Jump to content

No Access to Protected SMB Shares


Revan335
Go to solution Solved by Frank1940,

Recommended Posts

1 hour ago, Revan335 said:

Create the Test Share, and 🎉 tada, the Access with SMB its working with test User Private Settings and Credentials.

Very interesting.  Post the output of

testparm 

 

Post the output of these two commands:
 

ls -al /mnt

ls -al /mnt/user

 

(I have never used a second Pool.  I have only ever used the original cache single drive type in the pool setting.  So I don't know the details of exactly how multiple pools work.  It sounds like you have two 'Test' shares.  @dlandon, is that even allowed?  Or does the Pool share get combined with the Array share?  If so, how?)   

 

@Revan335, are you creating these shares (Test, Test1, Test2, etc.) strictly for testing purposes and deleting them as soon as you complete your testing? 

Link to comment
22 minutes ago, Frank1940 said:

It sounds like you have two 'Test' shares.  @dlandon, is that even allowed?  Or does the Pool share get combined with the Array share?  If so, how?)

A Pool device share will be the name of the Pool device.  A multi device pool will have one Pool (and therefore share) name.  You can't have a Pool named 'Test' and a share named 'Test' on another Pool device or on the array.  That would be duplicates.  If that is the case here, there is a problem.  Unraid should not allow that.

Link to comment

Give us a screen capture of the Main tab with the serial numbers 'blacked out'.  Example below:

image.png.1b4e4f1d4ef6672affe2fd77bb696d02.png

 

Please set things up and use that configuration--- both hardware and configuration ---until the problem is solved.  (The folks who are trying to help have to use a virtual picture of what your Unraid server looks like--  Both the hardware and the configuration.  When you make changes to the setup, we end up hopelessly confused.)  IF you made a setup of hardware and configuration, it doesn't work and you remove it.  When we tell you to do/change something to it, when you rebuild it to try the suggestion, you might not get something the exactly the same.  And the suggestion fails because of that 'something'... 

 

EDIT:  You have not put this server into a Active Directory setup?  (You seem so worried about privacy that I am thinking this is a business server and you are protecting some propriety material.)

Edited by Frank1940
Link to comment
36 minutes ago, Frank1940 said:

Looking at the screen captures, it appears that there are two servers. SMB works on second server and SMB does not work on the first server.  Is this correct?  Or you you just changing the configuration of the installed hardware on a single box and using the same Unraid boot drive?

 

 

Yes, its the same Server with the same Boot Drive. I used the New Configuration Tool under Tools for the Change.

 

Yes, SMB.... Works on My Backup Server. But there is not on the Screenshots....

Link to comment
4 hours ago, Frank1940 said:
testparm

 

The don't working Array ...:

~# testparm 
Load smb config files from /etc/samba/smb.conf
lpcfg_do_global_parameter: WARNING: The "null passwords" option is deprecated
Loaded services file OK.
Weak crypto is allowed by GnuTLS (e.g. NTLM as a compatibility fallback)

Server role: ROLE_STANDALONE

Press enter to see a dump of your service definitions

# Global parameters
[global]
        disable netbios = Yes
        disable spoolss = Yes
        load printers = No
        logging = syslog@0
        map to guest = Bad User
        max open files = 40960
        multicast dns register = No
        ntlm auth = ntlmv1-permitted
        null passwords = Yes
        passdb backend = smbpasswd
        printcap name = /dev/null
        security = USER
        server min protocol = SMB2
        server string = MCP
        show add printer wizard = No
        smb1 unix extensions = No
        workgroup = WORKGROUP with Ü in his Name
        fruit:nfs_aces = No
        idmap config * : range = 3000-7999
        idmap config * : backend = tdb
        access based share enum = Yes
        acl allow execute always = Yes
        aio read size = 0
        aio write size = 0
        create mask = 0777
        directory mask = 0777
        hide unreadable = Yes
        include = /etc/samba/smb-shares.conf
        invalid users = root
        map archive = No
        map readonly = yes
        use sendfile = Yes
        wide links = Yes


[Test]
        path = /mnt/user/Test
        valid users = test testb dumkopf
        write list = test testb dumkopf


[Test1]
        path = /mnt/user/Test1
        valid users = test testb dumkopf
        write list = test testb dumkopf


[Test2]
        guest ok = Yes
        path = /mnt/user/Test2
        read only = No

 

The working Array ...:

~# testparm 
Load smb config files from /etc/samba/smb.conf
lpcfg_do_global_parameter: WARNING: The "null passwords" option is deprecated
Loaded services file OK.
Weak crypto is allowed by GnuTLS (e.g. NTLM as a compatibility fallback)

