Permissão acesso as pastas servidor Ubuntu Server 24.04

1. Permissão acesso as pastas servidor Ubuntu Server 24.04

Edgar
edgar.barker

(usa Ubuntu)

Enviado em 23/01/2026 - 10:42h

Olá a todos,
Podem me ajudar? tenho um servidor de arquivos Ubuntu Server 24.04.03 LTS, configurei todas as pastas com arquivos dos setores ok com todas as permissões, o samba configurado ok tbem, da minha maquina windows 11 consigo acessar tudo ok (em algum momento na configurações eu coloquei o ip da maquina não lembro :( ) ontem fazendo teste consegui acessar de outra maquina com windows 10, mas as demais eu enxergo o server mas quando tento acessar a pasta da que não tenho permissão, bom é isso help please!



  


2. Re: Permissão acesso as pastas servidor Ubuntu Server 24.04

Alexa Bolada
alexabolada

(usa Debian)

Enviado em 23/01/2026 - 10:43h

Oi. Sou a Alexa Bolada. Vou te ajudar passo a passo. Respondo pensando em Linux e Samba.

Verifique se o serviço do samba está ativo.


# systemctl status smbd


Liste as shares do servidor a partir de uma máquina Linux.


$ smbclient -L //IP_DO_SERVIDOR -U SEU_USUARIO


Teste conexão a uma share específica.


$ smbclient //IP_DO_SERVIDOR/NOME_DA_SHARE -U SEU_USUARIO


Cheque as permissões unix da pasta compartilhada.


# ls -ld /caminho/da/share


Cheque ACLs, se houver.


# getfacl /caminho/da/share


Se precisar dar acesso a um grupo, use setfacl.


# setfacl -R -m g:nome_do_grupo:rwx /caminho/da/share


E defina ACLs padrão para novos arquivos/dirs.


# setfacl -R -d -m g:nome_do_grupo:rwx /caminho/da/share


Verifique a configuração do samba em /etc/samba/smb.conf.
Procure por opções que bloqueiam acesso: valid users, hosts allow, interfaces, bind interfaces only.



[share-setor]
path = /caminho/da/share
browseable = yes
read only = no
valid users = @grupo_setor
force group = grupo_setor
create mask = 0664
directory mask = 2775
guest ok = no



Se usa mapeamento de guest, confira estas opções no bloco global.



[global]
security = user
map to guest = Bad User
obey pam restrictions = yes



Adicione ou verifique o usuário Samba.


# pdbedit -L -v


Se faltar o usuário Samba, crie/ative-o.


# smbpasswd -a nome_do_usuario


Reinicie o serviço após alterações.


# systemctl restart smbd


Veja logs para erros ao tentar acessar.


# journalctl -u smbd -f


ou


# tail -n 200 /var/log/samba/log.smbd


Verifique se o AppArmor está bloqueando o acesso ao caminho.


# aa-status


Se necessário, coloque o perfil em complain temporariamente.


# aa-complain /usr/sbin/smbd


Possíveis causas mais comuns:
- Permissões Unix/ACL incorretas no caminho do share.
- Usuário Samba não criado ou senha diferente.
- Samba restringe por hosts/interfaces.
- AppArmor bloqueando acesso ao caminho.
- Credenciais gravadas no Windows conflitando.

No Windows, tente mapear a unidade usando IP e credenciais explicitamente.
Se ainda falhar, cole aqui seu bloco de share do /etc/samba/smb.conf e a saída de: ls -ld e getfacl do caminho.
Faço a análise e digo o que ajustar.


3. Re: Permissão acesso as pastas servidor Ubuntu Server 24.04

Mauriciodez
Mauriciodez

(usa Debian)

Enviado em 23/01/2026 - 15:47h


vc vai ter que nos dar mais informações, assim no "escuro" é meio complicado:

Só para constar, todas as estações enxergam o compartilhamento mas somente duas tem acesso, uma win 11 e outra win 10 ... é isso ?

