I am very new to SAMBA and new to unix as well, which makes trying to set this up very fun. I am trying to get 3.0.2 setup on our UNIX station and I have it up and running. I am able to set a location and get to it from win2k, so I'm about half way to what I want. My question: Is there a way to setup samba so that only users I allow can access the files? I want to do it in such a way that samba uses the win2k logon as the username it looks for and so that once the user logs onto a workstation they dont have to logon to samba everytime they need to access something. I know I can block workstations by way of the IP filter but would like to do it this other way. This may be completely impossible so please let me know. thanks alot. corey
Usually you can just log the clients in the first time, map a network drive letter to the share's they want, and check the remember password, and reconnect at logon options. That'll do what you want. The default login name for network shares is the workstation user name. For this reason I usu try to make the smb user names the same as the workstation login usernames; keeps it simple. It is, however, easy enough in 2k and XP to logon to network shares with different user name. /r Sheakoski, Corey M (PKI) wrote:> I am very new to SAMBA and new to unix as well, which makes trying to set > this up very fun. I am trying to get 3.0.2 setup on our UNIX station and I > have it up and running. I am able to set a location and get to it from > win2k, so I'm about half way to what I want. My question: Is there a way to > setup samba so that only users I allow can access the files? I want to do it > in such a way that samba uses the win2k logon as the username it looks for > and so that once the user logs onto a workstation they dont have to logon to > samba everytime they need to access something. I know I can block > workstations by way of the IP filter but would like to do it this other way. > This may be completely impossible so please let me know. thanks alot. > > corey
You could also use "valid users = user1 user2 @group1 @group2" I was hoping to do it that way, but have so far been able to get it to work. Enter that into the config file it will block out users by asking for a username and password. Is there somewhere else I need to enter the username or is there somewhere I have to make up some kind of password? Thanks again.
It depends on how they are authenticating, do they log on to a domain or is it just a workgroup? Sheakoski, Corey M (PKI) wrote:>You could also use "valid users = user1 user2 @group1 @group2" >I was hoping to do it that way, but have so far been able to get it to work. >Enter that into the config file it will block out users by asking for a >username and password. Is there somewhere else I need to enter the username >or is there somewhere I have to make up some kind of password? Thanks again. > > >
[This email is either empty or too large to be displayed at this time]
They are logging onto a domain. When going to "map a network drive" I can bring up a list of the users on the network, so I know that the users exist. it's just a matter of the password, using the win logon password doesnt work so I'm stuck right now. thanks for your help.
-----Original Message----- From: Robert Adkins [mailto:radkins@impelind.com] Sent: Tuesday, July 06, 2004 8:19 AM To: Sheakoski, Corey M (PKI) Cc: 'samba@lists.samba.org' Subject: Re: [Samba] Samba/win2k ?? Sheakoski, Corey M (PKI) wrote:>They are logging onto a domain. >What/Who is/are logging onto a domain? Your users or your workstations? -the users are logging onto the network Is the server a Windows Running Domain Controller or do you have Samba setup as a Domain Controler on some form of Linux/UNIX/*BSD? -It is a Windows Running Domain Controller>When going to "map a network drive" I can >bring up a list of the users on the network, so I know that the usersexist.> >When you say users, are you referring to 'Computers' or an Active Directory Store of User Accounts? -There is a directory of user account names>it's just a matter of the password, using the win logon password doesntwork>so I'm stuck right now. thanks for your help. > >With those answers I am sure that someone, either myself or others, could point you into the right direction. -Rob -Thanks again -Corey