Centos – Samba not allowing access to /var/www folder

centossamba

I have a local webserver that I want to have samba access to. In my smb.conf everything seems to be working except I cannot access the www folder. I have full permissions on it and have tried everything I can think of in my smb.conf config.

[global]
workgroup = WORKGROUP
server string = Samba Server %v
netbios name = centos
guest account = nobody
map to guest = bad user
security = user
dns proxy = no
wins support = yes
name resolve order = wins lmhosts host bcast
#============================ Share Definitions ==============================
[Webserver]
path = /var
browsable =yes
writable = yes
guest ok = yes
read only = no
[www]
path = /var/www
public = yes
writable = yes
comment = smb share
printable = no
guest ok = yes
create mode = 0777
directory mode = 0777

I am able to get into the Webserver share and open folders except www and on the www share it won't open the error is you do not have permissions to access www folder.

Best Answer

This is due to SELINUX. Try putting it in permissive mode, issuing setenforce 0 and test if Samba now works. If it works and you want to refine your configuration, you can tag /var/www with the public_content_rw_t label and re enable selinux with setenforce 1

For more information, see here

Related Solutions

Samba Permissions – I’m going to throw it!

This might help. I do something similar, but only one share is open to the group's users. Other shares are read-only except for a single maintainer user. The [global] section of my smb.conf is almost identical to yours, except I don't use the force create/directory mode directives (in my case, they'd interfere with the other shares).

Here's the share definition:

[shared stuff]
        comment = blah, blah, etc
        path = /path/to/share
        write list = @sambagroup
        force group = +sambagroup
        read only = yes
        directory mask = 0775
        create mask = 0664
        guest ok = yes
        invalid users = root
        case sensitive = True
        default case = lower
        preserve case = yes
        short preserve case = yes

The important stuff here are these:

read only = yes -- by default, read only.
guest ok = yes -- guests can browse.
write list = @sambagroup -- Authenticated members of sambagroup can write.
force group = +sambagroup -- The + means that the force only applies to existing members of sambagroup. They're already the only ones who can write. I think, without the +, guest is given sambagroup credentials, which is not wanted (particularly with the write list directive above).
directory mask = 0775
create mask = 0664

These do exactly what you want yours to do: "drwxrwxr-x" on directories, "rwxrwxr-x" on files, and newly created files are owned by the user and sambagroup. The maintainers of the other shares get the same permissions as everyone else when working in shared stuff, and permissions & groups are normal when they work in the other shares.

My smb.conf has been working with only minor tweaks through several different versions of Samba, and currently is used with Samba 3.2.5. I never had it running on Ubuntu 8.04, but it ran on Ubuntu 7.04 for a long time before getting migrated to a recent Debian Lenny install.

Linux – Why is samba denying me access to the share

Is SELinux active? If it is, then you can make it accessible by setting the type to public_content_t. If samba should be able to write to it, then set the type to public_content_rw_t. Note that if you do the latter, you will also need to tell SELinux about this; my system-config-selinux has a boolean for this: Allow Samba to write files in directories labeled public_content_rw_t

Best Answer

Related Solutions

Samba Permissions – I’m going to throw it!

Linux – Why is samba denying me access to the share

Related Topic