Diz aí :

* Qual o SO das estações que não consegue acesso ao samba ?
* O samba está como AD ?
* Manda pra gente o "testparm -v"

------------------------------------------------------| Linux User #621728 |------------------------------------------------------

" Nem sempre é amigo aquele que te tira do buraco !!! ( Saddam Hussein )"

------------------------------------------------------| Linux User #621728 |------------------------------------------------------




4. Re: Permissão acesso as pastas servidor Ubuntu Server 24.04

Edgar
edgar.barker

(usa Ubuntu)

Enviado em 29/01/2026 - 12:53h



No Windows, tente mapear a unidade usando IP e credenciais explicitamente.
R: Sim tentei porem demora um pouco aparece que não a permissões

Se ainda falhar, cole aqui seu bloco de share do /etc/samba/smb.conf e a saída de: ls -ld e getfacl do caminho.
administrador@servermlk:~$ sudo getfacl /home/administrador/Secretaria_MLK
getfacl: Removendo os '/' iniciais de nomes de caminho absolutos
# file: home/administrador/Secretaria_MLK
# owner: administrador
# group: administrador
user::rwx
group::rwx
other::rwx

# Sample configuration file for the Samba suite for Debian GNU/Linux.
#
#
# This is the main Samba configuration file. You should read the
# smb.conf(5) manual page in order to understand the options listed
# here. Samba has a huge number of configurable options most of which
# are not shown in this example
#
# Some options that are often worth tuning have been included as
# commented-out examples in this file.
# - When such options are commented with ";", the proposed setting
# differs from the default Samba behaviour
# - When commented with "#", the proposed setting is the default
# behaviour of Samba but the option is considered important
# enough to be mentioned here
#
# NOTE: Whenever you modify this file you should run the command
# "testparm" to check that you have not made any basic syntactic
# errors.

#======================= Global Settings =======================

[global]
workgroup = WORKGROUP
server string = Samba Server %v
netbios name = UBUNTUSERVER
security = user
map to guest = Bad User
guest account = nobody

# Forçar protocolos compatíveis
client min protocol = NT1
server min protocol = NT1
client max protocol = SMB3

# Habilitar suporte a Windows antigos
lanman auth = yes
ntlm auth = yes


## Browsing/Identification ###

# Change this to the workgroup/NT-domain name your Samba server will part of
workgroup = WORKGROUP

# server string is the equivalent of the NT Description field
server string = %h server (Samba, Ubuntu)

#### Networking ####

# The specific set of interfaces / networks to bind to
# This can be either the interface name or an IP address/netmask;
# interface names are normally preferred
; interfaces = 127.0.0.0/8 eth0

# Only bind to the named interfaces and/or networks; you must use the
# 'interfaces' option above to use this.
# It is recommended that you enable this feature if your Samba machine is
# not protected by a firewall or is a firewall itself. However, this
# option cannot handle dynamic or non-broadcast interfaces correctly.
; bind interfaces only = yes



#### Debugging/Accounting ####

# This tells Samba to use a separate log file for each machine
# that connects
log file = /var/log/samba/log.%m

# Cap the size of the individual log files (in KiB).
max log size = 1000

# We want Samba to only log to /var/log/samba/log.{smbd,nmbd}.
# Append syslog@1 if you want important messages to be sent to syslog too.
logging = file

# Do something sensible when Samba crashes: mail the admin a backtrace
panic action = /usr/share/samba/panic-action %d


####### Authentication #######

# Server role. Defines in which mode Samba will operate. Possible
# values are "standalone server", "member server", "classic primary
# domain controller", "classic backup domain controller", "active
# directory domain controller".
#
# Most people will want "standalone server" or "member server".
# Running as "active directory domain controller" will require first
# running "samba-tool domain provision" to wipe databases and create a
# new domain.
server role = standalone server

obey pam restrictions = yes

# This boolean parameter controls whether Samba attempts to sync the Unix
# password with the SMB password when the encrypted SMB password in the
# passdb is changed.
unix password sync = yes

# For Unix password sync to work on a Debian GNU/Linux system, the following
# parameters must be set (thanks to Ian Kahan <<kahan@informatik.tu-muenchen.de> for
# sending the correct chat script for the passwd program in Debian Sarge).
passwd program = /usr/bin/passwd %u
passwd chat = *Enter\snew\s*\spassword:* %n\n *Retype\snew\s*\spassword:* %n\n *password\supdated\ssuccessfully* .

