Has anyone tried using Windows 2000 Professional with Samba? I'm
checking it out now, and when I try to connect to a share, I get an
error message similiar to the one you get with Win98 and NT4 with SP3+
with encrypted passwords.
Does anyone know the equivelant registry path to set plain text passwords? The
NT4 path doesn't seem to exist:
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\rdr\parameters
Also, is the key still EnablePlainTextPassword ???
Thanks.
Tim
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Timothy Brennan
.---. .----------- System Administration
/ \ __ / ------ Tim.Brennan@coat.com
/ / \( )/ -----
////// ' \/ ` --- Burlington Coat Factory
//// / // : : --- 1830 Route 130 North
// / / /` '-- Burlington, NJ 08016
// //..\\
----UU----UU-------------------------------------------------------
'//||\\` Ph: (609) 387-7800 x1666 Fax: (609) 387-2764
''``
Tim.Brennan@coat.com wrote:> > Has anyone tried using Windows 2000 Professional with Samba? I'm > checking it out now, and when I try to connect to a share, I get an > error message similiar to the one you get with Win98 and NT4 with SP3+ > with encrypted passwords. > > Does anyone know the equivelant registry path to set plain text passwords?[cut] There's a question I have whenever this comes up: why not just enable encryption on the Samba server side? What have I missed?
Actually Samba does deal with encrypted passwords. I don't know what
version it first appeared in but I am running 2.0.6 on a Samba server that is a
member of an NT domain, and uses the NT PDC for password validation.
To enable encryption and domain validation you need the following in the
[Global] section of your smb.conf file:
security = DOMAIN
encrypt passwords = Yes
password server = <domain PDC server name>
users may need unix logins and passwords in some situations. If you find you
need that setup, be sure you have UNIX logins and passwords that match NT logins
and passwords ( at least that is what works for me). If you are using long NT
logins, check out the 'username map' feature that allows you to map
domain names to UNIX user names. If you do use this feature, be careful of name
case. The Win world sometimes uses all upper case user names.
-------------------------------------------------------------------------------------------------------------
In my house I am king, and my law is, "whatever my wife says shall be
done."
Daniel R. Malcolm
dmalcolm@hiwaay.net
Dan.Malcolm@gets-1000.com
-------------- next part --------------
HTML attachment scrubbed and removed
Peter Samuelson <peter@cadcamlab.org>:>To make this solution complete, though, it would have to be symmetric, >i.e. /bin/passwd or /usr/sbin/rpc.yppasswdd would have to include a >similar hook, so that when a luser changes his password from Unix it >propagages to the smbpasswd file as well. I don't know if *this* has >been done or not, although one can imagine that the replacements would >not be hard to write. Note also that you need to avoid hook loops....Or you could simply write some wrapper for /bin/passwd that reads your old and new passwords and then calls passwd and smbpasswd in turn. You call it /usr/local/bin/passwd (provided that that's in the path before wherever passwd is located) and that's it. No loops, but no fiddling with code either (ack. as: The Unix Way :-) Cheerio, Stefan (Sorry for posting this so late but I don't find the time to read the list regularly) -- STEFAN KNOCHE__________________________________ ___PSK___ PSK Onkel-Tom-Str. 55 - Beratung ==========skn@psk.de D-14169 Berlin 37 - Planung # # # # # # ..!eunetde!psk!skn +49-30-814 999 60 - Betreuung B E R L I N _________________________________________FAX 61____________________________ ______Opinions stated herein are mine but not necessarily meaningful_______
I have a machine with linux redhat 7.0 with samba running on it. I have tried to get file shares working with my win2k machines and I am having trouble. The linux machine is showing up in the my network places and I want to turn security off so that no user is prompted for a password and all file shares are free and open. My question, is there a quick and dirty way to turn off security for the samba shares. I have tried to use swat to configure the security and I am having trouble getting it to work for me . If you have an easy way of making it happen please let me no or if you no where I can find online a step by step instruction to setting up file shares and security with win2k machines please reply. Thankyou for your help.
