SOLVED Mac can not access CIFS shares

Status
Not open for further replies.

DJ_TLG

Dabbler
Joined
Jul 24, 2015
Messages
12
Hello Everyone,

I recently get into the nas world. I have an acer ac100 with a Xeon e3 processor and 4gb of ram.(Will upgrade the RAM next month).Created 3 users A,T,guest and 2 groups Users,Admins. A is a member of Users and T is a member of Admins. guest is a member of the built-in guest group.I have the dataset structure in the picture with the following permissions.
Code:
volume1 nobody:nogroup drwxrwxr-x+
    Media nobody:Admins drwxr-xr-x+
        Movies T:Admins drwxrwxr-x+
        Music T:Admins drwxrwxr-x+
        TV Shows T:Admins drwxrwxr-x+
    home nobody:Admins drwxrwxr-x+
        A A:Admins drwxrwx---+
        T T:Admins drwxrwx---+


My CIFS are Media and home I checked the allow guest access option on Media dataset and I changed the guest account to guest from Services --> CIFS settings.

Everything worked perfectly in the windows world. I had access to everything and user A had access to her own home folder and Media folder but could not do changes to Media folder. Also the guest users only had read only access to Media folder. In the Apple world though not everything went according to plan. The users with username and password had no issues. I had access to everything and user A had access to her own home folder and read only access to Media folder. But I can't access to my shares using guest account. I can see my NAS if i go Go --> Network but when I double click it, it says not connected and if I click Connect As choose "Guest" it says "Access to your account on serve has been denied." In my Samba log file I get the following logs
Code:
[2015/08/25 17:48:59.029779,  2] ../source3/smbd/server.c:419(remove_child_pid)
  Could not find child 46278 -- ignoring
[2015/08/25 17:49:01.150766,  2] ../source3/param/loadparm.c:3584(do_section)
  Processing section "[Media]"
[2015/08/25 17:49:01.151141,  2] ../source3/param/loadparm.c:3584(do_section)
  Processing section "[home]"
[2015/08/25 17:49:01.152120,  1] ../source3/auth/check_samsec.c:187(sam_account_ok)
  sam_account_ok: Account for user 'guest' was disabled.
[2015/08/25 17:49:01.152171,  2] ../source3/auth/auth.c:288(auth_check_ntlm_password)
  check_ntlm_password:  Authentication for user [GUEST] -> [GUEST] FAILED with error NT_STATUS_ACCOUNT_DISABLED
[2015/08/25 17:49:01.152212,  2] ../auth/gensec/spnego.c:743(gensec_spnego_server_negTokenTarg)
  SPNEGO login failed: NT_STATUS_ACCOUNT_DISABLED


I also realized the console says "Disabled user guest" but not sure why and how to fix it.
Code:
Aug 25 17:53:57 nas notifier: Importing account for A...ok
Aug 25 17:53:57 nas notifier: Importing account for T...ok
Aug 25 17:53:57 nas notifier: Importing account for guest...ok
Aug 25 17:53:57 nas notifier: Enabled user A.
Aug 25 17:53:57 nas notifier: Enabled user T.
Aug 25 17:53:57 nas notifier: Disabled user guest.
Aug 25 17:53:57 nas notifier: Granted SeTakeOwnershipPrivilege to NAS\guest
Aug 25 17:53:57 nas notifier: Granted SeBackupPrivilege to NAS\guest
Aug 25 17:53:57 nas notifier: Granted SeRestorePrivilege to NAS\guest
Aug 25 17:53:57 nas notifier: Granted SeTakeOwnershipPrivilege to NAS\T
Aug 25 17:53:57 nas notifier: Granted SeBackupPrivilege to NAS\T
Aug 25 17:53:57 nas notifier: Granted SeRestorePrivilege to NAS\T
Aug 25 17:53:57 nas notifier: Granted SeTakeOwnershipPrivilege to NAS\A
Aug 25 17:53:57 nas notifier: Granted SeBackupPrivilege to NAS\A
Aug 25 17:53:57 nas notifier: Granted SeRestorePrivilege to NAS\A
Aug 25 17:53:58 nas notifier: Performing sanity check on Samba configuration: OK

Any help would be greatly appreciated.

Thanks
 

Attachments

  • Storage.JPG
    Storage.JPG
    20.9 KB · Views: 285

depasseg

FreeNAS Replicant
Joined
Sep 16, 2014
Messages
2,874
On your mac are you connecting via CIFS or SMB?
 

DJ_TLG

Dabbler
Joined
Jul 24, 2015
Messages
12
Verify that your account 'guest' is enabled in the 'users' portion of the GUI. It looks like it is disabled.
My guest account should be enabled. it's home directory is "/nonexistent", shell is "nologin" and "disable password login" is checked. Everything else is untouched.
On your mac are you connecting via CIFS or SMB?
I tried both with the same results.
 

anodos

Sambassador
iXsystems
Joined
Mar 6, 2014
Messages
9,554
My guest account should be enabled. it's home directory is "/nonexistent", shell is "nologin" and "disable password login" is checked. Everything else is untouched.

I tried both with the same results.
See http://doc.freenas.org/9.3/freenas_account.html#users
Description of "Disable Password Login" is
when checked, the user can not log into the system or authenticate to a CIFS share; to undo this setting, set a password for the user using the “Modify User” button for the user in “View Users”; checking this box will grey out “Lock user” and “Permit Sudo” which are mutually exclusive
 

DJ_TLG

Dabbler
Joined
Jul 24, 2015
Messages
12
See http://doc.freenas.org/9.3/freenas_account.html#users
Description of "Disable Password Login" is
I read that but when i was following the guide written here so i kind of ignored it. What puzzled me the most is that that configuration work on the windows machines.

Any way I solved the problem. I got rid of the guest account and changed the service --> CIFS settings --> guest account to built in "www" user. Let me know if there is a downside to using this user.
 
Status
Not open for further replies.
Top