Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I have a Debian computer running Samba. I access the server from another computer running Windows 7. As guest, I can list the share as read-only, force user, etc. But I can not access samba server with any credentials. I only get \\ip\storage is not accesible.

Here is my config:
* the users exist as real users
* samba runs as security = user
* I have added the user with smbpasswd -a user
* the logs don't show anything wrong
* the testparm is showing the following:

    server string = %h server
    interfaces =, eth1
    bind interfaces only = Yes
    map to guest = Bad User
    obey pam restrictions = Yes
    pam password change = Yes
    passwd program = /usr/bin/passwd %u
    passwd chat = *Enter\snew\s*\spassword:* %n\n *Retype\snew\s*\spassword:* %n\n *password\supdated\ssuccessfully* .
    unix password sync = Yes
    syslog = 0
    log file = /var/log/samba/log.%m
    max log size = 1000
    dns proxy = No
    usershare allow guests = Yes
    panic action = /usr/share/samba/panic-action %d
    idmap config * : backend = tdb

    comment = Home Directories
    valid users = %S
    read only = No
    create mask = 0700
    directory mask = 0700
    browseable = No

    comment = All Printers
    path = /var/spool/samba
    create mask = 0700
    printable = Yes
    print ok = Yes
    browseable = No

    comment = Printer Drivers
    path = /var/lib/samba/printers

    comment = Samba server's CD-ROM
    path = /cdrom
    guest ok = Yes
    locking = No

    comment = Access to all users
    path = /home/samba-all-users
    valid users = @sambashare
    force group = sambashare
    read only = No
    create mask = 0770
    directory mask = 0771

    comment = Read/Write Guest Account Access
    path = /home/samba-guest
    force group = sambashare
    read only = No
    create mask = 0775
    directory mask = 0775
    guest only = Yes
    guest ok = Yes

    comment = Music
    path = /home/daniel/storage

* samba version is 3.6.6
* the client is running Windows 7 Home Premium
* I have a firewall with iptables on this computer, but it's doing only ICS at the moment of these tests. All rules are set on ACCEPT by default.

share|improve this question
after you add the user to samba with smbpasswd -a user, did you reload the samba service? – c4f4t0r Jan 10 '14 at 16:35
@c4f4t0r: actually I have restarted the service. I read so many tutorials on how to do it, but none of them worked. – machineaddict Jan 10 '14 at 16:38
but on others share, user can login? because looking your config for share storage maybe you are missing something, try to add to storage share valid users = user – c4f4t0r Jan 10 '14 at 17:04
@c4f4t0r: i did that and is still the same – machineaddict Jan 10 '14 at 19:21
Can you post the content of : /var/log/samba/log.%m ? – CloudWeavers Jan 17 '14 at 1:28

The Windows 7 network client requires packet signing by default (to prevent man-in-the-middle attacks), and Samba disables packet signing by default. It may be that your client and server are failing to negotiate with each other on this item. So you could resolve it in one of two ways.

Server Side Solution: Enable Packet Signing on Samba

Add the following to your smb.conf:

server signing = auto

Restart the service and try again.

You could also try mandatory instead of auto. Read the docs here.

Client Side Solution: Disable Packet Signing on the Microsoft Network Client

First, open the Local Group Policy Editor:

  1. Press the Start button
  2. Type gpedit.msc in the Start search box and press Enter

In the Local Group Policy Editor, go to:

Local Computer Policy->
  Computer Configuration->
    Windows Settings->
      Security Settings->
        Local Policies->
          Security Options

Find the policy:

Microsoft network client: Digitally sign communications (always)

If this is enabled, change it to Disabled. Press Apply, restart the computer, and try again.

share|improve this answer
Setting server signing to any value (like you said) makes the samba share server invisible (it's not found). And I don't have gpedit.msc because I have Window 7 Home Premium. Any other suggestions? – machineaddict Jan 18 '14 at 12:32
My main suggestion is to provide more information in your original post, as suggested in the question's comments. Knowing the Samba version would also be nice, just to rule out a couple possibilities. And mention that the client is Windows 7 Home Premium in the original post. – billyw Jan 18 '14 at 17:17
I just added some notes to the original post – machineaddict Jan 19 '14 at 9:57

You may check a similar question on superuser for possible solutions (

share|improve this answer
That is not the problem – machineaddict Jan 17 '14 at 1:08

here is my working config(on OpenSUSE 11,3 smbd Version 3.5.4-5.11.1-2573-SUSE-SL11.3) :

workgroup = WORKGROUP
passdb backend = tdbsam
printing = cups
printcap name = cups
printcap cache time = 750
cups options = raw
map to guest = Bad User
include = /etc/samba/dhcp.conf
logon path = \\%L\profiles\.msprofile
logon home = \\%L\%U\.9xprofile
logon drive = P:
usershare allow guests = no
domain logons = Yes
domain master = Yes
security = users
wins support = No
hosts allow = 192.168.0.*

inherit acls = No
path = /data_storage/personal_projects
read only = No
admin users = backupcat
available = Yes
browseable = Yes
comment = Komodo projects
guest ok = No
hosts allow = 192.168.0.*
valid users = @users
write list = @users

try it with your config.

share|improve this answer
I have modified your example to suit my needs, but still no luck. – machineaddict Jan 26 '14 at 17:52
I think you shuold set "valid users" and "write list" to "@users" and try it again. and in your confing, you should connect like this : "\\YOUR_SERVER_IP\personal_projects" – Eugene Jan 27 '14 at 10:18
Doesn't @users means the group users? Because my account doesn't belong to users group. – machineaddict Jan 27 '14 at 11:18

Maybe a longshot, but idmap config * invokes winbind, how is your nsswitch.conf looking? Especially lines regarding passwd:

Reference here for further reading if you have not already:


share|improve this answer
nsswitch.conf file has the following content. And I didn't read and knew about that before. – machineaddict Jan 26 '14 at 18:03

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.