topic Re: CIFS client issue in Operating System - HP-UX

CIFS client issue

KVK — Sat, 21 Jan 2006 06:53:01 GMT

We have done the cifsclient setup from windows side to Unix server . Able to mount properly in Unix server using the #cifsmount but the problem here is except the Unix root user other users are not able to access the folder

Getting the Permission Denied error

Checked the Folder permission it has Full 777 permissions even in windows side as well

You experts points are welcome

Re: CIFS client issue

Steven E. Protter — Sat, 21 Jan 2006 11:44:30 GMT

Shalom KVK,

Don't check from the windows side. If the Unix side is the server, check from the Unix side.

Lets say the folder is named /schmobagel

ll -d /schmobagel

For non-root users to write to it, it must have write permissions for those users.

If there are subfolders in /schmobagel then their ownership should be checked as well.

Its possible to limit access to the share in the smb.cnf file as well. Check the shares in there to make sure they permit write and are not set readonly=yes

Any of these little things will prevent non-root users access.

If you have a question, post the ll -d and snippet from smb.conf back to this thread.

/etc/opt/samba/smb.conf

SEP

Re: CIFS client issue

KVK — Sat, 21 Jan 2006 11:48:21 GMT

Thabks for the response SEP,

As you said Cifs server setup has been successfully done in unix server . windows clients are able to access it ..

My issue is Windows is the file server i am mounting that windows directory in Unix using the command

#mount -F cifs -o username=user,password=pass servername:/mountpoint /localmountpoint

Except the root user other users are unable to access it

Re: CIFS client issue

Steven E. Protter — Sat, 21 Jan 2006 12:03:21 GMT

Okay, that clarified or makes up for my poor reading comprehension.

In this case the Unix users need to correspond to valid Windows users to have proper access.

Since root is doing the mount, it makes sense that it has access.

Has the Unix machine used the net command to join the domain? If security=domain is being used, and its a good idea, then join the domain and the problem should go away.

SEP

Re: CIFS client issue

KVK — Sat, 21 Jan 2006 12:24:18 GMT

I am well aware about it but the Unix server file sharing to windows clients has been done by workgroup policy

For Cifsclient we have mentioned the /etc/opt/cifsclient/cifsclient.cfg

Domain=workgroupname

it's workgroup based what is the suggested way to acieve and gimme the setup so that i can re configure it

Re: CIFS client issue

Steven E. Protter — Sat, 21 Jan 2006 12:28:13 GMT

KVK, I've not used that last configuration file personally.

If there is no domain, I guess it should work. If there is a domain, you may get better results by joining the Samba server to the domain.

Also, even though you are only using CIFS client, you may need to have CIFS server installed, but not running. I've found CIFS server does not work right when CIFS client is not installed. The net join command in my case failed until client was installed.

I now believe that the two depots should be installed as a pair.

After this nice digression, my next question is what version of CIFS is installed. The newer the better, there were lots of bugs in older versions.

swlist -l product | grep -i CIFS

SEP

Re: CIFS client issue

KVK — Sat, 21 Jan 2006 12:40:29 GMT

CIFS-Client A.01.09.02 CIFS Client

CIFS-Development A.01.11.02 HP CIFS Server Source Code Files

CIFS-Server A.01.11.02 HP CIFS Server (Samba) File and Print Services

it will mount succesfully ... no issues only clients i checked the Directory permissions from windows side & unix directory as well all are having full permission

The unix user which it's trying to access the mount point should be logged into the wins server(CIFS server) using cifslogin?

Re: CIFS client issue

Steven E. Protter — Sat, 21 Jan 2006 13:18:54 GMT

In a workgroup environment it is very useful to have the id's the same on the Unix side and the Windows side. It saves dealing with the samba configuration that normalized numeric user id's.

If you don't have full integration of the windows server to the windows domain, the same character user id from unix will be recognized by windows.

There may be password issues.

If the user can use the cifsmount command(I don't know) perhaps if the user did the mount with user id and password it would work.

SEP

Re: CIFS client issue

eric roseme — Mon, 23 Jan 2006 17:00:37 GMT

Hi KVK,

You did the cifsmount with root - that is why you have root access. All other users must do a cifslogin - that is the authentication required to access the share (mount). Look at the newest CIFS Client Admin manual (docs.hp.com) on page 43:

Before a user on a CIFS client can access the mountpoint of a CIFS server, the user must be authenticated by the server (the user must login to the server). Four login methods are available; they are explained in the following pages. Restrictions at the file or directory level on the server's filesystem are also enforced by the server

Then you get all of the auth-n detail. You can even do kerberos, etc....

Here is the manual url:

http://www.docs.hp.com/en/B8724-90067/B8724-90067.pdf

Eric Roseme

Re: CIFS client issue

KVK — Thu, 26 Jan 2006 17:50:12 GMT

Thanks for your guidance ... Anyhow i setup the user as a Guest user by referring docs earlier