[SOLVED] Access Denied message in samba after directory name change

[msdbelieves]

I'm running CENTOS 5 as a Samba Server in a Windows Client environment. Recently, I decided to change the name of a Samba share.

I renamed the shared directory, edited smb.conf to change the share to the new name, deleted the old group, added the new group, & assigned the users to the new group.

Now I receive an "Access Denied" message when I attempt to access the share from the Windows Clients. I have copied files from the directory to a Windows accessible directory in a terminal session and 75% of the files or directories under the share still give the "Access Denied" message.

I've played with permissions on the problem directory to no avail. Obviously, I did something I should not have done. I just want to regain access to the files from a Windows client.

Any help would be greatly appreciated.

msdbelieves

smb.conf

#===== Global Settings =====
#
[global]

# ----------------------- Network Related Options -------------------------
	workgroup = WSI
	server string = Samba Server %v
	netbios name = WSI1

# --------------------------- Logging Options -----------------------------

# ----------------------- Standalone Server Options ------------------------
	security = user
	passdb backend = ldapsam
	encrypt passwords = true
	ldap admin dn = cn=Manager,dc=wsi,dc=com
  	ldap delete dn = yes
  	ldap group suffix = ou=Groups
  	ldap machine suffix = ou=Computers
	ldap user suffix = ou=Users
	ldap suffix = dc=wsi,dc=com
	ldap passwd sync = Yes
	wins server = 192.168.2.101
	wins support = yes
	dns proxy = no
	username map = /etc/samba/smbusers

# ----------------------- Domain Members Options ------------------------

# ----------------------- Domain Controller Options ------------------------
	domain master = yes
	domain logons = yes
	logon path =
	logon home =
	add machine script = /usr/sbin/smbldap-useradd -w "%u"
	add user script = /usr/sbin/smbldap-useradd -m "%u"
	ldap delete dn = Yes
	delete user script = /usr/sbin/smbldap-userdel "%u"
	add group script = /usr/sbin/smbldap-groupadd -p "%g"
	delete group script = /usr/sbin/smbldap-groupdel "%g"
	add user to group script = /usr/sbin/smbldap-groupmod -m "%u" "%g"
	delete user from group script = /usr/sbin/smbldap-groupmod -x "%u" "%g"
	set primary group script = /usr/sbin/smbldap-usermod -g "%g" "%u"

# ----------------------- Browser Control Options ----------------------------
	local master = yes
	preferred master = yes

#----------------------------- Name Resolution -------------------------------

# --------------------------- Printing Options -----------------------------

# --------------------------- Filesystem Options ---------------------------
#
#===== Share Definitions =====
#
[homes]
	comment = Home Directories
	browseable = no
	writable = yes
	guest ok = no
#
	valid users = %S
#
	valid users = WSI\%S
	path = /shares/USERS/%S
#
# Un-comment the following and create the netlogon directory for Domain Logons
#
[netlogon]
	comment = Network Logon Service
	path = /shares/netlogon
	logon script = logon.bat
	guest ok = yes
	writable = no
	share modes = no
#
[ACCOUNTING]
	comment = ACCOUNTING
	path = /shares/ACCOUNTING
	browseable = no
	guest ok = no
	writeable = yes
	printable = no
	force directory mode = 770
	force create mode = 770
	force group = accounting
	valid users =+accounting
#
[ADMIN]
	comment = ADMIN
	path = /shares/ADMIN
	browseable = no
	guest ok = no
	writeable = yes
	printable = no
	force directory mode = 770
	force create mode = 770
	force group = admin
	valid users =+admin
#
[GRAPHICS]
	comment = GRAPHICS
	path = /shares/GRAPHICS
	browseable = no
	guest ok = no
	writeable = yes
	printable = no
	force directory mode = 770
	force create mode = 770
	force group = graphics
	valid users =+graphics
#
[PROCESSING]
	comment = PROCESSING
	path = /shares/PROCESSING
	browseable = no
	guest ok = no
	writeable = yes
	printable = no
	force directory mode = 770
	force create mode = 770
	force group = processing
	valid users =+processing
#
[SALES]
	comment = SALES
	path = /shares/SALES
	browseable = no
	guest ok = no
	writeable = yes
	printable = no
	force directory mode = 770
	force create mode = 770
	force group = sales
	valid users =+sales
#
[ITDEPT]
	comment = ITDEPT
	path = /shares/ITDEPT
	browseable = no
	guest ok = no
	writeable = yes
	printable = no
	force directory mode = 770
	force create mode = 770
	force group = itdept
	valid users =+itdept
#
[profiles]
	comment = profiles
	path = /shares/profiles
	browseable = no
	guest ok = no
	writeable = yes
	printable = no
	force directory mode = 770
	force create mode = 770
#
[CLIENTS]
	comment = CLIENTS
	path = /shares/PROCESSING/CLIENTS
	browseable = no
	guest ok = no
	writeable = yes
	printable = no
	force directory mode = 770
	force create mode = 770
	force group = clients
	valid users =+clients
#

[kevin1965]

Hi,

Could you show long listing of the directory thats causing the problem and one of a directory thats working for you.

Is SElinux set to enforcing?

[msdbelieves]

Thanks for responding kevin1965. After some other work on the smb.conf file over the weekend, it finally mapped. I'm embarrassed to say, I think it was the service restart that corrected the problem. Due to the heavy intranet traffic during the day, I had forgotten that I had not restarted the service. We have 30+ users on the samba server and I did not wish to risk file corruption by restarting the samba service.