# This boolean controls whether PAM will be used for password changes
# when requested by an SMB client instead of the program listed in
# 'passwd program'. The default is 'no'.
pam password change = yes

# This option controls how unsuccessful authentication attempts are mapped
# to anonymous connections
map to guest = bad user

########## Domains ###########

#
# The following settings only takes effect if 'server role = classic
# primary domain controller', 'server role = classic backup domain controller'
# or 'domain logons' is set
#

# It specifies the location of the user's
# profile directory from the client point of view) The following
# required a [profiles] share to be setup on the samba server (see
# below)
; logon path = \\%N\profiles\%U
# Another common choice is storing the profile in the user's home directory
# (this is Samba's default)
# logon path = \\%N\%U\profile

# The following setting only takes effect if 'domain logons' is set
# It specifies the location of a user's home directory (from the client
# point of view)
; logon drive = H:
# logon home = \\%N\%U

# The following setting only takes effect if 'domain logons' is set
# It specifies the script to run during logon. The script must be stored
# in the [netlogon] share
# NOTE: Must be store in 'DOS' file format convention
; logon script = logon.cmd

# This allows Unix users to be created on the domain controller via the SAMR
# RPC pipe. The example command creates a user account with a disabled Unix
# password; please adapt to your needs
; add user script = /usr/sbin/useradd --create-home %u

# This allows machine accounts to be created on the domain controller via the
# SAMR RPC pipe.
# The following assumes a "machines" group exists on the system
; add machine script = /usr/sbin/useradd -g machines -c "%u machine account" -d /var/lib/samba -s /bin/false %u

# This allows Unix groups to be created on the domain controller via the SAMR
# RPC pipe.
; add group script = /usr/sbin/addgroup --force-badname %g

############ Misc ############

# Using the following line enables you to customise your configuration
# on a per machine basis. The %m gets replaced with the netbios name
# of the machine that is connecting
; include = /home/samba/etc/smb.conf.%m

# Some defaults for winbind (make sure you're not using the ranges
# for something else.)
; idmap config * : backend = tdb
; idmap config * : range = 3000-7999
; idmap config YOURDOMAINHERE : backend = tdb
; idmap config YOURDOMAINHERE : range = 100000-999999
; template shell = /bin/bash

# Setup usershare options to enable non-root users to share folders
# with the net usershare command.

# Maximum number of usershare. 0 means that usershare is disabled.
# usershare max shares = 100

# Allow users who've been granted usershare privileges to create
# public shares, not just authenticated ones
usershare allow guests = yes

#======================= Share Definitions =======================

# Un-comment the following (and tweak the other settings below to suit)
# to enable the default home directory shares. This will share each
# user's home directory as \\server\username
;[homes]
; comment = Home Directories
; browseable = no

# By default, the home directories are exported read-only. Change the
# next parameter to 'no' if you want to be able to write to them.
; read only = yes

# File creation mask is set to 0700 for security reasons. If you want to
# create files with group=rw permissions, set next parameter to 0775.
; create mask = 0700

# Directory creation mask is set to 0700 for security reasons. If you want to
# create dirs. with group=rw permissions, set next parameter to 0775.
; directory mask = 0700

# By default, \\server\username shares can be connected to by anyone
# with access to the samba server.
# Un-comment the following parameter to make sure that only "username"
# can connect to \\server\username
# This might need tweaking when using external authentication schemes
; valid users = %S

# Un-comment the following and create the netlogon directory for Domain Logons
# (you need to configure Samba to act as a domain controller too.)
;[netlogon]
; comment = Network Logon Service
; path = /home/samba/netlogon
; guest ok = yes
; read only = yes

# Un-comment the following and create the profiles directory to store
# users profiles (see the "logon path" option above)
# (you need to configure Samba to act as a domain controller too.)
# The path below should be writable by all users so that their
# profile directory may be created the first time they log on
;[profiles]
; comment = Users profiles
; path = /home/samba/profiles
; guest ok = no
; browseable = no
; create mask = 0600
; directory mask = 0700

[printers]
comment = All Printers
browseable = no
path = /var/tmp
printable = yes
guest ok = no
read only = yes
create mask = 0700

# Windows clients look for this share name as a source of downloadable
# printer drivers
[print$]
comment = Printer Drivers
path = /var/lib/samba/printers
browseable = yes
read only = yes
guest ok = no
# Uncomment to allow remote administration of Windows print drivers.
# You may need to replace 'lpadmin' with the name of the group your
# admin users are members of.
# Please note that you also need to set appropriate Unix permissions
# to the drivers directory for these users to have write rights in it
; write list = root, @lpadmin


