samba - Sep 2002 - Access from one box but denied from the other

I have samba setup and serving properly to one of my Win2K boxes, I can access
shares and create/delete/move files from one of my Win2K hosts but not the
others. I went through a bazillion steps debugging to get the first Win2k box
connecting so its hard to say what it is that the other boxes (or the samba
server) isn't doing.

When trying to connect from one of the other Win2K boxes (through explorer) I
get the message:
"The account is not authorized to login from this station"

When I try to login from a dos prompt with `net view \\HOST\SHARE` it says:
"Access denied"

Can anyone tell what's wrong here?
My smb.conf:
[global]

workgroup = WORKGROUP

map to guest = Bad User

socket options = SO_KEEPALIVE IPTOS_LOWDELAY TCP_NODELAY

character set = ISO8859-15

os level = 2

printing = lprng

veto files = /*.eml/*.nws/riched20.dll/*.{*}/

[homes]

comment = Home Directories

read only = No

create mask = 0640

directory mask = 0750

browseable = No

[printers]

comment = All Printers

path = /var/tmp

create mask = 0600

printable = Yes

browseable = No

[archive1]

path = /archive1

read only = No

create mask = 0640

directory mask = 0750


Justin Hannus
Lead Programmer/Web Development
jhannus@visualconceptsinc.com
www.visualconceptsinc.com
[860] 242.1150 ext.125
[860] 242.1446 fax
-------------- next part --------------
HTML attachment scrubbed and removed

Montag den 16.09.2002 um 17:16 CEST  +0200, schrieb m31:
> I have samba setup and serving properly to one of my Win2K boxes, I
> can access shares and create/delete/move files from one of my Win2K
> hosts but not the others. I went through a bazillion steps debugging
> to get the first Win2k box connecting so its hard to say what it is
> that the other boxes (or the samba server) isn't doing.
Are both w2k boxes on the same ip network?
If not:  Are you running samba as daemon on the unix box, or do you
         setup this as service via inetd?
		 If you run this via inetd: check the /etc/hosts.allow file.
> 
> When trying to connect from one of the other Win2K boxes (through
> explorer) I get the message: "The account is not authorized to login
> from this station"
> 
> When I try to login from a dos prompt with `net view \\HOST\SHARE` it
> says: "Access denied"
Do you setup both unix and samba user?
> 
> Can anyone tell what's wrong here?
> My smb.conf:
Dump all samba parameter via "testparm", and check again in
conjunction
with "man smb.conf".

-- 
Frank Matthie?                                          fm@Microdata-pos.de

Montag den 16.09.2002 um 18:13 CEST  +0200, schrieb m31:
> > Are both w2k boxes on the same ip network?
> > If not:  Are you running samba as daemon on the unix box, or do you
> >          setup this as service via inetd?
> > If you run this via inetd: check the /etc/hosts.allow file.
> 
> Yes, they are all on the same network and I have them started by inetd but
> never modified hosts.allow and the one machine I initally setup is still
> able to connect.
> 
> > Do you setup both unix and samba user?
> 
> I have ran /etc/passwd through smbpasswd.  Do I have to login on the Win2K
> machines as a valid user before I connect or can I just use a valid
username
> and password when prompted through the explorer? <-(eg. I want ALL users
to
If you use the "net" command without setting the username for this
request, than windows try it with actual username you are logged in.

The explorer request try it with actual username, if i recognize
correct.

To authenticate against samba/unix: Think about case sensitive.

I have no nt system at hand, but i know that "net help use" will print
usefull information. Pipe it to more ;-)
> connect to a certain share with the same user and passwd). I have my Win2K
> password and username synced up with the linux box but not the rest of the
> users. ( i figure I'll take care of that last, all these stupid windows
> usernames and password have spaces and other stuff you wouldn't want in
a
> unix user:pass)
man smb.conf ->  username map (G)
> 
> > Dump all samba parameter via "testparm", and check again in
conjunction
> > with "man smb.conf".
> tests return OK
I think so, because samba run's...

-- 
Frank Matthie?                                          fm@Microdata-pos.de

You do not specify "encrypt passwords = yes" in your smb.conf file 
so my guess is that your working Machine has had the plaintext
password registry fix added and the other machines have not.

Either change samba to use encrypted passwords (don't forget to add
the passwords with smbpasswd command) or apply the registry fix
to the other machines.

> m31 wrote:
> 
> I have samba setup and serving properly to one of my Win2K boxes, I
> can access shares and create/delete/move files from one of my Win2K
> hosts but not the others. I went through a bazillion steps debugging
> to get the first Win2k box connecting so its hard to say what it is
> that the other boxes (or the samba server) isn't doing.
> 
> When trying to connect from one of the other Win2K boxes (through
> explorer) I get the message:
> "The account is not authorized to login from this station"
> 
> When I try to login from a dos prompt with `net view \\HOST\SHARE` it
> says:
> "Access denied"
> 
> Can anyone tell what's wrong here?
> My smb.conf:
> 
-- 
=====================================================================Herb Lewis 
Silicon Graphics
Networking Engineer                      1600 Amphitheatre Pkwy MS-510
Strategic Software Organization          Mountain View, CA  94043-1351
herb@sgi.com                             Tel: 650-933-2177
http://www.sgi.com                       Fax: 650-932-2177          
======================================================================