You are not logged in.

#1 2017-02-14 11:00:18

kenny1987
Member
Registered: 2016-04-18
Posts: 1

Samba can't connect to local running NT_STATUS_ACCESS_DENIED

Hi all

I'am running arch on virtualbox. I've tried to share resources from guest to host, I set up samba server but can't connect to it even locally

/etc/samba/smb.conf

[global]
   workgroup = TESTGROUP
   server string = Samba Server on Arch
   printcap name = /dev/null
   load printers = no
   printing = bsd   
   log file = /var/log/samba/%m.log
   max log size = 50
   security = user
   wins support = no
   netbios name = arch_smb
   valid users = samba_user
   dns proxy = no 
   auto services = samba_user
[homes]
   comment = Home Directories
   browseable = no
   writable = yes
[tmp]
   comment = temporary files
   path = /tmp
   public =yes
   read only = yes
[samba_user]
   comment = temporary files
   path = /public
   valid users = samba_user
   writeable = yes

Then I try to login:

root samba# smbpasswd -n -U samba_user
User samba_user password set to none.
root samba# systemctl stop smbd.service 
root samba# systemctl start smbd.service 
root samba# systemctl status smbd.service 
● smbd.service - Samba SMB/CIFS server
   Loaded: loaded (/usr/lib/systemd/system/smbd.service; enabled; vendor preset: disabled)
   Active: active (running) since Tue 2017-02-14 11:55:53 CET; 4s ago
  Process: 4850 ExecStart=/usr/bin/smbd -D (code=exited, status=0/SUCCESS)
 Main PID: 4860 (smbd)
    Tasks: 4 (limit: 4915)
   Memory: 7.2M
      CPU: 48ms
   CGroup: /system.slice/smbd.service
           ├─4860 /usr/bin/smbd -D
           ├─4868 /usr/bin/smbd -D
           ├─4869 /usr/bin/smbd -D
           └─4875 /usr/bin/smbd -D

lut 14 11:55:53 arch_64_vbox systemd[1]: Starting Samba SMB/CIFS server...
lut 14 11:55:53 arch_64_vbox systemd[1]: Started Samba SMB/CIFS server.
lut 14 11:55:53 arch_64_vbox smbd[4860]: [2017/02/14 11:55:53.340492,  0] ../lib/util/become_daemon.c:124(daemon_ready)
lut 14 11:55:53 arch_64_vbox smbd[4860]:   STATUS=daemon 'smbd' finished starting up and ready to serve connections
root samba# exit
wkoszycki samba$ smbclient -d 3 -L 127.0.0.1 -U TESTGROUP\\samba_user
lp_load_ex: refreshing parameters
Initialising global parameters
rlimit_max: increasing rlimit_max (1024) to minimum Windows limit (16384)
Processing section "[global]"
added interface docker0 ip=172.17.0.1 bcast=172.17.255.255 netmask=255.255.0.0
added interface enp0s3 ip=10.0.2.15 bcast=10.0.2.255 netmask=255.255.255.0
Client started (version 4.5.4).
Enter TESTGROUP\samba_user's password: 
Connecting to 127.0.0.1 at port 445
Doing spnego session setup (blob length=74)
got OID=1.3.6.1.4.1.311.2.2.10
got principal=not_defined_in_RFC4178@please_ignore
GENSEC backend 'gssapi_spnego' registered
GENSEC backend 'gssapi_krb5' registered
GENSEC backend 'gssapi_krb5_sasl' registered
GENSEC backend 'spnego' registered
GENSEC backend 'schannel' registered
GENSEC backend 'naclrpc_as_system' registered
GENSEC backend 'sasl-EXTERNAL' registered
GENSEC backend 'ntlmssp' registered
GENSEC backend 'ntlmssp_resume_ccache' registered
GENSEC backend 'http_basic' registered
GENSEC backend 'http_ntlm' registered
GENSEC backend 'krb5' registered
GENSEC backend 'fake_gssapi_krb5' registered
Got challenge flags:
Got NTLMSSP neg_flags=0x628a8215
NTLMSSP: Set final flags:
Got NTLMSSP neg_flags=0x62088215
NTLMSSP Sign/Seal - Initialising with flags:
Got NTLMSSP neg_flags=0x62088215
SPNEGO login failed: Logon failure
Doing spnego session setup (blob length=74)
got OID=1.3.6.1.4.1.311.2.2.10
got principal=not_defined_in_RFC4178@please_ignore
Got challenge flags:
Got NTLMSSP neg_flags=0x628a8215
NTLMSSP: Set final flags:
Got NTLMSSP neg_flags=0x62008a15
NTLMSSP Sign/Seal - Initialising with flags:
Got NTLMSSP neg_flags=0x62008a15
Anonymous login successful
Domain=[TESTGROUP] OS=[Windows 6.1] Server=[Samba 4.5.4]
tree connect failed: NT_STATUS_ACCESS_DENIED
wkoszycki samba$ 

Offline

#2 2017-02-19 13:08:52

myon
Member
From: Tokyo, Japan
Registered: 2017-02-19
Posts: 4
Website

Re: Samba can't connect to local running NT_STATUS_ACCESS_DENIED

Yeah, I also found the samba configuration confusing.
I guess you have to add

guest ok = yes

I also use

map to guest = Bad User
guest only = yes

This is my full configuration (on FreeBSD, can be accessed from my laptop with Arch Linux and Windows)

[global]
workgroup = WORKGROUP
server string = NEC MATE FreeBSD Server
wins support = yes
security = user
map to guest = Bad User
guest account = samba

[share]
path = /mnt/data/share
read only = no
guest ok = yes
guest only = yes
create mask = 0666
directory mask = 0755

Offline

Board footer

Powered by FluxBB