=162 (SMBntcreateX) NT_STATUS_ACCESS_DENIED
[2012/07/24 20:27:08.604075,  3] smbd/process.c:1489(process_smb)
  Transaction 25 of length 90 (0 toread)
[2012/07/24 20:27:08.604193,  3] smbd/process.c:1298(switch_message)
  switch message SMBntcreateX (pid 2440) conn 0x7f6758780c00
[2012/07/24 20:27:08.604216,  4] smbd/uid.c:257(change_to_user)
  change_to_user: Skipping user change - already user
[2012/07/24 20:27:08.604268,  3] smbd/vfs.c:881(check_reduced_name)
  check_reduced_name [.] [/data/localdevs/user1]
[2012/07/24 20:27:08.604336,  3] smbd/vfs.c:1038(check_reduced_name)
  check_reduced_name: . reduced to /data/localdevs/user1
[2012/07/24 20:27:08.604395,  3] smbd/vfs.c:881(check_reduced_name)
  check_reduced_name [.] [/data/localdevs/user1]
[2012/07/24 20:27:08.604419,  3] smbd/vfs.c:1038(check_reduced_name)
  check_reduced_name: . reduced to /data/localdevs/user1
[2012/07/24 20:27:08.604442,  3] smbd/dosmode.c:166(unix_mode)
  unix_mode(.) returning 0766
[2012/07/24 20:27:08.604532,  3] smbd/vfs.c:881(check_reduced_name)
  check_reduced_name [.] [/data/localdevs/user1]
[2012/07/24 20:27:08.604554,  3] smbd/vfs.c:1038(check_reduced_name)
  check_reduced_name: . reduced to /data/localdevs/user1
[2012/07/24 20:27:08.604583,  4] smbd/open.c:1990(open_file_ntcreate)
  calling open_file with flags=0x0 flags2=0x0 mode=0766, access_mask = 0x81, open_access_mask = 0x81
[2012/07/24 20:27:08.604679,  3] smbd/open.c:467(open_file)
  Error opening file . (NT_STATUS_ACCESS_DENIED) (local_flags=0) (flags=0)
[2012/07/24 20:27:08.604705,  3] smbd/error.c:80(error_packet_set)
  error packet at smbd/error.c(160) cmd=162 (SMBntcreateX) NT_STATUS_ACCESS_DENIED
[2012/07/24 20:27:08.606977,  3] smbd/process.c:1489(process_smb)
  Transaction 26 of length 80 (0 toread)
[2012/07/24 20:27:08.607096,  3] smbd/process.c:1298(switch_message)
  switch message SMBtrans2 (pid 2440) conn 0x7f6758780c00
[2012/07/24 20:27:08.607119,  4] smbd/uid.c:257(change_to_user)
  change_to_user: Skipping user change - already user
[2012/07/24 20:27:08.607139,  3] smbd/trans2.c:5100(call_trans2qfilepathinfo)
  call_trans2qfilepathinfo: TRANSACT2_QPATHINFO: level = 1004
[2012/07/24 20:27:08.607162,  3] smbd/vfs.c:881(check_reduced_name)
  check_reduced_name [.] [/data/localdevs/user1]
[2012/07/24 20:27:08.607184,  3] smbd/vfs.c:1038(check_reduced_name)
  check_reduced_name: . reduced to /data/localdevs/user1
[2012/07/24 20:27:08.607208,  3] smbd/trans2.c:5226(call_trans2qfilepathinfo)
  call_trans2qfilepathinfo . (fnum = -1) level=1004 call=5 total_data=0
[2012/07/24 20:27:08.608306,  3] smbd/process.c:1489(process_smb)
  Transaction 27 of length 80 (0 toread)
[2012/07/24 20:27:08.608362,  3] smbd/process.c:1298(switch_message)
  switch message SMBtrans2 (pid 2440) conn 0x7f6758780c00
[2012/07/24 20:27:08.608383,  4] smbd/uid.c:257(change_to_user)
  change_to_user: Skipping user change - already user
[2012/07/24 20:27:08.608403,  3] smbd/trans2.c:5100(call_trans2qfilepathinfo)
  call_trans2qfilepathinfo: TRANSACT2_QPATHINFO: level = 1005
[2012/07/24 20:27:08.608439,  3] smbd/vfs.c:881(check_reduced_name)
  check_reduced_name [.] [/data/localdevs/user1]
[2012/07/24 20:27:08.608461,  3] smbd/vfs.c:1038(check_reduced_name)
  check_reduced_name: . reduced to /data/localdevs/user1
[2012/07/24 20:27:08.608484,  3] smbd/trans2.c:5226(call_trans2qfilepathinfo)
  call_trans2qfilepathinfo . (fnum = -1) level=1005 call=5 total_data=0

答案1

解决方案是这样的

sudo chcon -t samba_share_t ./data/localdevs/user1

显然这是 centos 的事情。

注意：语法为 root（替换为您尝试共享的目录）

chcon -t samba_share_t <share_folder>

答案2

正如 user893730 在他的回答中暗示的那样，这是由 SELinux 引起的。重要的是，正如 Charles 在同一回答的评论中提到的那样，这可能不会显示在审计日志中。

samba_enable_home_dirs策略中有一个布尔值，用于控制 Samba 是否可以共享主目录。chcon您可以使用以下命令设置该布尔值，而不必使用该命令重新标记目录：

sudo setsebool -P samba_enable_home_dirs on

该-P选项将使更改在重启后继续有效。

答案3

我遇到了同样的问题，尝试了许多发布的解决方案，但都无济于事。直到我发现 selinux 已启用。将其从“强制”切换到“允许”后... 我可以从 Windows 读取和写入文件了！

相关内容