Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > linux.debian.user > #229647 > unrolled thread

Guest Samba shares

Back to article view | Back to linux.debian.user

Contents

  Guest Samba shares Paul M Foster <paulf@quillandmouse.com> - 2020-12-11 00:00 +0100
    Re: Guest Samba shares deloptes <deloptes@gmail.com> - 2020-12-11 01:30 +0100
      Re: Guest Samba shares Paul M Foster <paulf@quillandmouse.com> - 2020-12-11 03:50 +0100
        Re: Guest Samba shares Stefan Monnier <monnier@iro.umontreal.ca> - 2020-12-11 04:20 +0100
          Re: Guest Samba shares Paul M Foster <paulf@quillandmouse.com> - 2020-12-11 04:50 +0100
          Re: Guest Samba shares Paul M Foster <paulf@quillandmouse.com> - 2020-12-11 05:50 +0100
            Re: Guest Samba shares john doe <johndoe65534@mail.com> - 2020-12-11 06:20 +0100
        Re: Guest Samba shares Keith Bainbridge <ke1thozgroups@gmx.com> - 2020-12-11 07:40 +0100
          Re: Guest Samba shares Paul M Foster <paulf@quillandmouse.com> - 2020-12-11 13:20 +0100
            [OT] Re: Guest Samba shares David <bouncingcats@gmail.com> - 2020-12-11 23:20 +0100
              Re: [OT] Re: Guest Samba shares Joe <joe@jretrading.com> - 2020-12-12 10:10 +0100
        Re: Guest Samba shares Andrei POPESCU <andreimpopescu@gmail.com> - 2020-12-11 10:20 +0100
          Re: Guest Samba shares Paul M Foster <paulf@quillandmouse.com> - 2020-12-11 13:30 +0100
            Re: Guest Samba shares Andrei POPESCU <andreimpopescu@gmail.com> - 2020-12-11 15:20 +0100
              Re: Guest Samba shares deloptes <deloptes@gmail.com> - 2020-12-11 16:20 +0100
                Re: Guest Samba shares "Andrew M.A. Cater" <amacater@einval.com> - 2020-12-11 18:20 +0100
                  Re: Guest Samba shares deloptes <deloptes@gmail.com> - 2020-12-11 20:30 +0100
                    Re: Guest Samba shares Keith Bainbridge <ke1thozgroups@gmx.com> - 2020-12-12 00:10 +0100
                      Re: Guest Samba shares Keith Bainbridge <ke1thozgroups@gmx.com> - 2020-12-12 00:20 +0100
                Re: Guest Samba shares Paul M Foster <paulf@quillandmouse.com> - 2020-12-11 19:20 +0100
                  Re: Guest Samba shares deloptes <deloptes@gmail.com> - 2020-12-11 20:20 +0100
                    Re: Guest Samba shares Paul M Foster <paulf@quillandmouse.com> - 2020-12-11 22:40 +0100
                      Re: Guest Samba shares Joe <joe@jretrading.com> - 2020-12-11 22:50 +0100
                        Re: Guest Samba shares Dan Ritter <dsr@randomstring.org> - 2020-12-11 23:00 +0100
                          Re: Guest Samba shares Paul M Foster <paulf@quillandmouse.com> - 2020-12-12 00:00 +0100
                            Re: Guest Samba shares Andrei POPESCU <andreimpopescu@gmail.com> - 2020-12-12 09:40 +0100
                      Re: Guest Samba shares Keith Bainbridge <ke1thozgroups@gmx.com> - 2020-12-12 00:50 +0100
                        Re: Guest Samba shares Dan Ritter <dsr@randomstring.org> - 2020-12-12 15:20 +0100
                          Re: Guest Samba shares Paul M Foster <paulf@quillandmouse.com> - 2020-12-12 17:50 +0100
                        Re: Guest Samba shares Paul M Foster <paulf@quillandmouse.com> - 2020-12-12 17:40 +0100
                          Re: Guest Samba shares Andrei POPESCU <andreimpopescu@gmail.com> - 2020-12-12 20:00 +0100
                      Re: Guest Samba shares deloptes <deloptes@gmail.com> - 2020-12-13 00:40 +0100
                  Re: Guest Samba shares Keith Bainbridge <ke1thozgroups@gmx.com> - 2020-12-12 00:20 +0100