Server role: ROLE_STANDALONE

Press enter to see a dump of your service definitions

# Global parameters
[global]
        disable netbios = Yes
        disable spoolss = Yes
        load printers = No
        logging = syslog@0
        map to guest = Bad User
        max open files = 40960
        multicast dns register = No
        ntlm auth = ntlmv1-permitted
        null passwords = Yes
        passdb backend = smbpasswd
        printcap name = /dev/null
        security = USER
        server min protocol = SMB2
        server string = MCP
        show add printer wizard = No
        smb1 unix extensions = No
        workgroup = WORKGROUP with Ü in his Name
        fruit:nfs_aces = No
        idmap config * : range = 3000-7999
        idmap config * : backend = tdb
        access based share enum = Yes
        acl allow execute always = Yes
        aio read size = 0
        aio write size = 0
        create mask = 0777
        directory mask = 0777
        hide unreadable = Yes
        include = /etc/samba/smb-shares.conf
        invalid users = root
        map archive = No
        map readonly = yes
        use sendfile = Yes
        wide links = Yes


[Test]
        path = /mnt/user/Test
        valid users = test testb dumkopf
        write list = test testb dumkopf
root@Raster:~# 

 

4 hours ago, Frank1940 said:
ls -al /mnt

ls -al /mnt/user

 

The don't working Array ...:

~# ls -al /mnt
total 28
drwxr-xr-x 11 root   root   220 Mar  3 15:49 ./
drwxr-xr-x 20 root   root   420 Mar  2 00:30 ../
drwxrwxrwx  5 nobody users   50 Mar  3 17:47 cache/
drwxrwxrwx  1 nobody users   16 Mar  3 17:47 cachebtrfs/
drwx------ 19 nobody users 4096 Mar  3 17:47 disk1/
drwxrwxrwx 12 nobody users  223 Mar  3 17:47 disk2/
drwxrwxrwt  3 nobody users   60 Mar  2 23:41 disks/
drwxrwxrwt  4 nobody users   80 Mar  2 23:41 remotes/
drwxrwxrwt  2 nobody users   40 Mar  1 01:43 rootshare/
drwx------  1 nobody users 4096 Mar  3 17:47 user/
drwx------  1 nobody users 4096 Mar  3 17:47 user0/
root@Raster:~# ls -al /mnt/user
total 12
drwx------  1 nobody users 4096 Mar  3 17:47 ./
drwxr-xr-x 11 root   root   220 Mar  3 15:49 ../
drwxrwxrwx  1 nobody users   70 Dec 25 00:01 Altes\ NAS/
drwxrwxrwx  1 nobody users   57 Feb 10 01:04 Backup_E*/
drwxrwxrwx  1 nobody users   80 Oct  2 18:05 Backup_Mobil/
drwxrwxrwx  1 nobody users   41 Dec 24 17:00 Backup_PC-42/
drwxrwxrwx  1 nobody users   47 Feb 10 01:15 Backup_PC-84/
drwxrwxrwx  1 nobody users   31 Jan 18 21:21 Backup_Vu+/
drwxrwxrwx  1 nobody users   20 Jan  2 13:59 Borg/
drwxrwxrwx  1 nobody users   29 Jan  1 13:22 Cache/
drwxrwxrwx  1 nobody users   63 Jan 22 21:03 D*/
drwxrwxrwx  1 nobody users    6 Feb  7 21:51 Downloads/
drwxrwxrwx  1 nobody users  262 Mar  3 12:14 Logs/
drwxrwxrwx  1 nobody users  163 Nov 13 00:59 Multimedia/
drwxr-xr-x  1 nobody users    6 Jul  8  2022 Pictures/
drwxrwxrwx  1 nobody users 4096 Nov 13 22:06 Public/
drwxrwxrwx  1 nobody users    6 Mar 28  2022 SHARE/
drwxrwxrwx  1 nobody users   58 Jan 22 21:03 Share_E*/
drwxrwxrwx  1 nobody users  113 Mar  3 12:33 Test/
drwxrwxrwx  1 nobody users   34 Feb 26 21:18 Test1/
drwxrwxrwx  1 nobody users   56 Mar  1 00:11 Test2/
drwxr-xr-x  1 nobody users   51 Feb  7 21:46 Transcode/
drwxrwxrwx  1 nobody users 4096 Mar  3 00:16 appdata/
drwxrwxrwx  1 nobody users   32 Feb 27 13:22 domains/
drwxrwxrwx  1 nobody users  235 Feb  6 21:27 isos/
drwxrwxrwx  1 nobody users   35 Feb 15 07:10 system/

 

The working Array ...:

