Topic: [SOLVED] Symlink-to-Ibay Help Needed

[wbell]

In previous versions of SME Server, I've used a symlink to allow a user access to an Ibay.
For some reason, in SME Server v8.0, when I create this same symlink and try to access the directory from the logged in user, I receive an Access Denied error.
My permissions all appear to be the same as on my other SME Servers, and the other servers work.
Any help would be appreciated!

NOTE: On Windows, the user has a mapped drive to his home directory.  On OSX, the user mounts the his home directory.  Both receive Access Denied errors.

 

[Stefano]

In previous versions of SME Server, I've used a symlink to allow a user access to an Ibay.

please define, remembering that we can't see your monitor nor read your mind

thank you

[wbell]

To be more specific... On one of my current SME Servers (v7.51), I have an Ibay "classfiles" that has Write=Group Read=Everyone perms.
In a standard user's home folder, I created a symlink called "classfiles" that points to "/home/e-smith/files/ibays/classfiles/files/".
The user is then able to log into their home folder and see the folder/link "classfiles" and is able to navigate to it and see, view, and open it's contents.
On SME8, I have been unable to do this.  The user sees the folder/link, but when they try to access it, it gives an Access Denied error.

[mmccarn]

Samba in SME8 does not support symlinks, or "wide links" as they are called in the samba config.

Here's the middle of another post about this:
http://forums.contribs.org/index.php/topic,48258.msg239330.html#msg239330

CharlieBrady recommends using "mount --bind" instead of creating symlinks

[wbell]

Thanks, mmccarn, for pointing me in the right direction!


**WARNING/DISCLAIMER**
The manual configuration described below will re-enable following symlinks in Samba for SME Server v8.x.
BUT... It will possibly leave your server open to an exploit discovered in February 2010.
As mentioned above, CharlieBrady recommends using "mount --bind" instead of symlinks.


If you are aware of the above disclaimer, but wish to still have the symlink feature, the steps below will allow you to re-enable this feature on SME Server v8.x.


#****************************************
#
#        How To Re-Enable Symlinks In Samba
#         Written For Use On SME Server v8.x
#
#****************************************



#  Create The "smb.conf" Custom Template Directory
#

Code: [Select]

mkdir -p /etc/e-smith/templates-custom/etc/smb.conf

#  Copy The Current "smb.conf/10globals" Template File To The Custom Template Directory
#

Code: [Select]

cp /etc/e-smith/templates/etc/smb.conf/10globals /etc/e-smith/templates-custom/etc/smb.conf/

#  Edit The "smb.conf/10globals" Custom Template File
#

Code: [Select]

nano -w /etc/e-smith/templates-custom/etc/smb.conf/10globals

#  Add The Following Code, Below "[global]"
#

Code: [Select]

follow symlinks = yes
wide links = yes
unix extensions = no  ## This may already be set.

#  Save & Close The "smb.conf/10globals" Custom Template File.
#


#  Expand The "smb.conf" Template
#

Code: [Select]

expand-template /etc/smb.conf

#  Restart The Samba Service
#

Code: [Select]

service smb restart

[Stefano]

#  Copy The Current "smb.conf/10globals" Template File To The Custom Template Directory
#

Code: [Select]

cp /etc/e-smith/templates/etc/smb.conf/10globals /etc/e-smith/templates-custom/etc/smb.conf/

the copy will fail if /etc/e-smith/templates-custom/etc/smb.conf does not exist

then, prior to copy, you should create it with:

Code: [Select]

mkdir -p /etc/e-smith/templates-custom/etc/smb.conf


[wbell]

the copy will fail if /etc/e-smith/templates-custom/etc/smb.conf does not exist
...

Thank you, Stefano!
I have corrected my post.