Page 1 of 2  [1] 2  Next page →

#229647 — Guest Samba shares

I've got a Pi with a hard drive connected to it with music on it. I've
got SSH configured so I can admin the box headless. I've got FTP
configured so I can upload music. Now I'm working on Samba. My wife has
a Mac which understands Samba. She can scan the LAN on the Mac and see
the music share from the Pi. But she can't see any of the files on it.
I'd like her to be able to download (not upload) files from it without a
login. Here's my smb.conf file, condensed to show only the relevant
parts:

[global]
	security = user
   workgroup = mars.lan
   server role = standalone server
   obey pam restrictions = yes
   unix password sync = yes
   passwd program = /usr/bin/passwd %u
   passwd chat = *Enter\snew\s*\spassword:* %n\n *Retype\snew\s*\spassword:* %n\n *password\supdated\ssuccessfully* .
   pam password change = yes
   map to guest = bad user
   usershare allow guests = yes
[music]
	comment = Music
	path = /media/pi/music
	browseable = yes
	read only = yes
	guest ok = yes
	guest only = yes

Any idea why contents are not showing up, and what can be done to remedy
this?

Paul

-- 
Paul M. Foster
http://noferblatz.com
http://quillandmouse.com

[toc] | [next] | [standalone]

#229648

Paul M Foster wrote:

> Any idea why contents are not showing up, and what can be done to remedy
> this?

could be permissions on /media/pi/music ?

I use it here as domain controller - only dedicated users - not sure about
the guest settings, but the mount point is strange. Somewhere it
said /media is for the system to mount devices. Looks like your user 'pi'
owns the stuff. It could be I am wrong.

Usually you debug in the smb log files. You better look inside and post
here.

[toc] | [prev] | [next] | [standalone]

#229650

On Fri, Dec 11, 2020 at 01:25:56AM +0100, deloptes wrote:

> Paul M Foster wrote:
> 
> > Any idea why contents are not showing up, and what can be done to remedy
> > this?
> 
> could be permissions on /media/pi/music ?
> 
> I use it here as domain controller - only dedicated users - not sure about
> the guest settings, but the mount point is strange. Somewhere it
> said /media is for the system to mount devices. Looks like your user 'pi'
> owns the stuff. It could be I am wrong.
> 
> Usually you debug in the smb log files. You better look inside and post
> here.
> 

For various reasons, I've set the perms on this mount as 777. Anything
on a Raspberry Pi gets mounted in the /media/pi hierarchy by default. I
couldn't see a reason to change it, if I set the permissions
appropriately.

Paul

-- 
Paul M. Foster
http://noferblatz.com
http://quillandmouse.com

[toc] | [prev] | [next] | [standalone]

#229651

> Anything on a Raspberry Pi gets mounted in the /media/pi hierarchy
> by default.

I'm pretty sure that it's not the case.  It's a matter of the OS you run
on your Pi, not the fact that it's a Raspberry Pi.

IIUC what you're saying is that you're not running plain Debian but some
other OS and that OS uses /media/pi by default mount things.

It's important to clarify those details here, because this is a Debian
mailing-list, so readers like me generally presume that you're using
Debian and not some other (presumably Debian-derivative) OS.


