Tran.Thach.Tung@QUANTIC.AC.VN
1999-Nov-05 08:25 UTC
Authentication on Linux6.0 that running samba-2.0.3
Hello All, I am using Linux6.0(running samba) as a file server on my network, everything is good when I configure samba authenticate on other machine such as WinNT4.0. But when I have configured samba authenticate on itself (security = user) I received message error "smbd/password.c:pass_check_smb(506) Account for user 'david' was disabled". In this mode I created smbpassword by command line "cat /etc/passwd | mksmbpasswd.sh > /etc/smbpasswd". This is a my smb.conf file. I don't know why don't it work? Although I modified registry on some machines Win95 and WinNT for issue encrypt password Thanks for your support Bye. Tung Tran. -------------- next part -------------- A non-text attachment was scrubbed... Name: not available Type: application/octet-stream Size: 10822 bytes Desc: not available Url : http://lists.samba.org/archive/samba/attachments/19991105/9254ae7e/attachment.obj
The mksmbpasswd.sh command only creates the skeleton for all your users. The passwords cannot be determined from the entries in /etc/password so those fields are set to all 'X'. The man page for the smbpasswd file states in the section describing the Lanman Password Hash "If the hex string is equal to 32 'X' characters then the users account is marked as disabled and the user will not be able to log onto the Samba server." You must set each users password using the smbpasswd program or using the "update encrypted" setting in smb.conf. Check out the smb.conf man page for an explaination of this parameter. -- =====================================================================Herb Lewis Silicon Graphics Technical Marketing 2011 N Shoreline Blvd Network Systems Division Mountain View, CA 94043 herb@sgi.com Tel: 650-933-2177 http://www.sgi.com Fax: 650-932-2177 ======================================================================
Tran.Thach.Tung@QUANTIC.AC.VN
1999-Nov-08 04:24 UTC
Authentication on Linux6.0 that running samba-2.0.3
Hello all, Thank for your answer very much, I was man page for the smbpasswd file but I can't create smbpasswd exactly. Could you help me create it. Below is my configuration. [global] workgroup = QUANTIC server string = Samba Server printcap name = /etc/printcap load printers = yes log file = /var/log/samba/log.%m max log size = 50 security = user encrypt passwords = yes smb passwd file = /usr/local/samba/private/smbpasswd update encrypted = yes passwd program = /usr/bin/passwd %u socket options = TCP_NODELAY os level = 33 preserve case = yes short preserve case = yes default case = lower case sensitive = yes #============================ Share Definitions =============================[homes] comment = Home Directories browseable = no writable = yes # Set public = yes to allow user 'guest account' to print guest ok = no writable = no printable = yes # This one is useful for people to share files [tmp] comment = Temporary file space path = /tmp read only = no public = yes [Doc] comment = Documents path = /usr/doc read only = yes public = yes # A publicly accessible directory, but read only, except for people in # the "staff" group [public] comment = Public Stuff path = /home/samba public = yes writable = yes printable = no ---------- From: Herb Lewis [SMTP:herb@chomps.engr.sgi.com] Sent: Friday, November 05, 1999 11:07 PM To: Tran Thach Tung Cc: Multiple recipients of list SAMBA Subject: Re: Authentication on Linux6.0 that running samba-2.0.3 The mksmbpasswd.sh command only creates the skeleton for all your users. The passwords cannot be determined from the entries in /etc/password so those fields are set to all 'X'. The man page for the smbpasswd file states in the section describing the Lanman Password Hash "If the hex string is equal to 32 'X' characters then the users account is marked as disabled and the user will not be able to log onto the Samba server." You must set each users password using the smbpasswd program or using the "update encrypted" setting in smb.conf. Check out the smb.conf man page for an explaination of this parameter. -- ===================================================================== Herb Lewis Silicon Graphics Technical Marketing 2011 N Shoreline Blvd Network Systems Division Mountain View, CA 94043 herb@sgi.com Tel: 650-933-2177 http://www.sgi.com Fax: 650-932-2177 ======================================================================