Centos

CentOS 7.4 Samba 共享訪問被拒絕

  • July 5, 2018

我已經在 CentOS 7.4 上設置了 Samba 伺服器，並且據說允許它在 SELinux 中使用。我可以成功訪問根文件系統上的匿名共享，但無法訪問已掛載的 NTFS 分區上的目錄。在Win10中我得到

您無權訪問 \192.16.1.119\soft

這是我在 fstab 中掛載 NTFS 共享的方法

UUID=3636E6FC36E6BC4D /media/SYSTEM ntfs rw,auto,users,exec,nls=utf8,umask=003,gid=1000,uid=1000    0   0

這是我的 smb.conf

[global]

workgroup = WORKGROUP
server string = Centy Samba %v
netbios name = centos
security = user
map to guest = bad user
dns proxy = no
log level = 3
log file = /var/log/smblog
#============================ Share Definitions ==============================

[Anonymous]
path = /samba/anonymous
browsable = yes
writable = yes
guest ok = yes
read only = no

[soft]
path = /media/SYSTEM/soft
read only = no
guest ok = yes
writable = yes
browsable = yes

這是日誌：

../source3/nmbd/nmbd_elections.c:41(send_election_dgram)
 send_election_dgram: Sending election packet for workgroup WORKGROUP on subnet 192.168.122.1
../source3/nmbd/nmbd_elections.c:41(send_election_dgram)
 send_election_dgram: Sending election packet for workgroup WORKGROUP on subnet 192.168.122.1
../source3/nmbd/nmbd_elections.c:41(send_election_dgram)
 send_election_dgram: Sending election packet for workgroup WORKGROUP on subnet 192.168.122.1
../source3/nmbd/nmbd_elections.c:201(run_elections)
 run_elections: >>> Won election for workgroup WORKGROUP on subnet 192.168.122.1 <<<
../source3/nmbd/nmbd_become_lmb.c:538(become_local_master_browser)
 become_local_master_browser: Starting to become a master browser for workgroup WORKGROUP on subnet 192.168.122.1
../source3/nmbd/nmbd_become_lmb.c:540(become_local_master_browser)
 become_local_master_browser: first stage - attempt to register ^1^2__MSBROWSE__^2^1
../source3/nmbd/nmbd_serverlistdb.c:411(write_browse_list)
 write_browse_list: Wrote browse list into file /var/lib/samba/browse.dat
../source3/nmbd/nmbd_incomingrequests.c:323(process_node_status_request)
 process_node_status_request: status request for name *<00> from IP 192.168.1.1 on subnet UNICAST_SUBNET.
../source3/nmbd/nmbd_namelistdb.c:263(add_name_to_subnet)
 add_name_to_subnet: Added netbios name __MSBROWSE__<01> with first IP 192.168.122.1 ttl=0 nb_flags=80 to subnet 192.168.122.1
../source3/nmbd/nmbd_become_lmb.c:453(become_local_master_stage1)
 become_local_master_stage1: go to stage 2: register the WORKGROUP<1d> name.
../source3/nmbd/nmbd_namelistdb.c:263(add_name_to_subnet)
 add_name_to_subnet: Added netbios name __MSBROWSE__<01> with first IP 192.168.122.1 ttl=0 nb_flags=80 to subnet UNICAST_SUBNET
../source3/nmbd/nmbd_namelistdb.c:263(add_name_to_subnet)
 add_name_to_subnet: Added netbios name WORKGROUP<1d> with first IP 192.168.122.1 ttl=0 nb_flags= 0 to subnet 192.168.122.1
../source3/nmbd/nmbd_become_lmb.c:354(become_local_master_stage2)
 become_local_master_stage2: registered as master browser for workgroup WORKGROUP on subnet 192.168.122.1
../source3/nmbd/nmbd_sendannounce.c:70(broadcast_announce_request)
 broadcast_announce_request: sending announce request for workgroup WORKGROUP to subnet 192.168.122.1
../source3/nmbd/nmbd_namelistdb.c:263(add_name_to_subnet)
 add_name_to_subnet: Added netbios name WORKGROUP<1d> with first IP 192.168.122.1 ttl=0 nb_flags= 0 to subnet UNICAST_SUBNET
../source3/nmbd/nmbd_become_lmb.c:397(become_local_master_stage2)
 *****