        Stefan

[toc] | [prev] | [next] | [standalone]

#229653

On Thu, Dec 10, 2020 at 10:09:20PM -0500, Stefan Monnier wrote:

> > Anything on a Raspberry Pi gets mounted in the /media/pi hierarchy
> > by default.
> 
> I'm pretty sure that it's not the case.  It's a matter of the OS you run
> on your Pi, not the fact that it's a Raspberry Pi.
> 
> IIUC what you're saying is that you're not running plain Debian but some
> other OS and that OS uses /media/pi by default mount things.
> 
> It's important to clarify those details here, because this is a Debian
> mailing-list, so readers like me generally presume that you're using
> Debian and not some other (presumably Debian-derivative) OS.
> 
> 
>         Stefan
> 

-- 
Paul M. Foster
http://noferblatz.com
http://quillandmouse.com

[toc] | [prev] | [next] | [standalone]

#229654

On Thu, Dec 10, 2020 at 10:09:20PM -0500, Stefan Monnier wrote:

> > Anything on a Raspberry Pi gets mounted in the /media/pi hierarchy
> > by default.
> 
> I'm pretty sure that it's not the case.  It's a matter of the OS you run
> on your Pi, not the fact that it's a Raspberry Pi.
> 
> IIUC what you're saying is that you're not running plain Debian but some
> other OS and that OS uses /media/pi by default mount things.
> 
> It's important to clarify those details here, because this is a Debian
> mailing-list, so readers like me generally presume that you're using
> Debian and not some other (presumably Debian-derivative) OS.
> 
> 
>         Stefan
> 

Oops. I sent the reply without the reply. Sorry.

The Raspberry Pi (the server in this case) runs a variant of Debian,
Raspberry Pi OS. Where the disc mounts is an incidental detail. Samba,
whether on Fedora, Arch or Debian, is configured more or less the same
way. Since I've been running Debian alone for the last 20 years, this
seemed to be the best place to ask the question.

Paul

-- 
Paul M. Foster
http://noferblatz.com
http://quillandmouse.com

[toc] | [prev] | [next] | [standalone]

#229655

On 12/11/2020 5:47 AM, Paul M Foster wrote:
> On Thu, Dec 10, 2020 at 10:09:20PM -0500, Stefan Monnier wrote:
>
>>> Anything on a Raspberry Pi gets mounted in the /media/pi hierarchy
>>> by default.
>>
>> I'm pretty sure that it's not the case.  It's a matter of the OS you run
>> on your Pi, not the fact that it's a Raspberry Pi.
>>
>> IIUC what you're saying is that you're not running plain Debian but some
>> other OS and that OS uses /media/pi by default mount things.
>>
>> It's important to clarify those details here, because this is a Debian
>> mailing-list, so readers like me generally presume that you're using
>> Debian and not some other (presumably Debian-derivative) OS.
>>
>>
>>          Stefan
>>
>
> Oops. I sent the reply without the reply. Sorry.
>
> The Raspberry Pi (the server in this case) runs a variant of Debian,
> Raspberry Pi OS. Where the disc mounts is an incidental detail. Samba,
> whether on Fedora, Arch or Debian, is configured more or less the same
> way. Since I've been running Debian alone for the last 20 years, this
> seemed to be the best place to ask the question.
>

For Samba question I would probably ask on the Samba mailing list! :)

--
John Doe

[toc] | [prev] | [next] | [standalone]

#229656

On 11/12/20 1:42 pm, Paul M Foster wrote:
> For various reasons, I've set the perms on this mount as 777. Anything
> on a Raspberry Pi gets mounted in the /media/pi hierarchy by default. I
> couldn't see a reason to change it, if I set the permissions
> appropriately.

G'day Paul

pi being the default user under raspbian/raspOS. At least with the
recent installer, you are required to give pi a password. It used be
that there was a default password, and you had to know to change that
yourself.

My 2c worth: as you have already set up a personal user, disable auto
log-in to user pi and make sure user pi has a strong password.  Having
user pi available is likely the prime target of any attack, simply
because it used have a default.


Once you start logging in as paul, you'll find that automount USB item
go to /media/paul.



