Derrick MacPherson
2002-Apr-09 15:35 UTC
[Samba] W2K server, do you have to use a smbpasswd file?
I have gone in circles with this to the point I'm now confused... so
sorry if this has been answered or is somewhere in the docs, cause I
have definetly missed it. I have set samba up numerous times for nt4
server, this is the first w2k.
I have a windows 2000 server, several mixed platform clients. I can't
seem to get the unix machines to authenticate to the w2k server, unless
I add an entry for the user into smbpasswd file. is this the only way it
can be done? The machine added to the domain fine. I include the output
of some commands that seem relevant:
./smbclient -L localhost -N
INFO: Debug class all level = 3 (pid 3330 from pid 3330)
added interface ip=192.168.150.242 bcast=192.168.150.255
nmask=255.255.255.128
added interface ip=192.168.150.11 bcast=192.168.150.127
nmask=255.255.255.128
Anonymous login successful
Domain=[MERCURYNET] OS=[Unix] Server=[Samba 2.2.2]
Sharename Type Comment
--------- ---- -------
tmp Disk Temporary file space
othertemp Disk Samba 2.2.2
IPC$ IPC IPC Service (Samba 2.2.2)
ADMIN$ Disk IPC Service (Samba 2.2.2)
Server Comment
--------- -------
MEGALITH Samba 2.2.2
THANATOS
Workgroup Master
--------- -------
MERCURYNET
There is no Master, that seems wrong to me. It should be thanatos
when I run the same command to the w2k server (thanatos)
./smbclient -L thanatos -N
INFO: Debug class all level = 3 (pid 3338 from pid 3338)
added interface ip=192.168.150.242 bcast=192.168.150.255
nmask=255.255.255.128
added interface ip=192.168.150.11 bcast=192.168.150.127
nmask=255.255.255.128
Password:
Anonymous login successful
Domain=[MERCURYNET] OS=[Windows 5.0] Server=[Windows 2000 LAN Manager]
Sharename Type Comment
--------- ---- -------
Error returning browse list: ERRDOS - ERRnoaccess (Access denied.)
Server Comment
--------- -------
AIGER
ARES
ARTEMIS
ATUM
BISHAMON
CERVELO
IZANAMI
MEGALITH Samba 2.2.2
MP3 Samba 2.2.2
ORACLE
ORCUS
OSIRUS
PAX
RA
REALITY
RETAS5
RETAS6
RETAS7
RETAS8
SOL
THANATOS
THOR
VELOCITY
Workgroup Master
--------- -------
MERCURYNET THANATOS
my smb.conf:
[global]
workgroup = MERCURYNET
security = DOMAIN
encrypt passwords = Yes
password server = thanatos
passwd program = /usr/bin/passwd %u
passwd chat = *ew*password:* %n\n *e-enter*new*password:* %n\n
log level = 3
max log size = 50
name resolve order = host lmhosts bcast wins
os level = 0
preferred master = False
local master = No
domain master = False
comment = Samba %v
print command = /usr/samba/bin/sambalp %p %s %U %m
lppause command =
lpresume command =
[homes]
comment = Home Directories
read only = No
browseable = No
[othertemp]
path = /usr/tmp
Ahmad Yahya
2002-Apr-09 20:39 UTC
[Samba] W2K server, do you have to use a smbpasswd file?
From: "Derrick MacPherson" <derrick@multimedia.edu>> I have gone in circles with this to the point I'm now confused... so > sorry if this has been answered or is somewhere in the docs, cause I > have definetly missed it. I have set samba up numerous times for nt4 > server, this is the first w2k. > > I have a windows 2000 server, several mixed platform clients. I can't > seem to get the unix machines to authenticate to the w2k server, unless > I add an entry for the user into smbpasswd file. is this the only way it > can be done? The machine added to the domain fine. I include the output > of some commands that seem relevant: > > ./smbclient -L localhost -N > INFO: Debug class all level = 3 (pid 3330 from pid 3330) > added interface ip=192.168.150.242 bcast=192.168.150.255 > nmask=255.255.255.128 > added interface ip=192.168.150.11 bcast=192.168.150.127 > nmask=255.255.255.128 > Anonymous login successful > Domain=[MERCURYNET] OS=[Unix] Server=[Samba 2.2.2] > > Sharename Type Comment > --------- ---- ------- > tmp Disk Temporary file space > othertemp Disk Samba 2.2.2 > IPC$ IPC IPC Service (Samba 2.2.2) > ADMIN$ Disk IPC Service (Samba 2.2.2) > > Server Comment > --------- ------- > MEGALITH Samba 2.2.2 > THANATOS > > Workgroup Master > --------- ------- > MERCURYNET > > There is no Master, that seems wrong to me. It should be thanatos >Probably this something connecting with wins. I have no idea.> when I run the same command to the w2k server (thanatos) > > > ./smbclient -L thanatos -N > INFO: Debug class all level = 3 (pid 3338 from pid 3338) > added interface ip=192.168.150.242 bcast=192.168.150.255 > nmask=255.255.255.128 > added interface ip=192.168.150.11 bcast=192.168.150.127 > nmask=255.255.255.128 > Password: > Anonymous login successful > Domain=[MERCURYNET] OS=[Windows 5.0] Server=[Windows 2000 LAN Manager] > > Sharename Type Comment > --------- ---- ------- > Error returning browse list: ERRDOS - ERRnoaccess (Access denied.) >This is normal message, afaik, cause w2k doesn't let the anonymous login. Login as a user of w2k. ./smbclient -L thanatos -U username This login forces you to entry the password.> Server Comment > --------- ------- > AIGER > ARES > ARTEMIS > ATUM > BISHAMON > CERVELO > IZANAMI > MEGALITH Samba 2.2.2 > MP3 Samba 2.2.2 > ORACLE > ORCUS > OSIRUS > PAX > RA > REALITY > RETAS5 > RETAS6 > RETAS7 > RETAS8 > SOL > THANATOS > THOR > VELOCITY > > Workgroup Master > --------- ------- > MERCURYNET THANATOS > > > my smb.conf: > > [global] > workgroup = MERCURYNET > security = DOMAINYou must run 'winbindd' daemon to use with security = domain. Make adjustment to your 'etc/pam.d/login' that there's a doc how to do it. hth Yaya