Hi,
For some reason, our samba server (now running 1.9.18alpha13) is not
publicly browseable (windows (95/96/98) clients ask for a password for IPC$.
I have a user pcguest defined (with a * entry as a password) and it is set
as the guest account in the smb.conf file. testparm gives the following for
the IPC$ "share":
[IPC$]
comment = IPC Service (Samba 1.9.18alpha13 Server)
path = /tmp
status = No
and in the global section of the smb.conf file I've put "public =
yes".
I have set the server to encrypted passwords, but that should not matter
for public shares, right?
what am I doing wrong?
TIA,
Simon.
PS, if more detailed information is needed, please e-mail me!
PGP public key: search for s.oosthoek@student.utwente.nl on
http://www.uk.pgp.net/pgpnet/pks-commands.html or
http://www.pgp.com/keyserver/pks-toplev.cgi
Download the international version of PGP 5.0 on
http://www.ifi.uio.no/pgp/
On Mon, 22 Dec 1997, Simon Oosthoek wrote:> Hi, > > For some reason, our samba server (now running 1.9.18alpha13) is not > publicly browseable (windows (95/96/98) clients ask for a password for IPC$. > > I have a user pcguest defined (with a * entry as a password) and it is set > as the guest account in the smb.conf file. testparm gives the following for > the IPC$ "share": > [IPC$] > comment = IPC Service (Samba 1.9.18alpha13 Server) > path = /tmp > status = No > > and in the global section of the smb.conf file I've put "public = yes". > I have set the server to encrypted passwords, but that should not matter > for public shares, right? > > what am I doing wrong?nothing: it's a bug in 1.9.18alpha13 that i introduced, just before i went over to BRANCH_NTDOM. luke
I've been seeing this behavior since 1.9.17p1. Haven't gotten a single response on this other than to play with GUEST_SESSSETUP in local.h, which didn't help in any of the changes. The NT server refuses the passwd each time. I can't tell if the encryption is working and the password is actually refused, or if the encryption doesn't work, hence the refused password. As I said, this has been happening for a while now. I can't use the version of Samba (1.9.17p2) that has the security fix because of this. Here is my smb.conf. Maybe someone can see the error? [global] client code page = 437 status = yes auto services = homes printers printing = bsd printcap name = /etc/printcap load printers = yes username map = /usr/local/pkgs/samba/test/lib/usernamemap guest account = http workgroup = WARREN interfaces = XXX.YYY.208.1/24 remote announce = XXX.YYY.211.255/WARREN 1XXX.YYY.210.255/WARREN XXX.YYY.33.255/WARREN XXX.YYY.214.255/WARREN security = server encrypt passwords = yes password server = NOT THOR LOKI log level = 3 log file = /usr/local/pkgs/samba/test/logs/samba.log.%m max log size = 50 wins proxy = no wins server = XXX.YYY.211.30 message command = csh -c 'xedit %s;rm %s' & server string = Samba Server (Samba %v) domain master = no local master = no domain master = no preferred master = no os level = 0 read raw = no read size = 1024 read prediction = yes socket options = TCP_NODELAY IPTOS_LOWDELAY getwd cache = yes preserve case = yes short preserve case = yes dead time = 15 lock directory /usr/local/pkgs/samba/test/locks locking = yes share modes = yes default service = default [default] path = /%S writeable = yes locking = no browseable = no [homes] comment = %U Home Directory browseable = no read only = no create mode = 0664 [IPC$] path = /tmp comment = IPC Service browseable = yes writeable = no printable = no public = yes status = No [printers] postscript = true guest ok = no comment = All Printers browseable = no printable = yes public = yes writable = no create mode = 0700 lprm command = /usr/ucb/lprm -P%p %j lpq command = /usr/ucb/lpq -P%p print command = /usr/ucb/lpr -P%p %s; rm %s path = /tmp -Ernie At 12:56 PM 12/23/97 +1100, you wrote:>------------------------------ > >Date: Mon, 22 Dec 1997 10:42:22 +0100 >From: Simon Oosthoek <simon@margo.student.utwente.nl> >To: samba@samba.anu.edu.au >Subject: no password for IPC$ >Message-ID: <3.0.3.32.19971222104222.0072f16c@130.89.220.2> > >Hi, > >For some reason, our samba server (now running 1.9.18alpha13) is not >publicly browseable (windows (95/96/98) clients ask for a password for IPC$. > >I have a user pcguest defined (with a * entry as a password) and it is set >as the guest account in the smb.conf file. testparm gives the following for >the IPC$ "share": >[IPC$] > comment = IPC Service (Samba 1.9.18alpha13 Server) > path = /tmp > status = No > >and in the global section of the smb.conf file I've put "public = yes". >I have set the server to encrypted passwords, but that should not matter >for public shares, right? > >what am I doing wrong? > >TIA, > >Simon.http://www.geocities.com/SiliconValley/Park/9276 _____/ ____ / /Ernie "Shokk" Oporto-SysAdmin _____ ____ / \ __ / __ Mentor Graphics Corporation \______/ __ __ \______/ __ \___ __ \___
ok, i've attempted running the latest version of the code (to be 1.9.18alpha15 or a main release, soon). it runs fine with the following smb.conf file. config: freebsd 2.1 stable. guest account "nobody", uid 65534. ---------------------------------------------------------------- ; these are here because freebsd is terminally slow without them. socket options = TCP_NODELAY IPTOS_LOWDELAY IPTOS_THROUGHPUT wins support = yes encrypt passwords = yes ; debug level = 1 security = user load printers = yes printing = bsd printcap name = /etc/printcap workgroup = cb1 domain sid = S-1-5-21-123-456-789-124 logon script = %U.bat logon path = \\%L\%U\profile case sensitive = no preserve case = yes short preserve case = yes ; This next option sets a separate log file for each client. Remove ; it if you want a combined log file. log file = /usr/local/samba/log.%m ; You will need a world readable lock directory and "share modes=yes" ; if you want to support the file sharing modes for multiple users ; of the same files lock directory = /usr/local/samba/var/locks share modes = yes locking = yes oplocks = yes ; read prediction = yes os level = 33 preferred master = yes domain logons = yes domain master = yes dns proxy = no wins proxy = no ; equivalent and absolutely identical to public = yes guest ok = yes [homes] comment = Home Directories read only = no create mode = 0750 browseable = yes [NETLOGON] path = /usr/local/samba/netlogon browseable = yes ; essential parameters to protect netlogon shares. read only = yes share modes = no locking = no oplocks = no guest ok = no [applications] comment = CB1 Applications path = /usr/local/applications read only = yes guest ok = no share modes = no locking = no oplocks = no [Mac_Apps] comment = CB1 Mac Applications path = /usr/local/mac_apps read only = yes guest ok = no share modes = no locking = no oplocks = no include = /usr/local/samba/lib/smb.conf.%U [tmp] comment = Temporary file space path = /tmp read only = yes [printers] comment = Printers browseable = yes printable = yes read only = yes On Mon, 22 Dec 1997, Simon Oosthoek wrote:> Hi, > > For some reason, our samba server (now running 1.9.18alpha13) is not > publicly browseable (windows (95/96/98) clients ask for a password for IPC$. > > I have a user pcguest defined (with a * entry as a password) and it is set > as the guest account in the smb.conf file. testparm gives the following for > the IPC$ "share": > [IPC$] > comment = IPC Service (Samba 1.9.18alpha13 Server) > path = /tmp > status = No > > and in the global section of the smb.conf file I've put "public = yes". > I have set the server to encrypted passwords, but that should not matter > for public shares, right? > > what am I doing wrong? > > TIA, > > Simon. > > PS, if more detailed information is needed, please e-mail me! > > PGP public key: search for s.oosthoek@student.utwente.nl on > http://www.uk.pgp.net/pgpnet/pks-commands.html or > http://www.pgp.com/keyserver/pks-toplev.cgi > > Download the international version of PGP 5.0 on > http://www.ifi.uio.no/pgp/ ><a href="mailto:lkcl@switchboard.net" > Luke Kenneth Casson Leighton </a> <a href="http://mailhost.cb1.com/~lkcl"> Samba Consultancy and Support </a>