 Samba name server CENTOS is now a local master browser for workgroup WORKGROUP on subnet 192.168.122.1

 *****
../source3/nmbd/nmbd_sendannounce.c:170(send_local_master_announcement)
 send_local_master_announcement: type 849a03 for name CENTOS on subnet 192.168.122.1 for workgroup WORKGROUP
../source3/nmbd/nmbd_sendannounce.c:189(send_workgroup_announcement)
 send_workgroup_announcement: on subnet 192.168.122.1 for workgroup WORKGROUP
../source3/nmbd/nmbd_incomingrequests.c:459(process_name_query_request)
 process_name_query_request: Name query from 192.168.1.100 on subnet 192.168.1.105 for name MEZCAL<20>
../source3/nmbd/nmbd_incomingrequests.c:459(process_name_query_request)
 process_name_query_request: Name query from 192.168.1.100 on subnet 192.168.1.105 for name MEZCAL<20>
../source3/nmbd/nmbd_incomingrequests.c:459(process_name_query_request)
 process_name_query_request: Name query from 192.168.1.100 on subnet 192.168.1.105 for name WORKGROUP<1b>
../source3/nmbd/nmbd_serverlistdb.c:411(write_browse_list)
 write_browse_list: Wrote browse list into file /var/lib/samba/browse.dat
../source3/nmbd/nmbd_incomingrequests.c:459(process_name_query_request)
 process_name_query_request: Name query from 192.168.1.100 on subnet 192.168.1.105 for name WORKGROUP<1b>
../source3/nmbd/nmbd_incomingrequests.c:323(process_node_status_request)
 process_node_status_request: status request for name *<00> from IP 192.168.1.1 on subnet UNICAST_SUBNET.
../lib/util/access.c:361(allow_access)
 Allowed connection from 192.168.1.100 (192.168.1.100)
../source3/smbd/oplock.c:1329(init_oplocks)
 init_oplocks: initializing messages.
../source3/smbd/process.c:1959(process_smb)
 Transaction 0 of length 178 (0 toread)
../source3/smbd/smb2_negprot.c:290(smbd_smb2_request_process_negprot)
 Selected protocol SMB3_11
../auth/gensec/gensec_start.c:977(gensec_register)
 GENSEC backend 'gssapi_spnego' registered
../auth/gensec/gensec_start.c:977(gensec_register)
 GENSEC backend 'gssapi_krb5' registered
../auth/gensec/gensec_start.c:977(gensec_register)
 GENSEC backend 'gssapi_krb5_sasl' registered
../auth/gensec/gensec_start.c:977(gensec_register)
 GENSEC backend 'spnego' registered
../auth/gensec/gensec_start.c:977(gensec_register)
 GENSEC backend 'schannel' registered
../auth/gensec/gensec_start.c:977(gensec_register)
 GENSEC backend 'naclrpc_as_system' registered
../auth/gensec/gensec_start.c:977(gensec_register)
 GENSEC backend 'sasl-EXTERNAL' registered
../auth/gensec/gensec_start.c:977(gensec_register)
 GENSEC backend 'ntlmssp' registered
../auth/gensec/gensec_start.c:977(gensec_register)
 GENSEC backend 'ntlmssp_resume_ccache' registered
../auth/gensec/gensec_start.c:977(gensec_register)
 GENSEC backend 'http_basic' registered
../auth/gensec/gensec_start.c:977(gensec_register)
 GENSEC backend 'http_ntlm' registered
../auth/ntlmssp/ntlmssp_util.c:69(debug_ntlmssp_flags)
 Got NTLMSSP neg_flags=0xe2088297
../auth/ntlmssp/ntlmssp_server.c:454(ntlmssp_server_preauth)
 Got user=[pepe] domain=[ISIDA] workstation=[ISIDA] len1=24 len2=244
../source3/param/loadparm.c:3847(lp_load_ex)
 lp_load_ex: refreshing parameters
../source3/param/loadparm.c:543(init_globals)
 Initialising global parameters
