I have small problem,
my NT requests password every time when I reboot, but only on SAMBA
shares, passwd from W95 shares are saved and not requested.
Any suggestion?
Pavel
Pavel Lisy --- system administrator (Solaris, Linux, Win95)
_________
| | T-MAPY s.r.o. tel. +42 49 619392
|__ __| Skroupova 957 tel. +42 49 673180
| | Hradec Kralove fax. +42 49 619122
M A P Y 500 02 E-mail: pali@tmapy.cz
|___| Czech Republic Europe
Gerald W. Carter
1997-Sep-18 16:11 UTC
Why WinNT wrks 4.0 does not remember SAMBA password?
-- > Date: Thu, 18 Sep 1997 09:53:53 +0100> From: "Pavel Lisy" <pali@tmapy.cz> > To: samba@arvidsjaur.anu.edu.au > Subject: Why WinNT wrks 4.0 does not remember SAMBA password? > Message-ID: <199709180754.JAA04058@noe.tmapy.cz> > > I have small problem, > > my NT requests password every time when I reboot, but only on SAMBA > shares, passwd from W95 shares are saved and not requested. > > Any suggestion? > > PavelI belive this will go away if you use encrypted passwords on the Samba server ( not sure though ). Also once you make the initial connection ( validation) then all subsequent connections go through. An interesting note to this is that if you use a Samba box to server the homes directories for you NT accounts, then this connects up normally at logon time with NO prompt for a password. If the connection is done as a presistent connection ( reconnect on login ) then it does ask for a password. A dump of the packets revleals that NT passes the password across for the home directory automatically but not for the persistent connection [hmmmmmm......] Anyway, if you mount the use's home directory from a Samba server then all other connect to THAT server will go through without asking for a password because the user has already been validated. Hope this helps some. If not then just file in the the round file :) j- ________________________________________________________________________ Gerald ( Jerry ) Carter Engineering Network Services Auburn University jerry@eng.auburn.edu http://www.eng.auburn.edu/users/cartegw "...a hundred billion castaways looking for a home." - Sting "Message in a Bottle" ( 1979 ) ________________________________________________________________________
A non-text attachment was scrubbed... Name: not available Type: text Size: 416 bytes Desc: not available Url : http://lists.samba.org/archive/samba/attachments/19970919/52cc0a4e/attachment.bat
Gerald W. Carter
1997-Sep-19 18:39 UTC
Why WinNT wrks 4.0 does not remember SAMBA password?
Roeland M.J. Meyer wrote:> > >> my NT requests password every time when I reboot, but only on SAMBA > >> shares, passwd from W95 shares are saved and not requested. > >> > >> Any suggestion? > > >I belive this will go away if you use encrypted passwords on the Samba > >server ( not sure though ). Also once you make the initial connection ( > >validation) then all subsequent connections go through. > > Nope, this will not go away unless you also set 'security = user' in the > Samba globals section. I just had to bring HAWK up to SP3_I (3 hour > download at 28.8K <sigh>) and one of the consequences is that I had to > implement encryption in Samba.Yes. I guess I took for granted that small detail :-/ Sorry> > >An interesting note to this is that if you use a Samba box to server the > >homes directories for you NT accounts, then this connects up normally at > >logon time with NO prompt for a password. If the connection is done as > >a presistent connection ( reconnect on login ) then it does ask for a > >password. A dump of the packets revleals that NT passes the password > >across for the home directory automatically but not for the persistent > >connection [hmmmmmm......] > > Yeah, a major security leak. We don't allow 'security = user' because of > this. I'll find out how persistent this leak is when I install the Secure > Desktop, from Datafellows, next month. I hope that SSH will help with this. > > BTW, the problem is with Microsoft.But of course....> >Anyway, if you mount the use's home directory from a Samba server then > >all other connect to THAT server will go through without asking for a > >password because the user has already been validated. > > And this is a real problem. If you are Admin and a users asks for help. You > sometimes have your trick Admin stuff on a LAN directory so you don't have > to drag a load of disks around. Regardless of what's on the server, in USER > security mode, if you then log into your Admin share (login w/ uuid and > passwd) , that machine will always remember how to do that. Even through a > power cycle and killing the smbd processes on the Linux Samba server (condor).No. and besides the remember connections is on the client in the registry. You can prevent the NT client from trying to reconnect at a later login by net use /persistent:no disconnect all shares by the user to the server and then connect as the admin. And besides that, Samba always asks for a password on the first connection in our setup here. Samba 1.9.16p11 on Solaris 2.5.1 from NT4.0 w/sp3 and plain text passwords enabled on the client. j- ________________________________________________________________________ Gerald ( Jerry ) Carter Engineering Network Services Auburn University jerry@eng.auburn.edu http://www.eng.auburn.edu/users/cartegw "...a hundred billion castaways looking for a home." - Sting "Message in a Bottle" ( 1979 ) ________________________________________________________________________