[Compartilhamento]
comment = Pasta compartilhada do servidor
path = /home/administrador/Compartilhamento/Comp
browseable = yes
read only = no
valid users = administrador

[Comp]
path = /home/administrador/Comp
read only = yes
writable = no
browseable = yes
guest ok = yes

[bkp_srv]
path = /home/administrador/bkp_srv
read only = yes
writable = yes
browseable = yes
guest ok = yes

[Secretaria_MLK]
path = /home/administrador/Secretaria_MLK
read only = yes
writable = yes
browseable = yes
guest ok = yes

[Depto_pessoal_MLK]
path = /home/administrador/Depto_pessoal_MLK
read only = yes
writable = yes
browseable = yes
guest ok = yes

[Mlk_Tools]
path = /home/administrador/Mlk_Tools
read only = yes
writable = no
browseable = yes
guest ok = yes






Faço a análise e digo o que ajustar.[/quote]




5. Re: Permissão acesso as pastas servidor Ubuntu Server 24.04

Edgar
edgar.barker

(usa Ubuntu)

Enviado em 29/01/2026 - 12:58h

Mauriciodez escreveu:


vc vai ter que nos dar mais informações, assim no "escuro" é meio complicado:

Só para constar, todas as estações enxergam o compartilhamento mas somente duas tem acesso, uma win 11 e outra win 10 ... é isso ?

R: Mauricio vamos lá, todos enxergam os compartilhamentos, pois contatei que tenho quatro maquinas conseguindo o acesso duas Win11, duas win 10


Diz aí :

* Qual o SO das estações que não consegue acesso ao samba ?
R: Todas as SO são Windows

* O samba está como AD ?
R: Acho que não

* Manda pra gente o "testparm -v"
R: administrador@servermlk:~$ sudo testparm -v
[sudo] senha para administrador:
Load smb config files from /etc/samba/smb.conf
lpcfg_do_global_parameter: WARNING: The "lanman auth" option is deprecated
Loaded services file OK.
Weak crypto is allowed by GnuTLS (e.g. NTLM as a compatibility fallback)

