FC5 SAMBA security=share [homes] problem

[Paul Howarth]

On Thu, 2006-10-12 at 15:10 -0400, Robert Locke wrote:
> On Thu, 2006-10-12 at 14:38 +0100, Gary Stainburn wrote:
> > On Thursday 12 October 2006 14:04, Mogens Kjaer wrote:
> > > Gary Stainburn wrote:
> > > ...
> > >
> > > > However, if I remove /etc/samba/smbpasswd and /etc/samba/smbusers Samba
> > > > behaves exactly the same, so I think it's not using these files.
> > >
> > > Can you do a:
> > >
> > > testparm -v >/tmp/panic1
> > > <press return>
> > >
> > > fgrep smbpasswd /tmp/panic1
> > >
> > > What is the owner and permissions on /etc/samba/smbpasswd ?
> > >
> > 
> > [root at larry2 ~]# testparm -v|grep passwd
> > Load smb config files from /etc/samba/smb.conf
> >         smb passwd file = /etc/samba/smbpasswd
> >         passdb backend = smbpasswd
> >         passwd program =
> >         passwd chat = *new*password* %n\n *new*password* %n\n *changed*
> >         passwd chat debug = No
> >         passwd chat timeout = 2
> >         ldap passwd sync = no
> > [root at larry2 ~]# ll -d / /etc/ /etc/samba/ /etc/samba/smbpasswd
> > drwxr-xr-x 24 root root  4096 Oct 12 14:17 /
> > drwxr-xr-x 94 root root 12288 Oct 12 14:17 /etc/
> > drwxr-xr-x  2 root root  4096 Oct 12 14:31 /etc/samba/
> > -rw-------  1 root root   421 Oct 12 13:11 /etc/samba/smbpasswd
> > [root at larry2 ~]#  
> > 
> > I've also tried adding the smb passwd file= as suggested by Anna, but that has 
> > not made any difference.
> > 
> > Gary
> 
> Shot in the dark, but could SELinux be getting in your way?  The default
> targeted policy in FC5 is blocking Samba sharing of home.  Not sure how
> to change it at the command line, but if you look in
> system-config-securitylevel there is a boolean under Samba that refers
> to allowing home directories to be shared.....

That would be:

# setsebool -P samba_enable_home_dirs 1

See "man samba_selinux"

Paul.


> 
> --Rob
>