You should read the book.
This works for me, but I have a trusted internal network:
[global]
netbios name = JHAMMER6
server string = Samba %v Your Server
security = SHARE <-----------------Note
log level = 1
max log size = 50
guest account = ftp <--------You will need this
read only = No <--- Not sure what this does but use it
guest ok = Yes <-----------The important item for security
hosts allow = 192.168. 127. <---You can restrict hosts here
veto files = /*.eml/*.nws/riched20.dll/ <--------worm files
veto files = /*.{*}/ <---Worm files
[public]
comment = Root directory
path = /
create mask = 0766
On Mon, Sep 24, 2001 at 01:53:37PM -0700, Jae Mercado
wrote:> I have a machine with linux redhat 7.0 with samba running on it. I have
> tried to get file shares working with my win2k machines and I am having
> trouble.
> The linux machine is showing up in the my network places and I want to turn
> security off so that no user is prompted for a password and all file shares
> are free and open. My question, is there a quick and dirty way to turn off
> security for the samba shares.
> I have tried to use swat to configure the security and I am having trouble
> getting it to work for me .
>
> If you have an easy way of making it happen please let me no or if you no
> where I can find online a step by step instruction to setting up file
> shares and
> security with win2k machines please reply.
>
> Thankyou for your help.
>
>
>
>
>
>
> --
> To unsubscribe from this list go to the following URL and read the
> instructions: http://lists.samba.org/mailman/listinfo/samba
Hello sambas, some days ago I configured a samba server(2.2.4) and it works fine Now i cannot connect to it from my workstation(win2k) by using samba server netbios name. but i can connetc using it IP addres. ping to samba server by it netbios name work, so it is not DNS problem. which is problem?? -- Best regards, Koriun mailto:koriun@ipia.sci.am
Hello Jason, Thanks for responds :) I think i havenot crossing subnets. here we have some(4-5)w2k workstation and one w2k server(with PCD , which is not in use) and one sun station as inet server(mail, proxy, others) All machines are in same network and in same cable. all machines use DNS and now one WINS. But Samba server netBios name is not its DNS name.(? problem is from here) I set on my workstation wins to samba and all go ok (?) but I still dont understand whats problem? (others workstations works without wins) Monday, May 20, 2002, 4:37:45 PM, you wrote: JS> Are you crossing subnets? If so, you might need to use WINS. JS> Cheers, JS> Jason JS> At 02:12 PM 5/20/2002 +0400, you wrote:>>Hello sambas, >> >>some days ago I configured a samba server(2.2.4) >>and it works fine >> >>Now i cannot connect to it from my workstation(win2k) >>by using samba server netbios name. but i can connetc using >>it IP addres. >> >>ping to samba server by it netbios name work, so it is not >>DNS problem. >> >>which is problem?? >> >>-- >>Best regards, >> Koriun mailto:koriun@ipia.sci.am >> >> >>-- >>To unsubscribe from this list go to the following URL and read the >>instructions: http://lists.samba.org/mailman/listinfo/sambaJS> Jason Stewart JS> Systems Administrator/Programmer JS> Right to Life of Michigan JS> Tel: (616)532-2300 JS> Fax: (616)532-3461 JS> To find out where Michigan Gubernatorial Candidate Jennifer Granholm really JS> stands, please visit http://www.granholmgarble.com/ -- Best regards, Koriun mailto:koriun@ipia.sci.am