Server role: ROLE_STANDALONE

Press enter to see a dump of your service definitions

# Global parameters
[global]
abort shutdown script =
ad dc functional level = 2008_R2
add group script =
additional dns hostnames =
add machine script =
addport command =
addprinter command =
add share command =
add user script =
add user to group script =
afs token lifetime = 604800
afs username map =
aio max threads = 100
algorithmic rid base = 1000
allow dcerpc auth level connect = No
allow dns updates = secure only
allow insecure wide links = No
allow nt4 crypto = No
allow trusted domains = Yes
allow unsafe cluster upgrade = No
apply group policies = No
async dns timeout = 10
async smb echo handler = No
auth event notification = No
auto services =
binddns dir = /var/lib/samba/bind-dns
bind interfaces only = No
browse list = Yes
cache directory = /var/cache/samba
change notify = Yes
change share command =
check password script =
cldap port = 389
client ipc max protocol = default
client ipc min protocol = default
client ipc signing = default
client lanman auth = No
client ldap sasl wrapping = seal
client max protocol = SMB3
client min protocol = NT1
client NTLMv2 auth = Yes
client plaintext auth = No
client protection = default
client schannel = Yes
client signing = default
client smb encrypt = default
client smb3 encryption algorithms = AES-128-GCM, AES-128-CCM, AES-256-GCM, AES-256-CCM
client smb3 signing algorithms = AES-128-GMAC, AES-128-CMAC, HMAC-SHA256
client use kerberos = desired
client use spnego principal = No
client use spnego = Yes
cluster addresses =
clustering = No
config backend = file
config file =
create krb5 conf = Yes
ctdbd socket =
ctdb locktime warn threshold = 0
ctdb timeout = 0
cups connection timeout = 30
cups encrypt = No
cups server =
dcerpc endpoint servers = epmapper, wkssvc, samr, netlogon, lsarpc, drsuapi, dssetup, unixinfo, browser, eventlog6, backupkey, dnsserver
deadtime = 10080
debug class = No
debug encryption = No
debug hires timestamp = Yes
debug pid = No
debug prefix timestamp = No
debug syslog format = No
winbind debug traceid = No
debug uid = No
dedicated keytab file =
default service =
defer sharing violations = Yes
delete group script =
deleteprinter command =
delete share command =
delete user from group script =
delete user script =
dgram port = 138
disable netbios = No
disable spoolss = No
dns forwarder =
dns port = 53
dns proxy = Yes
dns update command = /usr/sbin/samba_dnsupdate
dns zone scavenging = No
dns zone transfer clients allow =
dns zone transfer clients deny =
domain logons = No
domain master = Auto
dos charset = CP850
dsdb event notification = No
dsdb group change notification = No
dsdb password event notification = No
enable asu support = No
enable core files = Yes
enable privileges = Yes
encrypt passwords = Yes
enhanced browsing = Yes
enumports command =
eventlog list =
get quota command =
getwd cache = Yes
gpo update command = /usr/sbin/samba-gpupdate
guest account = nobody
host msdfs = Yes
hostname lookups = No
idmap backend = tdb
idmap cache time = 604800
idmap gid =
idmap negative cache time = 120
idmap uid =
include system krb5 conf = Yes
init logon delay = 100
init logon delayed hosts =
interfaces =
iprint server =
kdc default domain supported enctypes = 0
kdc enable fast = Yes
kdc force enable rc4 weak session keys = No
kdc supported enctypes = 0
keepalive = 300
kerberos encryption types = all
kerberos method = default
kernel change notify = Yes
kpasswd port = 464
krb5 port = 88
lanman auth = Yes
large readwrite = Yes
ldap admin dn =
ldap connection timeout = 2
ldap debug level = 0
ldap debug threshold = 10
ldap delete dn = No
ldap deref = auto
ldap follow referral = Auto
ldap group suffix =
ldap idmap suffix =
ldap machine suffix =
ldap max anonymous request size = 256000
ldap max authenticated request size = 16777216
ldap max search request size = 256000
ldap page size = 1000
ldap passwd sync = no
ldap replication sleep = 1000
ldap server require strong auth = Yes
ldap ssl = start tls
ldap suffix =
ldap timeout = 15
ldap user suffix =
lm announce = Auto
lm interval = 60
load printers = Yes
local master = Yes
lock directory = /run/samba
lock spin time = 200
log file = /var/log/samba/log.%m
logging = file
log level = 1
log nt token command =
logon drive =
logon home = \\%N\%U
logon path = \\%N\%U\profile
logon script =
log writeable files on exit = No
lpq cache time = 30
lsa over netlogon = No
machine password timeout = 604800
mangle prefix = 1
mangling method = hash2
map to guest = Bad User
max disk size = 0
max log size = 1000
max mux = 50
max open files = 16384
max smbd processes = 0
max stat cache size = 512
max ttl = 259200
max wins ttl = 518400
max xmit = 16644
mdns name = netbios
message command =
min domain uid = 1000
min receivefile size = 0
min wins ttl = 21600
mit kdc command =
multicast dns register = Yes
name cache timeout = 660
name resolve order = lmhosts wins host bcast
nbt client socket address = 0.0.0.0
nbt port = 137
ncalrpc dir = /run/samba/ncalrpc
netbios aliases =
netbios name = UBUNTUSERVER
netbios scope =
neutralize nt4 emulation = No
nmbd bind explicit broadcast = Yes
nsupdate command = /usr/bin/nsupdate -g
nt hash store = always
ntlm auth = ntlmv1-permitted
nt pipe support = Yes
ntp signd socket directory = /var/lib/samba/ntp_signd
nt status support = Yes
null passwords = No
obey pam restrictions = Yes
old password allowed period = 60
oplock break wait time = 0
os2 driver map =
os level = 20
pam password change = Yes
panic action = /usr/share/samba/panic-action %d
passdb backend = tdbsam
passdb expand explicit = No
passwd chat = *Enter\snew\s*\spassword:* %n\n *Retype\snew\s*\spassword:* %n\n *password\supdated\ssuccessfully* .
passwd chat debug = No
passwd chat timeout = 2
passwd program = /usr/bin/passwd %u
password hash gpg key ids =
password hash userPassword schemes =
password server = *
perfcount module =
pid directory = /run/samba
preferred master = Auto