~# ls -al /mnt
total 48
drwxr-xr-x  8 root   root  160 Mar  3 18:50 ./
drwxr-xr-x 20 root   root  420 Mar  2 00:30 ../
drwxrwxrwx  1 nobody users  16 Mar  3 18:47 disk1/
drwxrwxrwt  3 nobody users  60 Mar  2 23:41 disks/
drwxrwxrwt  4 nobody users  80 Mar  2 23:41 remotes/
drwxrwxrwt  2 nobody users  40 Mar  1 01:43 rootshare/
drwxrwxrwx  1 nobody users  16 Mar  3 18:47 user/
drwxrwxrwx  1 nobody users  16 Mar  3 18:47 user0/
root@Raster:~# ls -al /mnt/user
total 16
drwxrwxrwx 1 nobody users  16 Mar  3 18:47 ./
drwxr-xr-x 8 root   root  160 Mar  3 18:50 ../
drwxrwxrwx 1 nobody users  50 Mar  3 12:14 Logs/
drwxrwxrwx 1 nobody users   8 Mar  3 12:33 Test/

 

Many Thanks to all!

Greetings!

 

Link to comment
  • Solution

image.png.886633cf25c314a03e37cb9a3fb929fe.png

 

Those three ticks are your problem.  The permissions should be as shown below:

image.png.5e587cb0ad1247b93a9169acf7e5309c.png

 

You have to have rwx permissions for both group and other for SMB to work properly. 

 

I would suggest that you install the Docker Safe New Perms plugin and run it. Then check to see that the permissions have been fixed.  (I have no clue as to what might have changed these permissions...)

  • Thanks 1
Link to comment
1 hour ago, Frank1940 said:

would suggest that you install the Docker Safe New Perms plugin and run it. Then check to see that the permissions have been fixed.  (I have no clue as to what might have changed these permissions...)

Sorry, the Permissions are the same of this three Directorys.

 

8 minutes ago, JonathanM said:

Might have to do those directory permissions manually, new perms may not change those, probably won't.

We can do this?

With the Dynamix FileManager?

I must exclude some Directorys for example appdata and? How can I do this?

Link to comment
4 minutes ago, Revan335 said:

We can do this?

With the Dynamix FileManager?

Yes, open up any file manager window and click on the house icon at the top left.

No, unfortunately it appears the permissions part of the dynamix file manager operates recursively, so you don't want to do that.

 

Must use the command line.

Edited by JonathanM
Correction
Link to comment
10 minutes ago, itimpi said:

It is not clear how those permissions could go wrong in the first place as they should be set to the correct values any time Unraid is booted.   That suggests something is actively changing them to the wrong values after booting.

Have you any Idea for this?

Link to comment

You should be able to use Midnight Commander to fix those permissions.  Type the following command in the GUI teminal window:

mc

IF you need instructions, google Midnight Commander and you will find a lot of resources.  When it starts, you will be in the /root directory (home directory for the user root)  and will need to up a level to get back to the root directory. 

 

But I agree with @itimpi, there is probably something else going in the background.  You might want to try booting to the Safe Mode which is a bootup option when Unraid starts.  (Oops, I see I have been beat on this one...)

Link to comment
3 minutes ago, Revan335 said:

Do you mean only this three Directorys without Recursive?

Yes.  (I don't believe mc does recursive.)  Select the item to be changed, click on 'File', look for the 'Chmod' option. 

 

I would also suggest that you go to   Settings    >>>>  Docker   and set  'Enable Docker:' to "No".  Then reboot again to the Safe Mode. 

Link to comment
27 minutes ago, Frank1940 said:

I would also suggest that you go to   Settings    >>>>  Docker   and set  'Enable Docker:' to "No".  Then reboot again to the Safe Mode. 

Yes, Docker and VM are deactivated before Boot in Safe Mode.

 

28 minutes ago, Frank1940 said:

Are you running any scripts in the go file?  (Found in the    /config    directory of the flash Drive.)

No, I don't entry there.Screenshot_20230303-232001_HTML-Anzeige.thumb.png.f16d0c5d7a5d86806c45fa3f526231f7.png

Link to comment
1 hour ago, Frank1940 said:

Yes.  (I don't believe mc does recursive.)  Select the item to be changed, click on 'File', look for the 'Chmod' option. 

I changed.

Reboot in Safe Mode no new Changes of the Permission. Its drwx for user, group, others.

 

Reboot in Normal GUI Mode. No Permission Change.

Start VM Service, no Permission Change.

Start Docker Service, no Permission Change.

 

SMB Works!

Awesome!🤘🎉😘💗🥳🚀🎸🎇🎆🥰😍🤩

I'm testing it tomorrow on the different Devices and Users.

 

And forwarding the New Configuration to the State of the old Boot Drive.

Maybe I can find the whatever that change the Permission.

Link to comment

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.
Note: Your post will require moderator approval before it will be visible.

Guest
Reply to this topic...

×   Pasted as rich text.   Restore formatting

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.

×
×
  • Create New...