How to use users.conf?

[RWHurra]

Hello!

this .yml works fine:

services:
  samba:
    image: dockurr/samba
    container_name: samba
    environment:
      NAME: "Data"
      USER: "user"
      PASS: "pw"
    ports:
      - "445:445"
    volumes:
      - /my_dir:/storage
      - ./config:/config
    restart: always

but when I try to use users.conf like this:

services:
  samba:
    image: dockurr/samba
    container_name: samba
    environment:
      NAME: "Data"
    ports:
      - "445:445"
    volumes:
      - /my_dir:/storage
      - ./config:/config
      - ./users.conf:/etc/samba/users.conf
    restart: always

where users.conf:

#username:UID:groupname:GID:password:homedir
user:1000:group:1000:pw:storage
user2:1001:group:1000:pw:storage

I can't access the storage. I have tried all kinds of different permission on /my_dir:

sudo chmod 775 /my_dir
sudo chmod g+s /my_dir
sudo chmod g+w /my_dir
sudo chown -R 1000:1000 /my_dir
sudo chmod -R 775 /my_dir 

Note: I've only tested userwith users.conf, haven't even tried user2.

There's probably something fundemental I'm missing, I'm quite new to linux/docker/hosting. I would appreciate any guidance where I'm going wrong!

This is the logs from docker compose:

samba  | create_connection_session_info: user 'user' (from session setup) not permitted to access this share (Data)
samba  | make_connection_snum: create_connection_session_info failed: NT_STATUS_ACCESS_DENIED

If there any help I have a Proxmox VE running Ubuntu Serveron a KVM with several other containers up and running.

I have no idea what's wrong, but my best guess is that the mapping between the (virtualized) host permissions and container users/groups is not working. Feel free to correct me!

[kroese]

@HanLiQL Can you take a look at this?

[HanLiQL]

You need to completely remove this Docker container docker compose down , then run docker compose up again, and send me all the logs.

[HanLiQL]

user and user 2 don't use the same homedir storage.

[RWHurra]

You need to completely remove this Docker container docker compose down , then run docker compose up again, and send me all the logs.

I'm not quite sure what you mean by "all the logs". Is the following enough?

docker-compose.yml:

services:
  samba:
    image: dockurr/samba
    container_name: samba
    environment:
      NAME: "Data"
    ports:
      - "445:445"
    volumes:
      - /nas_data/samba_share:/storage
      - ./config:/config
      - ./users.conf:/etc/samba/users.conf
    restart: always

users.conf:

#username:UID:groupname:GID:password:homedir
user1:1000:samba:1000:pw1:storage_user1
user2:1001:samba:1000:pw2:storage_user2

running compose docker up samba, then trying to login as user1 and user2:

[+] Running 1/1
 ✔ Container samba  Created                                                                                                                                                        0.1s 
Attaching to samba
samba  | Group samba does not exist, creating group...
samba  | User user1 does not exist, creating user...
samba  | User user1 has been added to Samba and password set.
samba  | User user2 does not exist, creating user...
samba  | User user2 has been added to Samba and password set.
samba  | smbd version 4.21.6 started.
samba  | Copyright Andrew Tridgell and the Samba Team 1992-2024
samba  | parse_dfs_path_strict: Hostname 192.168.1.217 is not ours.
samba  | create_connection_session_info: user 'user1' (from session setup) not permitted to access this share (Data)
samba  | make_connection_snum: create_connection_session_info failed: NT_STATUS_ACCESS_DENIED
samba  | parse_dfs_path_strict: Hostname 192.168.1.217 is not ours.
samba  | create_connection_session_info: user 'user2' (from session setup) not permitted to access this share (Data)
samba  | make_connection_snum: create_connection_session_info failed: NT_STATUS_ACCESS_DENIED

A note is that 192.168.1.217 is the ip of the KVM running Ubuntu Server hosting docker and the container. The client that is trying to connect is 192.168.1.237.

Are there any other logs you are referring to?

[HanLiQL]

Could you please enter the Docker container and check the folder permissions and ownership?
You can do this by running the following command:

docker exec -it samba bash

Once inside the container, please run:

ls -ld /path/to/storage_user1 /path/to/storage_user2

to verify the permissions and ownership of both folders.

Next, please review the Samba configuration to confirm how the shares are defined:

cat /etc/samba/smb.conf

This information will help us identify whether the issue is related to file permissions or the Samba configuration.