--
Keith Bainbridge

ke1thozgroups@gmx.com

[toc] | [prev] | [next] | [standalone]

#229662

On Fri, Dec 11, 2020 at 05:35:37PM +1100, Keith Bainbridge wrote:

> On 11/12/20 1:42 pm, Paul M Foster wrote:
> > For various reasons, I've set the perms on this mount as 777. Anything
> > on a Raspberry Pi gets mounted in the /media/pi hierarchy by default. I
> > couldn't see a reason to change it, if I set the permissions
> > appropriately.
> 
> G'day Paul
> 
> pi being the default user under raspbian/raspOS. At least with the
> recent installer, you are required to give pi a password. It used be
> that there was a default password, and you had to know to change that
> yourself.
> 
> My 2c worth: as you have already set up a personal user, disable auto
> log-in to user pi and make sure user pi has a strong password.  Having
> user pi available is likely the prime target of any attack, simply
> because it used have a default.
> 
> 
> Once you start logging in as paul, you'll find that automount USB item
> go to /media/paul.
> 
> Keith Bainbridge
> 

On boot, the system only knows paulf as a user. When it boots and mounts
the drive, it mounts it under the pi user. I don't know what wizardry
they use to accomplish this, but that's how it works. I'm not sure what
wizardry is used to make this happen, but I've now enshrined it in the
fstab file. Again, where the drive mounts is incidental to the original
question.

Paul

-- 
Paul M. Foster
http://noferblatz.com
http://quillandmouse.com

[toc] | [prev] | [next] | [standalone]

#229678 — [OT] Re: Guest Samba shares

On Fri, 11 Dec 2020 at 23:19, Paul M Foster <paulf@quillandmouse.com> wrote:
> On Fri, Dec 11, 2020 at 05:35:37PM +1100, Keith Bainbridge wrote:
> > On 11/12/20 1:42 pm, Paul M Foster wrote:

> On boot, the system only knows paulf as a user. When it boots and mounts
> the drive, it mounts it under the pi user. I don't know what wizardry
> they use to accomplish this, but that's how it works. I'm not sure what
> wizardry is used to make this happen, but I've now enshrined it in the
> fstab file. Again, where the drive mounts is incidental to the original
> question.

In case you don't know, the 'pi' user can be renamed to whatever you
want, so that might be an alternative way to reach your goal instead of
creating a separate 'paulf' user.

Method I used is here:
  https://raspberrypi.stackexchange.com/a/14902

I used it successfully a while ago on a RPi 4, first release of its OS.
Below are my notes from doing that, I don't recall any other
information, I did it a while ago and am unaware of any problems.

exec sudo -s
(now root)
cd /
usermod -l david -d /home/david -m pi
/lib/systemd/systemd --user
kill 480 # looks like the above failed until I killed some process and retried
usermod -l david -d /home/david -m pi
groupmod -n david pi
reboot
now cant sudo
exec sudo -s
prompts for david password and accepts it
passwd to change david password, accepted

[toc] | [prev] | [next] | [standalone]

#229693 — Re: [OT] Re: Guest Samba shares

On Sat, 12 Dec 2020 09:14:49 +1100
David <bouncingcats@gmail.com> wrote:


> 
> In case you don't know, the 'pi' user can be renamed to whatever you
> want, so that might be an alternative way to reach your goal instead
> of creating a separate 'paulf' user.
> 

I didn't know what other undocumented quirks might apply to the pi user,
so I deleted it, after setting a root password and making another user,
of course.

-- 
Joe

[toc] | [prev] | [next] | [standalone]

#229658

[Multipart message — attachments visible in raw view] — view raw

On Jo, 10 dec 20, 21:42:49, Paul M Foster wrote:
> On Fri, Dec 11, 2020 at 01:25:56AM +0100, deloptes wrote:
> 
> For various reasons, I've set the perms on this mount as 777. 