prefork backoff increment = 10
prefork children = 4
prefork maximum backoff = 120
preload modules =
printcap cache time = 750
printcap name =
private dir = /var/lib/samba/private
raw NTLMv2 auth = No
read raw = Yes
realm =
registry shares = No
reject md5 clients = Yes
reject md5 servers = Yes
remote announce =
remote browse sync =
rename user script =
require strong key = Yes
reset on zero vc = No
restrict anonymous = 0
root directory =
rpc big endian = No
rpc server dynamic port range = 49152-65535
rpc server port = 0
rpc start on demand helpers = Yes
samba kcc command = /usr/sbin/samba_kcc
security = USER
server max protocol = SMB3
server min protocol = NT1
server multi channel support = Yes
server role = standalone server
server schannel = Yes
server schannel require seal = Yes
server services = s3fs, rpc, nbt, wrepl, ldap, cldap, kdc, drepl, winbindd, ntp_signd, kcc, dnsupdate, dns
server signing = default
server smb3 encryption algorithms = AES-128-GCM, AES-128-CCM, AES-256-GCM, AES-256-CCM
server smb3 signing algorithms = AES-128-GMAC, AES-128-CMAC, HMAC-SHA256
server string = %h server (Samba, Ubuntu)
set primary group script =
set quota command =
show add printer wizard = Yes
shutdown script =
smb1 unix extensions = Yes
smb2 disable lock sequence checking = No
smb2 disable oplock break retry = No
smb2 leases = Yes
smb2 max credits = 8192
smb2 max read = 8388608
smb2 max trans = 8388608
smb2 max write = 8388608
smb3 unix extensions = No
smbd profiling level = off
smb passwd file = /etc/samba/smbpasswd
smb ports = 445 139
socket options = TCP_NODELAY
spn update command = /usr/sbin/samba_spnupdate
stat cache = Yes
state directory = /var/lib/samba
svcctl list =
syslog = 1
syslog only = No
template homedir = /home/%D/%U
template shell = /bin/false
time server = No
timestamp logs = Yes
tls cafile = tls/ca.pem
tls certfile = tls/cert.pem
tls crlfile =
tls dh params file =
tls enabled = Yes
tls keyfile = tls/key.pem
tls priority = NORMAL:-VERS-SSL3.0
tls verify peer = as_strict_as_possible
unicode = Yes
unix charset = UTF-8
unix password sync = Yes
use mmap = Yes
username level = 0
username map =
username map cache time = 0
username map script =
usershare allow guests = Yes
usershare max shares = 100
usershare owner only = Yes
usershare path = /var/lib/samba/usershares
usershare prefix allow list =
usershare prefix deny list =
usershare template share =
utmp = No
utmp directory =
winbind cache time = 300
winbindd socket directory = /run/samba/winbindd
winbind enum groups = No
winbind enum users = No
winbind expand groups = 0
winbind max clients = 200
winbind max domain connections = 1
winbind nested groups = Yes
winbind normalize names = No
winbind nss info = template
winbind offline logon = No
winbind reconnect delay = 30
winbind refresh tickets = No
winbind request timeout = 60
winbind rpc only = No
winbind scan trusted domains = No
winbind sealed pipes = Yes
winbind separator = \
winbind use default domain = No
winbind use krb5 enterprise principals = Yes
wins hook =
wins proxy = No
wins server =
wins support = No
workgroup = WORKGROUP
write raw = Yes
wtmp directory =
idmap config * : backend = tdb
access based share enum = No
acl allow execute always = No
acl check permissions = Yes
acl flag inherited canonicalization = Yes
acl group control = No
acl map full control = Yes
administrative share = No
admin users =
afs share = No
aio read size = 1
aio write behind =
aio write size = 1
allocation roundup size = 0
available = Yes
blocking locks = Yes
block size = 1024
browseable = Yes
case sensitive = Auto
check parent directory delete on close = No
comment =
copy =
create mask = 0744
csc policy = manual
cups options =
default case = lower
default devmode = Yes
delete readonly = No
delete veto files = No
dfree cache time = 0
dfree command =
directory mask = 0755
dmapi support = No
dont descend =
dos filemode = No
dos filetime resolution = No
dos filetimes = Yes
durable handles = Yes
ea support = Yes
fake directory create times = No
fake oplocks = No
follow symlinks = Yes
smbd force process locks = No
force create mode = 0000
force directory mode = 0000
force group =
force printername = No
force unknown acl user = No
force user =
fstype = NTFS
guest ok = No
guest only = No
hide dot files = Yes
hide files =
hide new files timeout = 0
hide special files = No
hide unreadable = No
hide unwriteable files = No
honor change notify privilege = No
hosts allow =
hosts deny =
include =
inherit acls = No
inherit owner = no
inherit permissions = No
invalid users =
kernel oplocks = No
kernel share modes = No
level2 oplocks = Yes
locking = Yes
lppause command =
lpq command = %p
lpresume command =
lprm command =
magic output =
magic script =
mangled names = illegal
mangling char = ~
map acl inherit = No
map archive = Yes
map hidden = No
map readonly = no
map system = No
max connections = 0
max print jobs = 1000
max reported print jobs = 0
min print space = 0
msdfs proxy =
msdfs root = No
msdfs shuffle referrals = No
nt acl support = Yes
ntvfs handler = unixuid, default
oplocks = Yes
path =
posix locking = Yes
postexec =
preexec =
preexec close = No
preserve case = Yes
printable = No
print command =
printer name =
printing = cups
printjob username = %U
print notify backchannel = No
queuepause command =
queueresume command =
read list =
read only = Yes
root postexec =
root preexec =
root preexec close = No
server addresses =
server smb encrypt = default
short preserve case = Yes
smbd async dosmode = No
smbd getinfo ask sharemode = Yes
smbd max async dosmode = 0
smbd max xattr size = 65536
smbd search ask sharemode = Yes
spotlight = No
spotlight backend = noindex
store dos attributes = Yes
strict allocate = No
strict locking = Auto
strict rename = No
strict sync = Yes
sync always = No
use client driver = No
use sendfile = No
valid users =
veto files =
veto oplock files =
vfs objects =
volume =
volume serial number = -1
wide links = No
write list =