../source3/param/loadparm.c:2761(lp_do_section)
 Processing section "[global]"
../source3/param/loadparm.c:2778(lp_do_section)
 Processing section "[Anonymous]"
../source3/param/loadparm.c:2778(lp_do_section)
 Processing section "[soft]"
../source3/param/loadparm.c:1596(lp_add_ipc)
 adding IPC service
../source3/auth/auth.c:189(auth_check_ntlm_password)
 check_ntlm_password:  Checking password for unmapped user [ISIDA]\[pepe]@[ISIDA] with the new password interface
../source3/auth/auth.c:192(auth_check_ntlm_password)
 check_ntlm_password:  mapped user is: [ISIDA]\[pepe]@[ISIDA]
../source3/auth/check_samsec.c:399(check_sam_security)
 check_sam_security: Couldn't find user 'pepe' in passdb.
../source3/auth/auth.c:332(auth_check_ntlm_password)
 check_ntlm_password:  Authentication for user [pepe] -> [pepe] FAILED with error NT_STATUS_NO_SUCH_USER, authoritative=1
../auth/auth_log.c:760(log_authentication_event_human_readable)
 Auth: [SMB2,(null)] user [ISIDA]\[pepe] at [Sat, 09 Jun 2018 02:58:47.401161 EDT] with [NTLMv2] status [NT_STATUS_NO_SUCH_USER] workstation [ISIDA] remote host [ipv4:192.168.1.100:9520] mapped to [ISIDA]\[pepe]. local host [ipv4:192.168.1.105:445] 
../auth/auth_log.c:591(log_no_json)
 log_no_json: JSON auth logs not available unless compiled with jansson
../source3/auth/auth_util.c:1626(do_map_to_guest_server_info)
 No such user pepe [ISIDA] - using guest account
../lib/util/access.c:361(allow_access)
 Allowed connection from 192.168.1.100 (192.168.1.100)
../source3/smbd/service.c:595(make_connection_snum)
 Connect path is '/media/BACKUP/soft' for service [soft]
../source3/smbd/vfs.c:113(vfs_init_default)
 Initialising default vfs hooks
../source3/smbd/vfs.c:139(vfs_init_custom)
 Initialising custom vfs hooks from [/[Default VFS]/]
../source3/smbd/service.c:841(make_connection_snum)
 isida (ipv4:192.168.1.100:9520) connect to service soft initially as user nobody (uid=99, gid=99) (pid 1876)
../source3/smbd/service.c:120(set_current_service)
 chdir (/media/BACKUP/soft) failed, reason: Permission denied
../source3/smbd/smb2_server.c:3120(smbd_smb2_request_error_ex)
 smbd_smb2_request_error_ex: smbd_smb2_request_error_ex: idx[1] status[NT_STATUS_ACCESS_DENIED] || at ../source3/smbd/smb2_server.c:2472
../source3/smbd/service.c:120(set_current_service)
 chdir (/media/BACKUP/soft) failed, reason: Permission denied
../source3/smbd/smb2_server.c:3120(smbd_smb2_request_error_ex)
 smbd_smb2_request_error_ex: smbd_smb2_request_error_ex: idx[1] status[NT_STATUS_ACCESS_DENIED] || at ../source3/smbd/smb2_server.c:2472
../lib/util/access.c:361(allow_access)
 Allowed connection from 192.168.1.100 (192.168.1.100)
../source3/smbd/service.c:595(make_connection_snum)
 Connect path is '/samba/anonymous' for service [Anonymous]
../source3/smbd/vfs.c:113(vfs_init_default)
 Initialising default vfs hooks
../source3/smbd/vfs.c:139(vfs_init_custom)
 Initialising custom vfs hooks from [/[Default VFS]/]
../source3/smbd/service.c:841(make_connection_snum)
 isida (ipv4:192.168.1.100:9520) connect to service Anonymous initially as user nobody (uid=99, gid=99) (pid 1876)
../source3/rpc_server/srv_pipe.c:748(api_pipe_bind_req)
 api_pipe_bind_req: srvsvc -> srvsvc rpc service