I'm having the same problem. One day these Win2K machines just stopped being able to access the Samba server. If you find a solution let us all know. I've been working on this one for the last week myself. Paul -----Original Message----- From: Koriun A. Margarian [mailto:koriun@ipia.sci.am] Sent: Thursday, May 20, 1999 8:23 AM To: Jason Stewart Cc: samba@lists.samba.org Subject: Re[2]: [Samba] Win2k and Samba Hello Jason, Thanks for responds :) I think i havenot crossing subnets. here we have some(4-5)w2k workstation and one w2k server(with PCD , which is not in use) and one sun station as inet server(mail, proxy, others) All machines are in same network and in same cable. all machines use DNS and now one WINS. But Samba server netBios name is not its DNS name.(? problem is from here) I set on my workstation wins to samba and all go ok (?) but I still dont understand whats problem? (others workstations works without wins) Monday, May 20, 2002, 4:37:45 PM, you wrote: JS> Are you crossing subnets? If so, you might need to use WINS. JS> Cheers, JS> Jason JS> At 02:12 PM 5/20/2002 +0400, you wrote:>>Hello sambas, >> >>some days ago I configured a samba server(2.2.4) >>and it works fine >> >>Now i cannot connect to it from my workstation(win2k) >>by using samba server netbios name. but i can connetc using >>it IP addres. >> >>ping to samba server by it netbios name work, so it is not >>DNS problem. >> >>which is problem?? >> >>-- >>Best regards, >> Koriun mailto:koriun@ipia.sci.am >> >> >>-- >>To unsubscribe from this list go to the following URL and read the >>instructions: http://lists.samba.org/mailman/listinfo/sambaJS> Jason Stewart JS> Systems Administrator/Programmer JS> Right to Life of Michigan JS> Tel: (616)532-2300 JS> Fax: (616)532-3461 JS> To find out where Michigan Gubernatorial Candidate Jennifer Granholm really JS> stands, please visit http://www.granholmgarble.com/ -- Best regards, Koriun mailto:koriun@ipia.sci.am -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Hi, I've been trying to configure samba (on RH 7.3 with the samba-2.2.3a-6 rpm). I am able to connect to the linux box from win2k and I am able to copy files but it acts really strange. For example, sometimes after I copy a file from win2k to linux i get a message that says "path to deep" sometimes I get a differnt message or it will simply "lock-up" for a little while. Also, it takes too long to copy files. The two computers are on the same 4-port switch. I saw that there was a setting for samba called "large readwrite", I set this to Yes. But it did not improve things much. Is there something else I should try? Thanks, Al _________________________________________________________________ MSN 8 with e-mail virus protection service: 2 months FREE* http://join.msn.com/?page=features/virus
Kurt,
Below I've pasted my log.
The first few entries are on trying to copy a file from win2k to the linux
share.
The last few entries are on trying to delete a file on the linux share.
In addition to the "path to deep" error I've been getting:
Cannot delete [FILE NAME]: The specified network name is no longer
available.
Cannot copy [FILE NAME]: The specified network name is no longer available.
(This happens AFTER the copy is completed and copied sucessfully. i.e. the
copy action worked I just get that spurious error message)
Following the log is my smb.conf file.
As you can see from the conf file the path to the linux share is
"/ark"
and I'm copying from the win2k desktop to that linux share so the path is:
"C:\Documents and Settings\Administrator\Desktop\"
I know the "/ark" path is not deep and I really don't thing the
path to the
desktop is that deep either.
Thanks for your help!!