Please show the output of 'mount' and 'ls -ld' for /media/pi/music

Kind regards,
Andrei
-- 
http://wiki.debian.org/FAQsFromDebianUser

[toc] | [prev] | [next] | [standalone]

#229663

On Fri, Dec 11, 2020 at 11:11:57AM +0200, Andrei POPESCU wrote:

> On Jo, 10 dec 20, 21:42:49, Paul M Foster wrote:
> > On Fri, Dec 11, 2020 at 01:25:56AM +0100, deloptes wrote:
> > 
> > For various reasons, I've set the perms on this mount as 777. 
> 
> Please show the output of 'mount' and 'ls -ld' for /media/pi/music
> 
> Kind regards,
> Andrei
> -- 
> http://wiki.debian.org/FAQsFromDebianUser

mount:
/dev/sda1 on /media/pi/music type ext4 (rw,noatime,errors=remount-ro,stripe=8191)

(not sure what the "stripe=8191" is all about; I didn't specify that)

ls -ld:
drwxrwxrwx 3 pi users 4096 Dec 10 16:45 /media/pi/music

Paul

-- 
Paul M. Foster
http://noferblatz.com
http://quillandmouse.com

[toc] | [prev] | [next] | [standalone]

#229664

[Multipart message — attachments visible in raw view] — view raw

On Vi, 11 dec 20, 07:23:16, Paul M Foster wrote:
> On Fri, Dec 11, 2020 at 11:11:57AM +0200, Andrei POPESCU wrote:
> 
> > On Jo, 10 dec 20, 21:42:49, Paul M Foster wrote:
> > > On Fri, Dec 11, 2020 at 01:25:56AM +0100, deloptes wrote:
> > > 
> > > For various reasons, I've set the perms on this mount as 777. 
> > 
> > Please show the output of 'mount' and 'ls -ld' for /media/pi/music
> 
> mount:
> /dev/sda1 on /media/pi/music type ext4 (rw,noatime,errors=remount-ro,stripe=8191)
> 
> (not sure what the "stripe=8191" is all about; I didn't specify that)

See ext4(5). This could mean that your fstab entry (that you mentioned 
in other messages) is ignored and the partition is mounted by some other 
means (e.g. a Raspbian specific boot script).

These kind of unknowns are exactly the reason why subscribers of 
debian-user will be reluctant to even try to help with anything else but 
a pristine Debian system.

> ls -ld:
> drwxrwxrwx 3 pi users 4096 Dec 10 16:45 /media/pi/music

Ok, what about permissions for the /media and /media/pi directories?


This is likely my last attempt to help with your troubleshooting as I 
have only limited and less than recent experience with Samba.

Kind regards,
Andrei
-- 
http://wiki.debian.org/FAQsFromDebianUser

[toc] | [prev] | [next] | [standalone]

#229666

Andrei POPESCU wrote:

> Ok, what about permissions for the /media and /media/pi directories?
> 
> 
> This is likely my last attempt to help with your troubleshooting as I
> have only limited and less than recent experience with Samba.

+1

and also is important to know what the exact issue is, which would be
visible in the smb log.

>From what I remember there was the @nobody group that would be used to
access something granted guest permissions. 

There is too much level of complexity in this issue from what I read
already:

1. it is RaspberryPI OS (based on debian but there is also dedicated list
where it could be answered more efficiently)
2. The actual user plugging the external disk is paulf but disk mounts as
default user pi
3. Who knows how is exactly samba pre-configured 

Last but not least I was thinking of simply restarting samba server after
plugging in - this way whatever is there should become visible.

[toc] | [prev] | [next] | [standalone]

#229667

On Fri, Dec 11, 2020 at 04:14:15PM +0100, deloptes wrote:
> Andrei POPESCU wrote:
> 
> > Ok, what about permissions for the /media and /media/pi directories?
> > 
> > 
> > This is likely my last attempt to help with your troubleshooting as I
> > have only limited and less than recent experience with Samba.
> 
> +1
> 
> and also is important to know what the exact issue is, which would be
> visible in the smb log.
> 
> >From what I remember there was the @nobody group that would be used to
> access something granted guest permissions. 
> 
> There is too much level of complexity in this issue from what I read
> already:
> 
> 1. it is RaspberryPI OS (based on debian but there is also dedicated list
> where it could be answered more efficiently)

It is perfectly feasible to run your Raspberry Pi on (relatively) stock Debian
- https://wiki.debian.org/RaspberryPi with a bit of luck.