../source3/rpc_server/srv_pipe.c:356(check_bind_req)
 check_bind_req for srvsvc context_id=0
../source3/rpc_server/srv_pipe.c:399(check_bind_req)
 check_bind_req: srvsvc -> srvsvc rpc service
../source3/rpc_server/srv_pipe.c:1528(api_rpcTNP)
 api_rpcTNP: rpc command: SRVSVC_NETSHAREGETINFO
../source3/smbd/smb2_server.c:3120(smbd_smb2_request_error_ex)
 smbd_smb2_request_error_ex: smbd_smb2_request_error_ex: idx[1] status[NT_STATUS_FS_DRIVER_REQUIRED] || at ../source3/smbd/smb2_ioctl.c:309
../source3/smbd/smb2_server.c:3120(smbd_smb2_request_error_ex)
 smbd_smb2_request_error_ex: smbd_smb2_request_error_ex: idx[1] status[NT_STATUS_OBJECT_NAME_NOT_FOUND] || at ../source3/smbd/smb2_create.c:293
../source3/smbd/dir.c:657(dptr_create)
 creating new dirptr 0 for path ., expect_close = 0
../source3/smbd/dir.c:1228(smbd_dirptr_get_entry)
 smbd_dirptr_get_entry mask=[*] found . fname=. (.)
../source3/smbd/dir.c:1228(smbd_dirptr_get_entry)
 smbd_dirptr_get_entry mask=[*] found .. fname=.. (..)
../source3/smbd/smb2_server.c:3120(smbd_smb2_request_error_ex)
 smbd_smb2_request_error_ex: smbd_smb2_request_error_ex: idx[9] status[STATUS_NO_MORE_FILES] || at ../source3/smbd/smb2_query_directory.c:155
../source3/smbd/smb2_notify.c:250(smbd_smb2_notify_send)
 smbd_smb2_notify_send: notify change called on ., filter = DIR_NAME, recursive = 0
../source3/smbd/smb2_notify.c:250(smbd_smb2_notify_send)
 smbd_smb2_notify_send: notify change called on ., filter = FILE_NAME|ATTRIBUTES|LAST_WRITE, recursive = 0
../source3/rpc_server/srv_pipe.c:748(api_pipe_bind_req)
 api_pipe_bind_req: srvsvc -> srvsvc rpc service
../source3/rpc_server/srv_pipe.c:356(check_bind_req)
 check_bind_req for srvsvc context_id=0
../source3/rpc_server/srv_pipe.c:399(check_bind_req)
 check_bind_req: srvsvc -> srvsvc rpc service
../source3/rpc_server/srv_pipe.c:1528(api_rpcTNP)
 api_rpcTNP: rpc command: SRVSVC_NETSHAREENUMALL
../source3/smbd/smb2_server.c:3120(smbd_smb2_request_error_ex)
 smbd_smb2_request_error_ex: smbd_smb2_request_error_ex: idx[1] status[NT_STATUS_CANCELLED] || at ../source3/smbd/smb2_notify.c:123
../source3/smbd/smb2_server.c:3120(smbd_smb2_request_error_ex)
 smbd_smb2_request_error_ex: smbd_smb2_request_error_ex: idx[1] status[NT_STATUS_CANCELLED] || at ../source3/smbd/smb2_notify.c:123
../source3/smbd/smb2_server.c:3120(smbd_smb2_request_error_ex)
 smbd_smb2_request_error_ex: smbd_smb2_request_error_ex: idx[1] status[NT_STATUS_FS_DRIVER_REQUIRED] || at ../source3/smbd/smb2_ioctl.c:309
../source3/smbd/service.c:120(set_current_service)
 chdir (/media/BACKUP/soft) failed, reason: Permission denied
../source3/smbd/smb2_server.c:3120(smbd_smb2_request_error_ex)
 smbd_smb2_request_error_ex: smbd_smb2_request_error_ex: idx[1] status[NT_STATUS_ACCESS_DENIED] || at ../source3/smbd/smb2_server.c:2472
../source3/smbd/smb2_server.c:3120(smbd_smb2_request_error_ex)
 smbd_smb2_request_error_ex: smbd_smb2_request_error_ex: idx[1] status[NT_STATUS_FS_DRIVER_REQUIRED] || at ../source3/smbd/smb2_ioctl.c:309
../source3/smbd/service.c:120(set_current_service)
 chdir (/media/BACKUP/soft) failed, reason: Permission denied
../source3/smbd/smb2_server.c:3120(smbd_smb2_request_error_ex)