Al Bean
---------------------------
[2003/02/23 08:45:25, 0] lib/util_sock.c:read_data(436)
read_data: read failure for 19168. Error = Connection reset by peer
[2003/02/23 08:52:57, 0] lib/util_sock.c:read_data(436)
read_data: read failure for 29388. Error = Connection reset by peer
[2003/02/23 09:11:06, 0] lib/util_sock.c:read_data(436)
read_data: read failure for 49828. Error = Interrupted system call
[2003/02/23 09:14:09, 0] smbd/oplock.c:request_oplock_break(981)
request_oplock_break: no response received to oplock break request to pid
968 on port 1029 for dev = 303, inode = 140233, fi
le_id = 2
[2003/02/23 09:14:41, 0] smbd/oplock.c:request_oplock_break(981)
request_oplock_break: no response received to oplock break request to pid
968 on port 1029 for dev = 303, inode = 140233, fi
le_id = 2
[2003/02/23 09:15:13, 0] smbd/oplock.c:request_oplock_break(981)
request_oplock_break: no response received to oplock break request to pid
968 on port 1029 for dev = 303, inode = 140233, fi
le_id = 2
[2003/02/23 09:15:45, 0] smbd/oplock.c:request_oplock_break(981)
request_oplock_break: no response received to oplock break request to pid
968 on port 1029 for dev = 303, inode = 140233, fi
le_id = 2
[2003/02/23 09:16:17, 0] smbd/oplock.c:request_oplock_break(981)
request_oplock_break: no response received to oplock break request to pid
968 on port 1029 for dev = 303, inode = 140233, fi
le_id = 2
[2003/02/23 09:16:28, 0] smbd/oplock.c:request_oplock_break(998)
request_oplock_break: error in response received to oplock break request
to pid 968 on port 1029 for dev = 303, inode = 1402
33, file_id = 2
Error was (Interrupted system call).
[2003/02/23 09:16:28, 0] smbd/open.c:check_file_sharing(1283)
check_file_sharing: FAILED when breaking oplock (3) on file
.//sambapdf.zip, dev = 303, inode = 140233
[2003/02/23 09:17:05, 0] smbd/oplock.c:request_oplock_break(981)
request_oplock_break: no response received to oplock break request to pid
968 on port 1029 for dev = 303, inode = 140233, fi
le_id = 2
[2003/02/23 09:17:37, 0] smbd/oplock.c:request_oplock_break(981)
request_oplock_break: no response received to oplock break request to pid
968 on port 1029 for dev = 303, inode = 140233, fi
le_id = 2
---------------------------
# Samba config file created using SWAT
# from 192.168.0.100 (192.168.0.100)
# Date: 2003/02/22 22:57:11
# Global parameters
[global]
netbios name = ACER
server string = Test
encrypt passwords = Yes
obey pam restrictions = Yes
pam password change = Yes
passwd program = /usr/bin/passwd %u
passwd chat = *New*password* %n\n *Retype*new*password* %n\n
*passwd:*all*authentication*tokens*updated*successfully*
unix password sync = Yes
log file = /var/log/samba/%m.log
max log size = 0
large readwrite = Yes
socket options = TCP_NODELAY IPTOS_LOWDELAY SO_SNDBUF=8192
SO_RCVBUF=8192
local master = No
dns proxy = No
remote announce = 192.168.0.255
remote browse sync = 192.168.0.255
hosts allow = 192.168.0. 127.
case sensitive = Yes
[ark]
comment = LnxShr
path = /ark
valid users = albean
read only = No
[printers]
comment = All Printers
path = /var/spool/samba
printable = Yes
browseable = No
>From: Kurt Weiss <input.maillists@kwnet.at>
>To: Al Bean <albean84@hotmail.com>
>CC: samba@lists.samba.org
>Subject: Re: [Samba] Win2k and Samba
>Date: Sun, 23 Feb 2003 09:11:49 +0100
>
>
>
>Al Bean schrieb:
>>Hi,
>>
>>I've been trying to configure samba (on RH 7.3 with the
samba-2.2.3a-6
>>rpm). I am able to connect to the linux box from win2k and I am able to
>>copy files but it acts really strange. For example, sometimes after I
>>copy a file from win2k to linux i get a message that says "path to
deep"
>
>"path to deep" we get, when the path ist to deep :-)
>e.g. here:
>u are using: /usr/local/samba/data/windows/share1/ as path for a share.
>windows has:
>\\<server>\this\is\a\typical\path\that\seems\to\be\created\by\any\windows\application\or\an\user\with\many\paths\ad\so\on\...
>so amba has to create:
>/usr/local/samba/data/windows/share1/this/is/a/typical/...
>this may be to long...
>can u check this?
>
>>sometimes I get a differnt message or it will simply "lock-up"
for a
>>little while.
>
>we had many situations, in which we got a "lock up" on w2k/98/xp,
but
>always a different reason.
