Hello everybody. Here is my problem. I have two computers, both with fedora workstation 27, both with selinux disabled, both fully updated. Both have the same configuration of samba: [global] workgroup = WORKGROUP security = user passdb backend = tdbsam printing = cups printcap name = cups load printers = yes cups options = raw usershare max shares = 5 usershare allow guests = yes guest ok = yes Map to guest = Bad user [homes] comment = Home Directories valid users = %S, %D%w%S browseable = No read only = No inherit acls = Yes [printers] comment = All Printers path = /var/tmp printable = Yes create mask = 0600 browseable = No [print$] comment = Printer Drivers path = /var/lib/samba/drivers write list = @printadmin root force group = @printadmin create mask = 0664 directory mask = 0775 as you can see, everything i changed from default config is this strings: usershare max shares = 5 usershare allow guests = yes guest ok = yes Map to guest = Bad user Both computers have directories /var/lib/samba/usershares with sticky bit enabled. On both machines i have created usershares this way: net usershare add Share /home/kasak/Share "" Everyone:F guest_ok=y As you can see this is simple configuration, nothing special. /home/kasak/Share owned by kasak, but have 777 permissions, so user "nobody" can write there. But on one machine everything works just fine, but on another machine i only can create dirs or files in the root of the "Share". For example, if I create directory foo, cd to there, and try to create directory bar, samba sais that I don't have permissions! And on another machine it works just fine! With all the same configs! I even can delete the foo directory, but i can't create files there! The only difference between computers is that on one I have full disk formatted and mounted as root, and on another i have /home partition separately. But they all are formatted to ext4 and have similar mount options (defaults) _______________________________________________ users mailing list -- users(a)lists.fedoraproject.org To unsubscribe send an email to users-leave(a)lists.fedoraproject.org

if that was that simple, I would not write to this list. I have already diff'ed the output of testparm -v and the only difference is "hostname". I don't think that hostname is the problem. Here is magic: [kasak@kasakoff ~]$ smbclient \\\\kasakoff\\Shared Enter SAMBA\kasak's password: Try "help" to get a list of possible commands. smb: \> dir . D 0 Tue Feb 13 08:33:45 2018 .. D 0 Tue Feb 13 08:33:45 2018 663126024 blocks of size 1024. 595790936 blocks available smb: \> mkdir foo smb: \> dir . D 0 Tue Feb 13 08:35:02 2018 .. D 0 Tue Feb 13 08:33:45 2018 foo D 0 Tue Feb 13 08:35:02 2018 663126024 blocks of size 1024. 595790932 blocks available smb: \> cd foo\ smb: \foo\> mkdir bar NT_STATUS_ACCESS_DENIED making remote directory \foo\bar And here is ls: [kasak@kasakoff Shared]$ ls -al итого 12 drwxr-xrwx 3 kasak kasak 4096 фев 13 08:35 . drwx-----x 22 kasak kasak 4096 фев 13 08:33 .. drwxr-xr-x 2 nobody nobody 4096 фев 13 08:35 foo On another machine everything is the same, but it works! _______________________________________________ users mailing list --users(a)lists.fedoraproject.org To unsubscribe send an email tousers-leave(a)lists.fedoraproject.org

path statement should not be specified in [homes] section, this is samba built in section, to dynamically share user home directories. I am not logged in as kasak, samba users is not the same as system users. To login as kasak, first I need to add kasak to samba with smbpasswd -a kasak, or samba-tool user add kasak. But I have not added kasak to samba, so when smbclient tries to login as kasak it doesn't find it and falls back to guest (unix nobody) account, because i have option "Map to guest=Bad user" in my config. Look: [kasak@kasakoff ~]$ smbclient \\\\kasakoff\\Share Enter WORKGROUP\kasak's password: Try "help" to get a list of possible commands. smb: \> ^Z [1]+ Остановлен smbclient \\\\kasakoff\\Share <<<<<<< ctrl+z [kasak@kasakoff ~]$ sudo smbstatus [sudo] пароль для kasak: Samba version 4.7.5 PID Username Group Machine Protocol Version Encryption Signing ------------------------------------------------------------------------------------------------------ ---------------------------------- 8027 nobody nobody 192.168.2.87 (ipv4:192.168.2.87:12209) SMB2_10 - - 8001 nobody nobody 192.168.3.251 (ipv4:192.168.3.251:36734) SMB3_11 - - <<< my ip Service pid Machine Connected at Encryption Signing --------------------------------------------------------------------------------------------- IPC$ 8027 192.168.2.87 Вт фев 13 12:07:01 2018 MSK - - Share 8001 192.168.3.251 Вт фев 13 12:06:46 2018 MSK - - No locked files _______________________________________________ users mailing list -- users(a)lists.fedoraproject.org To unsubscribe send an email to users-leave(a)lists.fedoraproject.org

path statement should not be specified in [homes] section, this is samba built in section, to dynamically share user home directories. I am not logged in as kasak, samba users is not the same as system users. To login as kasak, first I need to add kasak to samba with smbpasswd -a kasak, or samba-tool user add kasak. But I have not added kasak to samba, so when smbclient tries to login as kasak it doesn't find it and falls back to guest (unix nobody) account, because i have option "Map to guest=Bad user" in my config. Look: [kasak@kasakoff ~]$ smbclient \\\\kasakoff\\Share Enter WORKGROUP\kasak's password: Try "help" to get a list of possible commands. smb: \> ^Z [1]+ Остановлен smbclient \\\\kasakoff\\Share <<<<<<< ctrl+z [kasak@kasakoff ~]$ sudo smbstatus [sudo] пароль для kasak: Samba version 4.7.5 PID Username Group Machine Protocol Version Encryption Signing ---------------------------------------------------------------------------------------------------------------------------------------- 8027 nobody nobody 192.168.2.87 (ipv4:192.168.2.87:12209) SMB2_10 - - 8001 nobody nobody 192.168.3.251 (ipv4:192.168.3.251:36734) SMB3_11 - - <<< my ip Service pid Machine Connected at Encryption Signing --------------------------------------------------------------------------------------------- IPC$ 8027 192.168.2.87 Вт фев 13 12:07:01 2018 MSK - - Share 8001 192.168.3.251 Вт фев 13 12:06:46 2018 MSK - - No locked files _______________________________________________ users mailing list -- users(a)lists.fedoraproject.org To unsubscribe send an email to users-leave(a)lists.fedoraproject.org

List the [homes] section of testparm. You didn't answer my question about the missing path = statement.