 smbd_smb2_request_error_ex: smbd_smb2_request_error_ex: idx[1] status[NT_STATUS_ACCESS_DENIED] || at ../source3/smbd/smb2_server.c:2472
../source3/smbd/service.c:120(set_current_service)
 chdir (/media/BACKUP/soft) failed, reason: Permission denied
../source3/smbd/smb2_server.c:3120(smbd_smb2_request_error_ex)
 smbd_smb2_request_error_ex: smbd_smb2_request_error_ex: idx[1] status[NT_STATUS_ACCESS_DENIED] || at ../source3/smbd/smb2_server.c:2472
../source3/smbd/service.c:120(set_current_service)
 chdir (/media/BACKUP/soft) failed, reason: Permission denied
../source3/smbd/smb2_server.c:3120(smbd_smb2_request_error_ex)
../source3/nmbd/nmbd_incomingrequests.c:323(process_node_status_request)
 process_node_status_request: status request for name *<00> from IP 192.168.1.1 on subnet UNICAST_SUBNET.
../source3/smbd/service.c:1120(close_cnum)
 isida (ipv4:192.168.1.100:9520) closed connection to service IPC$
../source3/nmbd/nmbd_incomingrequests.c:323(process_node_status_request)
 process_node_status_request: status request for name *<00> from IP 192.168.1.1 on subnet UNICAST_SUBNET.
../source3/nmbd/nmbd_sendannounce.c:212(send_host_announcement)
 send_host_announcement: type 819a03 for host CENTOS on subnet 192.168.1.105 for workgroup WORKGROUP
../source3/nmbd/nmbd_incomingrequests.c:323(process_node_status_request)
 process_node_status_request: status request for name *<00> from IP 192.168.1.1 on subnet UNICAST_SUBNET.
../source3/smbd/service.c:120(set_current_service)
 chdir (/media/BACKUP/soft) failed, reason: Permission denied
../source3/smbd/smb2_server.c:3120(smbd_smb2_request_error_ex)
 smbd_smb2_request_error_ex: smbd_smb2_request_error_ex: idx[1] status[NT_STATUS_ACCESS_DENIED] || at ../source3/smbd/smb2_server.c:2472
../lib/util/access.c:361(allow_access)
 Allowed connection from 192.168.1.100 (192.168.1.100)
../source3/smbd/service.c:595(make_connection_snum)
 Connect path is '/tmp' for service [IPC$]
../source3/smbd/vfs.c:113(vfs_init_default)
 chdir (/media/BACKUP/soft) failed, reason: Permission denied
../source3/smbd/smb2_server.c:3120(smbd_smb2_request_error_ex)
 smbd_smb2_request_error_ex: smbd_smb2_request_error_ex: idx[1] status[NT_STATUS_ACCESS_DENIED] || at ../source3/smbd/smb2_server.c:2472
../lib/util/access.c:361(allow_access)
 Allowed connection from 192.168.1.100 (192.168.1.100)
../source3/smbd/service.c:595(make_connection_snum)
 Connect path is '/tmp' for service [IPC$]
../source3/smbd/vfs.c:113(vfs_init_default)
 Initialising default vfs hooks
../source3/smbd/vfs.c:139(vfs_init_custom)
 Initialising custom vfs hooks from [/[Default VFS]/]
../source3/smbd/service.c:841(make_connection_snum)
 isida (ipv4:192.168.1.100:9520) connect to service IPC$ initially as user nobody (uid=99, gid=99) (pid 1876)
../source3/smbd/service.c:120(set_current_service)
 chdir (/media/BACKUP/soft) failed, reason: Permission denied
../source3/smbd/smb2_server.c:3120(smbd_smb2_request_error_ex)
 smbd_smb2_request_error_ex: smbd_smb2_request_error_ex: idx[1] status[NT_STATUS_ACCESS_DENIED] || at ../source3/smbd/smb2_server.c:2472
../source3/rpc_server/srv_pipe.c:748(api_pipe_bind_req)
 api_pipe_bind_req: srvsvc -> srvsvc rpc service
