6

I'm having trouble accessing some files over a samba share. Here's my setup:

  • I have shared /shared as Shared
  • I have a user with the same name and pwd as my Linux user in my Windows machine
  • I made that user a member of the debian-transmission group
  • There's a symlink called /shared/Downloads/Torrents that points to /var/lib/transmission-daemon/downloads
  • That folder is owned by debian-transmission:debian-transmission and its permissions are 4775 (as created by the package)

I need to be able to read and move files from/to /shared/Downloads/Torrents from my Windows box.

Right now, I'm able to do that locally, but I get an access denied error when trying to read the Downloads folder.

Improve this question
1

3 Answers 3

Reset to default
8

From a comment on the previous answer from user charlesbridge (and from the smb.conf docs/manpages), accessing links outside of the share root requires enabling the wide links parameter, which requires both follow symlinks = yes and unix extensions = no. You must ensure your smb.conf has the following settings (explicitly or implicitly):

follow symlinks = yes
wide links = yes
unix extensions = no
Improve this answer
2
5

Have you enabled wide symlinks in the configuration for your share in smb.conf?

follow symlinks=yes
wide links = yes

Wide links at least is off by default as it might be exploited.

Improve this answer
6
  • I have not, but it's the default according to samba.org/samba/docs/using_samba/ch08.html#samba2-CHP-8-TABLE-1. I have no problems accessing directories for which I'm the owner over symlinks (just tried)
    – Diego Mijelshon
    Apr 14, 2011 at 14:08
  • What you need is wide links as well. I have updated the answer.
    – Egil
    Apr 14, 2011 at 14:15
  • @Egil: it hasn't fixed the problem, but you are on to something, as I created a link to /home/myuser and I can't access it either. Still, isn't "yes" the default for wide links too?
    – Diego Mijelshon
    Apr 14, 2011 at 14:35
  • It was set to off by default following the post I linked to above (February 2010).
    – Egil
    Apr 14, 2011 at 14:43
  • 7
    You may also need "unix extensions = no" in your [Global]
    – charlesbridge
    Apr 14, 2011 at 18:39
4

For newer versions of Ubuntu and Samba, this will help:

[global]
allow insecure wide links = yes

[yourShareName]
wide links = yes
Improve this answer
0

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge that you have read and understand our privacy policy and code of conduct.

Not the answer you're looking for? Browse other questions tagged or ask your own question.