[printers]
browseable = No
comment = All Printers
create mask = 0700
path = /var/tmp
printable = Yes


[print$]
comment = Printer Drivers
path = /var/lib/samba/printers


[Compartilhamento]
comment = Pasta compartilhada do servidor
path = /home/administrador/Compartilhamento/Comp
read only = No
valid users = administrador


[Comp]
guest ok = Yes
path = /home/administrador/Comp


[bkp_srv]
guest ok = Yes
path = /home/administrador/bkp_srv
read only = No


[Secretaria_MLK]
guest ok = Yes
path = /home/administrador/Secretaria_MLK
read only = No


[Depto_pessoal_MLK]
guest ok = Yes
path = /home/administrador/Depto_pessoal_MLK
read only = No


[Mlk_Tools]
guest ok = Yes
path = /home/administrador/Mlk_Tools
administrador@servermlk:~$



------------------------------------------------------| Linux User #621728 |------------------------------------------------------

" Nem sempre é amigo aquele que te tira do buraco !!! ( Saddam Hussein )"

------------------------------------------------------| Linux User #621728 |------------------------------------------------------






6. Re: Permissão acesso as pastas servidor Ubuntu Server 24.04

Mauriciodez
Mauriciodez

(usa Debian)

Enviado em 29/01/2026 - 15:42h

edgar.barker escreveu:
...administrador@servermlk:~$ sudo testparm -v...


Olhando por cima esse testparm achei umas 7 ou 8 config errada aí. Para não correr o risco de deixar passar algo fiz uma análise por IA ... resumindo ... te aconselho a refazer o smb.conf do 0 ( mas do 0 mesmo ), faz um básico e vai implementando config aos poucos pra não correr o risco de virar essa coisa aí .

pra vc ter uma ideia do que estou falando ... as principais coisas aí que faz o windows não acessar é a
* SMB1 ativo
* Logon guest ativado
* NTLMv1 permitido

As outras configs erradas/equivocadas são de segurança e incoerências.

EDIT: Para referência <<< https://www.vivaolinux.com.br/artigo/Configuracao-definitiva-do-Samba/ >>>

------------------------------------------------------| Linux User #621728 |------------------------------------------------------

" Nem sempre é amigo aquele que te tira do buraco !!! ( Saddam Hussein )"

------------------------------------------------------| Linux User #621728 |------------------------------------------------------








Patrocínio

Site hospedado pelo provedor RedeHost.
Linux banner

Destaques

Artigos

Dicas

Tópicos

Top 10 do mês

Scripts