../source3/rpc_server/srv_pipe.c:356(check_bind_req)
 check_bind_req for srvsvc context_id=0
../source3/rpc_server/srv_pipe.c:399(check_bind_req)
 check_bind_req: srvsvc -> srvsvc rpc service
../source3/rpc_server/srv_pipe.c:1528(api_rpcTNP)
 api_rpcTNP: rpc command: SRVSVC_NETSHAREGETINFO
../source3/smbd/smb2_server.c:3120(smbd_smb2_request_error_ex)
 smbd_smb2_request_error_ex: smbd_smb2_request_error_ex: idx[1] status[NT_STATUS_FS_DRIVER_REQUIRED] || at ../source3/smbd/smb2_ioctl.c:309
../source3/smbd/service.c:120(set_current_service)
 chdir (/media/BACKUP/soft) failed, reason: Permission denied
../source3/smbd/smb2_server.c:3120(smbd_smb2_request_error_ex)
 smbd_smb2_request_error_ex: smbd_smb2_request_error_ex: idx[1] status[NT_STATUS_ACCESS_DENIED] || at ../source3/smbd/smb2_server.c:2472
../source3/smbd/service.c:120(set_current_service)
 chdir (/media/BACKUP/soft) failed, reason: Permission denied
../source3/smbd/smb2_server.c:3120(smbd_smb2_request_error_ex)
 smbd_smb2_request_error_ex: smbd_smb2_request_error_ex: idx[1] status[NT_STATUS_ACCESS_DENIED] || at ../source3/smbd/smb2_server.c:2472
../source3/smbd/service.c:120(set_current_service)
 chdir (/media/BACKUP/soft) failed, reason: Permission denied
../source3/smbd/smb2_server.c:3120(smbd_smb2_request_error_ex)
 smbd_smb2_request_error_ex: smbd_smb2_request_error_ex: idx[1] status[NT_STATUS_ACCESS_DENIED] || at ../source3/smbd/smb2_server.c:2472
../source3/smbd/service.c:120(set_current_service)
 chdir (/media/BACKUP/soft) failed, reason: Permission denied
../source3/smbd/smb2_server.c:3120(smbd_smb2_request_error_ex)
 smbd_smb2_request_error_ex: smbd_smb2_request_error_ex: idx[1] status[NT_STATUS_ACCESS_DENIED] || at ../source3/smbd/smb2_server.c:2472
../source3/smbd/service.c:120(set_current_service)
 chdir (/media/BACKUP/soft) failed, reason: Permission denied
../source3/smbd/smb2_server.c:3120(smbd_smb2_request_error_ex)
 smbd_smb2_request_error_ex: smbd_smb2_request_error_ex: idx[1] status[NT_STATUS_ACCESS_DENIED] || at ../source3/smbd/smb2_server.c:2472
../source3/smbd/service.c:120(set_current_service)
 chdir (/media/BACKUP/soft) failed, reason: Permission denied
../source3/smbd/smb2_server.c:3120(smbd_smb2_request_error_ex)
 smbd_smb2_request_error_ex: smbd_smb2_request_error_ex: idx[1] status[NT_STATUS_ACCESS_DENIED] || at ../source3/smbd/smb2_server.c:2472
../source3/smbd/service.c:120(set_current_service)
 chdir (/media/BACKUP/soft) failed, reason: Permission denied
../source3/smbd/smb2_server.c:3120(smbd_smb2_request_error_ex)
 smbd_smb2_request_error_ex: smbd_smb2_request_error_ex: idx[1] status[NT_STATUS_ACCESS_DENIED] || at ../source3/smbd/smb2_server.c:2472
../source3/smbd/service.c:120(set_current_service)
 chdir (/media/BACKUP/soft) failed, reason: Permission denied
../source3/smbd/smb2_server.c:3120(smbd_smb2_request_error_ex)
 smbd_smb2_request_error_ex: smbd_smb2_request_error_ex: idx[1] status[NT_STATUS_ACCESS_DENIED] || at ../source3/smbd/smb2_server.c:2472
../source3/nmbd/nmbd_incomingrequests.c:323(process_node_status_request)
 process_node_status_request: status request for name *<00> from IP 192.168.1.1 on subnet UNICAST_SUBNET.
../source3/smbd/service.c:1120(close_cnum)

