OracleLinux 7.3 - Samba 4.6.2 - NT_STATUS_ACCESS_DENIED

Question

在最近的服务器构建过程中，我遇到了SAMBA的问题。下面是我多次使用的配置，没有问题。

Samba配置-(匿名被注释掉，但启用时工作正常)

    [global]
    workgroup = SAMBA
    security = user
    map to guest = Bad User
    passdb backend = tdbsam

    printing = cups
    printcap name = cups
    load printers = yes
    cups options = raw

    log file = /var/log/samba/%m
    log level = 1

    #[Anonymous]
    #comment = Anonymous File Server Share
    #path = /tmp
    #browsable =yes
    #writable = yes
    #guest ok = yes
    #read only = no

    [hes]
    comment = stuff
    path = /u01/app2
    valid users = hesowner, oracle
    writable = yes
    browsable = yes
    printable = no
    invalid users = None

用smbclient测试本地的共享很好。

    [root@test1 ~]# smbclient -U hesowner //test1/hes
    Enter SAMBA\hesowner's password:
    Domain=[TEST1] OS=[Windows 6.1] Server=[Samba 4.6.2]
    smb: \> ls
    .                                   D        0  Tue Aug 29 14:39:32 2017
    ..                                  D        0  Tue Aug 29 14:33:15 2017
    reports                             D        0  Tue Aug 29 14:33:15 2017
    forms                               D        0  Tue Aug 29 14:33:53 2017
    eis_ws_approvals                    D        0  Tue Aug 29 14:45:20 2017

            52403200 blocks of size 1024. 36431144 blocks available
    smb: \>

因此，问题是在Windows10 Pro中，当试图通过\test1 1\ is访问共享时，我只是得到一个提示，反复提示用户/pass，而不能访问共享。

这是原木。

   [2017/09/07 11:54:20.051608,  2] ../source3/smbd/service.c:319(create_connection_session_info)
   guest user (from session setup) not permitted to access this share (hes)
   [2017/09/07 11:54:20.051670,  1] ../source3/smbd/service.c:502(make_connection_snum)
     create_connection_session_info failed: NT_STATUS_ACCESS_DENIED
    [2017/09/07 11:54:20.125206,  2] ../source3/smbd/service.c:319(create_connection_session_info)
     guest user (from session setup) not permitted to access this share (hes)
    [2017/09/07 11:54:20.125265,  1] ../source3/smbd/service.c:502(make_connection_snum)
     create_connection_session_info failed: NT_STATUS_ACCESS_DENIED
    [2017/09/07 11:54:20.161800,  2] ../source3/smbd/service.c:319(create_connection_session_info)
     guest user (from session setup) not permitted to access this share (hes)
    [2017/09/07 11:54:20.161824,  1] ../source3/smbd/service.c:502(make_connection_snum)
      create_connection_session_info failed: NT_STATUS_ACCESS_DENIED
    [2017/09/07 11:54:20.237828,  2] ../source3/smbd/service.c:319(create_connection_session_info)
     guest user (from session setup) not permitted to access this share (hes)
    [2017/09/07 11:54:20.237851,  1] ../source3/smbd/service.c:502(make_connection_snum)
     create_connection_session_info failed: NT_STATUS_ACCESS_DENIED

我看到它提到的是“客人用户”，这是奇怪的。移除“映射到来宾=坏用户”时，什么都不起作用

我完全不知所措..。

谢谢你的帮助。

Answer 1

如果其他人遇到这个问题，我的解决方案是调整Windows客户端上的安全策略。

Run > Secpol.msc

然后，我将本地策略>安全选项>网络安全: LAN管理器身份验证级别设置为‘仅发送NTLMv2响应。拒绝LM和NTLM’。

否则，您可以改为编辑SAMABA。

将下面的行添加到smb.conf文件的全局部分。

ntlm auth = yes

没有解决我自己。找到解决方案这里。