Check the groups for user pi. Check the groups for paulf. If you make the 
groups the same, what error results?

Part of this at least is perhaps, because Raspberry Pi OS is set up to anticipate a pi
user - hence the suggestion to try Debian

Andy C

> 2. The actual user plugging the external disk is paulf but disk mounts as
> default user pi
> 3. Who knows how is exactly samba pre-configured 
> 
> Last but not least I was thinking of simply restarting samba server after
> plugging in - this way whatever is there should become visible.
> 
> 
> 

[toc] | [prev] | [next] | [standalone]

#229670

Andrew M.A. Cater wrote:

> It is perfectly feasible to run your Raspberry Pi on (relatively) stock
> Debian - https://wiki.debian.org/RaspberryPi with a bit of luck.

I heard it would work with some 5+ kernel from debian. My experience with
the RPi4B was negative, because of the kernel (4.19) in buster. I ended up
using the Raspberry Kernel in Debian.

[toc] | [prev] | [next] | [standalone]

#229681

On 12/12/20 6:24 am, deloptes wrote:
> I heard it would work with some 5+ kernel from debian. My experience with
> the RPi4B was negative, because of the kernel (4.19) in buster. I ended up
> using the Raspberry Kernel in Debian.

My almost stock raspiOS Pi3 & Pi4 both updated the kernel to 5.4 around
3 months ago, maybe earlier.  It only really came to notice when our
local importer questioned my sanity in trying kernel 5.4

Must say I haven't had success with DebianPiOS. Must try it again if
people are saying it is working for them.

--
Keith Bainbridge

ke1thozgroups@gmx.com

[toc] | [prev] | [next] | [standalone]

#229682

On 12/12/20 10:01 am, Keith Bainbridge wrote:
> On 12/12/20 6:24 am, deloptes wrote:
>> I heard it would work with some 5+ kernel from debian. My experience with
>> the RPi4B was negative, because of the kernel (4.19) in buster. I
>> ended up
>> using the Raspberry Kernel in Debian.
>
> My almost stock raspiOS Pi3 & Pi4 both updated the kernel to 5.4 around
> 3 months ago, maybe earlier.  It only really came to notice when our
> local importer questioned my sanity in trying kernel 5.4
>
> Must say I haven't had success with DebianPiOS. Must try it again if
> people are saying it is working for them.
>

I meant to say that the non-stock bit is I am using $USER keith. I'm
about to set sudo to require root passwd.


--
Keith Bainbridge

ke1thozgroups@gmx.com

[toc] | [prev] | [next] | [standalone]

#229668

On Fri, Dec 11, 2020 at 04:14:15PM +0100, deloptes wrote:
> 
> There is too much level of complexity in this issue from what I read
> already:
> 
> 1. it is RaspberryPI OS (based on debian but there is also dedicated list
> where it could be answered more efficiently)

I have my doubts that there is an active RPi list on which such a
question could be answered. But it is, after all, Samba, and you've
already seen the smb.conf.

> 2. The actual user plugging the external disk is paulf but disk mounts as
> default user pi

Not true. The disk mounts automatically on startup. I don't manually
mount this disk.

> 3. Who knows how is exactly samba pre-configured 

I already posted the smb.conf file.

Paul


-- 
Paul M. Foster
http://noferblatz.com
http://quillandmouse.com

[toc] | [prev] | [next] | [standalone]

Page 1 of 2  [1] 2  Next page →

Back to top | Article view | linux.debian.user

csiph-web