Folder Permissions

[andyw1691]

I replaced my ageing 500GB disks with 2TB disks and it is all working but with one issue.

All 5 users have a home directory. As part of the upgrade I copied off all of the data and then copied it back to the new disks. It all works well except for one account (mine!).

The other users have Windows PC's and use the N2100 folders as a mapped drive. This works and they can see their sub folders and data.

The problem is with me and my Mac. For some reason I am not getting write access to my home folder when I try and connect via a smb share. I get a message saying "The folder "Andy" can't be opened because you don't have permission to see its contents."

I have tried deleting the folder and the account on the N2100 and recreating them. After creating the folder I add 'Andy' to the ACL in the 'Writable' column and check the 'recursive' box. After pressing 'Submit' i get a message to say the ACL has been set OK.

I have also removed any old passwords stored in my Mac keychain. It still does not work on the Mac!!

And I have reset the password to something that is known & I can test it from Windows, so I know it works.

I'm lost as to what to try next. Any ideas?

Andy

[ferg]

i'd have a look in your smb.conf file.

Search around the forums and you will see numerous examples of what this should look like and how it relates to permissions.

[andyw1691]

Hi ferg & thanks for the reply!

I have had a look round the various forums and have even installed the SSH module on the N2100. I'm afraid we have reached the limit of my technical knowledge with the install. I can't establish an SSH connection to the N2100 from my Mac as I get permission denied, even when I use the admin user.

Without SSH access I don't have access to the smb.conf file.

Any suggestions?

Thanks for your help,

Andy

[ferg]

after installing the ssh plugin, initialise the root password. I wouldn't bother with user logins just yet.

From putty ssh to the ip address and your login should be "root" and the password "irresistable"

This should give you ssh access

[andyw1691]

Ahhhh - it gets worse. I followed the procedure to reset the system by holding in the Reset button for 10 seconds. This reset the system to its default settings. Unfortunately the web interface has stopped working and it does not respond to SSH login requests. It does respond to pings though.

The default IP address it assigned itself is different to what it says in the manual - 194.168.4.100.

I'm now looking through the various forums for ideas on how to get the system back on-line.

Andy

[andyw1691]

It is not quite as bad as I thought. Pressing the Reset button until I hear the beep does not appear to do anything but knock off the web server for a few minutes.. The system comes back with exactly the same IP addresses and admin password as it had before I pressed the Reset button.

The system does respond to SSH login requests but of course I don't know the root password and the admin account/password does not work over SSH either.

The reason for wanting SSH access is to try and resolve a number of issues I'm having with the SMB service. For example it keeps prompting for a password for the iTunes server although no ACL has been configured.

Any suggestions on how I can gain SSH access?

[andyw1691]

Hi, I would be very grateful if someone could give me step by step instructions on how to get v4 of the SSH module working on the N2100. The module is loaded on the N2100 and activated.

As I said in my last posting the Reset button does not appear to be working. I press and hold it it until there is a beep after about 10 seconds but it does not appear to reset anything. The system comes back on-line with the network settings and passwords I set.

Thanks for your help.

Andy

[ferg]

Andy,

if the SSH v4 is installed, to connect to the box via SSH...

Download putty from www.chiark.greenend.org.uk/~sgtatham/putty/

Host Name: your n2100s ip address (e.g. 192.168.1.10)

Connection type: ssh

A terminal window will then open with

login as: root
root@192.168.1.10's password: irresistible

type in the above and you should have console access with
n2100:~#

[andyw1691]

Thanks for the reply Ferg. I'm using a Mac and from a terminal I can SSH to the N2100. What I can't do is login! Below is a transcript from a terminal session.

Andys-MBP:~ Andy$ ssh root@192.168.0.2
root@192.168.0.2's password: (I entered "irresistible")
Permission denied, please try again.

I really don't know what to try next. Any suggestions?

Andy

** Just to cover all options I installed PuTTY onto a Windows PC. Tried to connect to the N2100 but got "Access Denied" message. I uninstalled SSH on the N2100, rebooted and re-installed it and re-enabled it. Still get the Access Denied message.

[andyw1691]

Progress!!

I uninstalled all modules and reinstalled just the SSH module. I can now login to the N2100 as root. The smb.conf file lis shown below. Is there anything obvious that would cause the OSX Mac to not mount the SMB share correctly?

[global]
server string = %h
deadtime = 15
hide unreadable=yes
load printers = no
log file = /opt/samba/var/log/samba.%m
log level = 0
max log size = 50
encrypt passwords = yes
case sensitive = auto
passdb backend = tdbsam
socket options = TCP_NODELAY
use sendfile = yes
local master = yes
domain master = no
preferred master =no
dns proxy = no
dos charset=utf8
unix charset=utf8
display charset=utf8
allow trusted domains = No
idmap uid = 20000-40000
idmap gid = 20000-40000
winbind separator = +
winbind nested groups = yes
winbind enum users = yes
winbind enum groups = yes
create mask = 0644
winbind use default domain = yes
map acl inherit = yes
nt acl support = yes
#map system = yes
bind interfaces only = yes
interfaces = eth*,wlan*,lo
guest account = nobody
map to guest = Bad User
guest only = yes
workgroup = SANDMARTIN
security = user
auth methods = guest sam_ignoredomain
password server = .
realm =
idmap backend = idmap_rid:Sandmartin=20000-40000
wins server =

[Andy]
comment = Andys files
browseable = yes
guest only = no
path = /raid/Andy
map acl inherit = yes
inherit acls = yes
read only = no
create mask = 0777
force create mode = 0000
inherit permissions = Yes
map archive = yes
map hidden = yes
#recursive = yes

[misha]

The N2100 may have a similar setup to the N2200, which on bootup recreates the samba configuration from the database file. So any configuration changes required need to be done to the database file first - using SQLITE.

[andyw1691]

I think the first step would be to identify what, if any, changes are required given the current smb.conf settings. This is way beyond my technical comfort zone. Could someone please compare my smb.conf settings with their own? Or post their own smb.conf settings?

Thanks,

Andy

[andyw1691]

OK, problem solved ! ;D

After a crash course in unix commands I found that the permissions on the folders in the raid/Andy were not the same as other peoples folders. So I reset them to be the same (drwxrwx--- ).

Now this is where it gets interesting as during this (I did it folder by folder) the folder names "Home PC's" caused problems due to the " ' " character in the folder name. So I renamed the file to remove the '.

Everything now works as it did before - I can connect to the SMB share from the Mac with full privileges. Yippee!

The N2100 lives on...