samba - Jul 1999 - hosts allow/deny not working correctly

When the world was young, "M. Tyson Bigler" <bigler@shellus.com>
carved some runes like this:  
> I am having difficult getting the hosts allow/deny to work with IP ranges
> or netmasks.  Ideally I would prefer to use the IP/Netmask method, e.g.
> 111.22.33.0/255.255.255.0, because we have a flat ATM network with
> multiple class C's (netmask is really 255.255.252.0).  This, however,
> doesn't work!! I can't do 111.22.33. either...  I can't even do
specific
> IP's, e.g. 111.22.33.44 but I CAN do hostnames (e.g. myhost).
[snip]

Does solaris use the same /etc/hosts.allow and hosts.deny setup as 
linux?  If it's like file/dir permissions, etc, then the samba 
settings will *not* override the underlying system settings.

Just a thought, Steve

******************************************************************
Stephen L Arnold                      http://www.rain.org/~sarnold
#include <std_disclaimer.h>
******************************************************************

When the world was young, "M. Tyson Bigler" <bigler@shellus.com>
carved some runes like this:  
> > > I am having difficult getting the hosts allow/deny to work with
IP
> > > ranges or netmasks.  Ideally I would prefer to use the IP/Netmask
> > > method, e.g. 111.22.33.0/255.255.255.0, because we have a flat
ATM
> > > network with multiple class C's (netmask is really
255.255.252.0).
> > > This, however, doesn't work!! I can't do 111.22.33.
either...  I can't
> > > even do specific IP's, e.g. 111.22.33.44 but I CAN do
hostnames (e.g.
> > > myhost).
> > [snip]
And then he said:
> Yes, Solaris has the same type of hosts.[allow|deny], but
> there's nothing in there for the smbd/nmbd (I am, however,
> restricting rsh, rlogin, telnet, and ftp).  Plus, best I
> remember, when I had Samba on a test server I had the same
> problem and it didn't have the allow|deny files... 
It must be related to some name resolution problem (best guess).  
How are you resolving DNS/NetBIOS names now?  You could try 
changing the name resolve order in the smb.conf file.  Even if you 
use WINS (on samba or NT), samba seems to like to look in its own 
lmhosts file.  You could try putting one on the samba box and see 
what happens. HTH.

Steve

******************************************************************
Stephen L Arnold                      http://www.rain.org/~sarnold
#include <std_disclaimer.h>
******************************************************************