>
>so please post smb.conf and the relevant parts of the logfile.
>if nothing in the log is seen, please increase the loglevel.
_________________________________________________________________
STOP MORE SPAM with the new MSN 8 and get 2 months FREE*
http://join.msn.com/?page=features/junkmail
Hi Kurt, I set "socket options" to the default by removing it and I set case case sensitive = No. But that did not help or change the log output. I also changed the NICs in both boxes just to see if that was the problem but that did not help. :( I'm wondering, can sombody tell me how long it should take to transfer a 10MB file from win2k (1.5GHz Pentium4, 100 BaseT NIC) to a Linux share (400MHz Pentium2, 100 BaseT Nic) where the two boxes are connected by a 100 BaseT switch? Also, (if possible) could sombody post thier smb.conf where they are using a Linux box as a simple file server in a Windows environment (where the linux box is NOT a PDC)? That would really help to see if I'm doing something wrong. Thanks!>From: Kurt Weiss <input.maillists@kwnet.at> >To: Al Bean <albean84@hotmail.com> >CC: samba@lists.samba.org >Subject: Re: [Samba] Win2k and Samba >Date: Mon, 24 Feb 2003 08:18:56 +0100 > >hi again! > >Al Bean schrieb: > >> >>The first few entries are on trying to copy a file from win2k to the linux >>share. >>The last few entries are on trying to delete a file on the linux share. >> > > >>As you can see from the conf file the path to the linux share is "/ark" >>and I'm copying from the win2k desktop to that linux share so the path is: >>"C:\Documents and Settings\Administrator\Desktop\" >>I know the "/ark" path is not deep and I really don't thing the path to >>the desktop is that deep either. > >ok - i believe - it's not that i thought ;-) > >>--------------------------- >>[2003/02/23 08:45:25, 0] lib/util_sock.c:read_data(436) >> read_data: read failure for 19168. Error = Connection reset by peer >>[2003/02/23 08:52:57, 0] lib/util_sock.c:read_data(436) >> read_data: read failure for 29388. Error = Connection reset by peer >>[2003/02/23 09:11:06, 0] lib/util_sock.c:read_data(436) >> read_data: read failure for 49828. Error = Interrupted system call >>[2003/02/23 09:14:09, 0] smbd/oplock.c:request_oplock_break(981) >> request_oplock_break: no response received to oplock break request to >>pid 968 on port 1029 for dev = 303, inode = 140233, fi >>le_id = 2 >>[2003/02/23 09:14:41, 0] smbd/oplock.c:request_oplock_break(981) >> request_oplock_break: no response received to oplock break request to >>pid 968 on port 1029 for dev = 303, inode = 140233, fi >>le_id = 2 >>[2003/02/23 09:15:13, 0] smbd/oplock.c:request_oplock_break(981) >> request_oplock_break: no response received to oplock break request to >>pid 968 on port 1029 for dev = 303, inode = 140233, fi >>le_id = 2 > >what's that? - seems, something is running bad in network communication! >i'm looking for the errno. (436) -stay tuned > >> encrypt passwords = Yes >> obey pam restrictions = Yes > > pam password change = Yes > >man smb.conf: >"Note that samba always ignores PAM for authentication in case of "encrypt >password = yes" >(samba 2.2.4) > > >> socket options = TCP_NODELAY IPTOS_LOWDELAY SO_SNDBUF=8192 >>SO_RCVBUF=8192 > >only an idea: won't u play with this to see, which effect it has to your >error log? > >> local master = No >> dns proxy = No >> remote announce = 192.168.0.255 >> remote browse sync = 192.168.0.255 >> hosts allow = 192.168.0. 127. >> case sensitive = Yes > >i think, that's dangerous: windows mostly changes case! - try 'no' > > >so i hope it helped >gk_________________________________________________________________ MSN 8 with e-mail virus protection service: 2 months FREE* http://join.msn.com/?page=features/virus