它是一些 NTFS 安裝限制嗎？

更新： 這是tukan 修改後的新日誌

您使用的是未知帳戶：

check_ntlm_password:  Authentication for user [pepe] -> [pepe] FAILED with error NT_STATUS_NO_SUCH_USER, authoritative=1

所以你的訪問權限soft是作為客人的。您在 Samba 中允許來賓訪問，但文件系統中的權限似乎沒有設置為兌現這一點。

預設情況下，來賓使用者是nobody，因此您需要設置文件系統權限以允許其訪問。或者更改您嘗試訪問共享的方式。

通過評論添加的資訊，我們似乎需要一個更詳細的解決方案。目前，您使用明確的所有者安裝 NTFS 文件系統 - 本質上將其所有權視為 vFAT 文件系統。但是該所有者與您通過 Samba 定義的用於訪問文件系統的帳戶不匹配，因此 Samba 帳戶無法訪問文件系統。這些必須匹配，或者您需要使用 NTFS 文件系統權限並刪除強制掛載所有權。

讓我們採取需要對您的系統進行較少更改的路線。這是一種家庭使用者方法，而不是多使用者（“企業”）方法。

  1. 保持 NTFS 掛載不變，以便繼續強制 owner=1000，group=1000。
  2. force user通過包含以下指令，告訴 Samba 在訪問相應共享時，必須將經過身份驗證的使用者視為 owner=1000, group=1000 ：
[global]
...
security = user
map to guest = bad user     # Use "guest" account for unknown users
; guest account = nobody    # Implicit default unless you override it

[soft]
path = /media/SYSTEM/soft
read only = no
writable = yes
browsable = yes
guest ok = yes              # Allow unknown users to access this share
force user = 1000           # Samba authenticates, but filesystem access is as uid=1000

請注意，具有無效密碼的有效使用者將被拒絕訪問，但將允許無效使用者（具有任何密碼）訪問。這就是您在此處使用map to guest = bad userand定義的內容guest ok = yes。我強烈建議您將其中一個更改為閱讀map to guest = neveror 或guest ok = no.

在您的/etc/fstab我建議您考慮刪除 NTFS 文件系統的uid、gid和umask設置，因為然後您可以刪除 Samba 中的force user和force group設置。但是您可能對這些值有充分的理由，所以我沒有在回答中更改它們。

引用自：https://unix.stackexchange.com/questions/448756

相關問答

Centos

在 AlmaLinux 8 或 CentOS 7 上，vm.swappiness=0 是否意味著 Swap 被完全禁用？

  • October 20, 2022
檢視問答
Centos

刪除最新的（不是舊的） 核心條目（升級）CentOS

  • October 4, 2021
檢視問答
Linux

將 samba 有效使用者連結到文本文件

  • August 26, 2021
檢視問答
Centos

kernel/auditsc.c:1532 處的核心錯誤

  • August 25, 2021
檢視問答
Centos

在 Oracle Linux 8 中未檢測到 HP 1/8 G2 介質更換器

  • August 17, 2021
檢視問答
Centos

找不到核心 3.10.0-229.el7.x86_64 的核心標頭檔

  • February 27, 2021
檢視問答