Good afternoon everybody here,
i just prepared a server for my home network, to be used as a backup server. Installed sw include: ubuntu 18.04, ubuntu desktop, samba service, webmin.
My home network doesn’t have domains, ldap or other NT security infrastructures. Only my personal machines usually connect. I can use a fully open network setting for running my backups, but i’d like more to close the backup environment under user and password, for security purpose.
I configured smb.conf to share a backup folder on windows 7 by now (in few days with windows 10 too).
I created proper unix users and then converted them to a samba user.
I setted the permissions of my shared folder, subfolders and files at 1774 (read write execute for users and groups, read only for others).
I am experimenting 2 disturbing problems:
1) after bootstrapping the ubuntu machine, by double clicking my backups folder i get an error. Only a fully open test folder can be seen. I can see and work on the shared directory from the windows machine only after logging on the ubuntu machine and navigating to the shared folder by the ubuntu file system application (none other operation is required, to make the folder accessible…)
2) i am trying different configurations of my shared folder in smb.conf. But the result is always the same: my windows client never asks me for user/password, it always allows me full read/write access without entering my credentials.
Hereafter my settings in smb.conf:
workgroup = MYWORKGROUP *(as defined on windows)* dns proxy = no netbios name = MYSERVERNAME server string = Samba Server log file = /var/log/samba/log.%m admin users = root, myuser1, myuser2 security = USER valid users = myuser1, myuser2
[BCKP-SERVER] (this folder has problem 1 and 2)
comment = BACKUP SERVER path = /media/myname/2TB-01/BACKUPS browseable = yes valid users = myuser1, myuser2 directory mode = 774 create mode = 774 revalidate = yes writable = yes
[tmp] (this is always visible and writable)
comment = Temporary file space
path = /tmp
read only = no
public = yes
btw, i find many sample smb.conf files searching by google, but i wasn’t able safe working samples for my requirements. That is strange, since i believe my requirements are very common ones…
Where am i wrong? Does the problem maybe depend on settings not included in the smb.conf file? (e.g. the permissions of files and directories) Could anyone post here a secure working sample?
In case i omitted information necessary to debug the problem please ask.
Thanks for your help Regards