samba - Apr 2002 - Windows password caching - NT server vs Samba....(was Simple (?) question )

> -----Original Message-----
> From: Rich Pinder [mailto:rpinder@usc.edu]
> Sent: Monday, April 15, 2002 10:30 AM
> To: samba@lists.samba.org
> Subject: [Samba] Windows password caching - NT server vs Samba....(was
> Simple (?) question )
> 
> 
> I'm still puzzled about what's happening here.
> 
> To recap (full details below) our windows NT client has different
> behavior depending on whether it's hitting an NT server, vs a Samba
> server.
> 
> A user/pw that is entered and accepted when accessing the NT server is
> 'remembered' the next time the same resource is needed.  So the
user
> doesnt get the 'login' prompt.
> 
> But the same user/pw scenario is NOT remembered when trying to access
> the Samba server.
> 
> Note - the user/pw for the samba/NT share is NOT the same user/pw that
> the person uses to log into their own NT client (its NOT using network
> based authentication).
> 
Rich,

A couple of other things to look out for:

In your smb.conf, add an entry for Password Server, and list your
PDC and BDC.  Be sure your Workgroup entry matches the Domain name.

Add the domain users accessing the share to the "smbusers"
file (in the directory your smb.conf is located).

HTH

  Jim

"Van Sickler, Jim" wrote:
> 
> > -----Original Message-----
> > From: Rich Pinder [mailto:rpinder@usc.edu]
> > Sent: Monday, April 15, 2002 10:30 AM
> > To: samba@lists.samba.org
> > Subject: [Samba] Windows password caching - NT server vs Samba....(was
> > Simple (?) question )
> >
> >
> > I'm still puzzled about what's happening here.
> >
> > To recap (full details below) our windows NT client has different
> > behavior depending on whether it's hitting an NT server, vs a
Samba
> > server.
> >
> > A user/pw that is entered and accepted when accessing the NT server is
> > 'remembered' the next time the same resource is needed.  So
the user
> > doesnt get the 'login' prompt.
> >
> > But the same user/pw scenario is NOT remembered when trying to access
> > the Samba server.
> >
> > Note - the user/pw for the samba/NT share is NOT the same user/pw that
> > the person uses to log into their own NT client (its NOT using network
> > based authentication).
> >
> Rich,
> 
> A couple of other things to look out for:
> 
> In your smb.conf, add an entry for Password Server, and list your
> PDC and BDC.  Be sure your Workgroup entry matches the Domain name.
> 
> Add the domain users accessing the share to the "smbusers"
> file (in the directory your smb.conf is located).
> 
Thanks Jim,

I'm running as workgroups, so I dont even bother with PDC / BDC's. 
I've verified that the workgroups line is correct:
  workgroup = TEACHERS

The smbusers file - I thought that had to do with unix user names
mapping differently (which doesnt really apply in this case - the one
user name i'm using is same in unix and samba).  But I added a line - no
effect.

I'll keep still fumbling my way through!

rich

Rich,

  If you aren't using PDC/BDC, then Security = domain is wrong.
It could be: security = share, username map = /etc/dbusers.map,
and your app unix account mapped to everybody in that file
(e.g. sambashare = *).

This is all (mostly ;-) ) guesswork.  Take a look at the
docs - smb.conf(5) has what you're looking for, I think.
Look at the "security" and "username map" sections-I just
noticed that "domain user map" (smbusers) and "username
map" (dbusers.map, or whatever you choose) are used
quite differently.


Jim
> -----Original Message-----
> From: Rich Pinder [mailto:rpinder@usc.edu]
> Sent: Monday, April 15, 2002 12:54 PM
> To: 'samba@lists.samba.org'
> Subject: Re: [Samba] Windows password caching - NT server vs
> Samba....(wasSimple (?) question )
> 
> 
> 
> 
> "Van Sickler, Jim" wrote:
> > 
> > > -----Original Message-----
> > > From: Rich Pinder [mailto:rpinder@usc.edu]
> > > Sent: Monday, April 15, 2002 10:30 AM
> > > To: samba@lists.samba.org
> > > Subject: [Samba] Windows password caching - NT server vs 
> Samba....(was
> > > Simple (?) question )
> > >
> > >
> > > I'm still puzzled about what's happening here.
> > >
> > > To recap (full details below) our windows NT client has different
> > > behavior depending on whether it's hitting an NT server, 
> vs a Samba
> > > server.
> > >
> > > A user/pw that is entered and accepted when accessing the 
> NT server is
> > > 'remembered' the next time the same resource is needed.  
> So the user
> > > doesnt get the 'login' prompt.
> > >
> > > But the same user/pw scenario is NOT remembered when 
> trying to access
> > > the Samba server.
> > >
> > > Note - the user/pw for the samba/NT share is NOT the same 
> user/pw that
> > > the person uses to log into their own NT client (its NOT 
> using network
> > > based authentication).
> > >
> > Rich,
> > 
> > A couple of other things to look out for:
> > 
> > In your smb.conf, add an entry for Password Server, and list your
> > PDC and BDC.  Be sure your Workgroup entry matches the Domain name.
> > 
> > Add the domain users accessing the share to the "smbusers"
> > file (in the directory your smb.conf is located).
> > 
> 
> Thanks Jim,
> 
> I'm running as workgroups, so I dont even bother with PDC / BDC's. 
> I've verified that the workgroups line is correct:
>   workgroup = TEACHERS
> 
> The smbusers file - I thought that had to do with unix user names
> mapping differently (which doesnt really apply in this case - the one
> user name i'm using is same in unix and samba).  But I added 
> a line - no
> effect.
> 
> I'll keep still fumbling my way through!
> 
> rich
> 
> -- 
> To unsubscribe from this list go to the following URL and read the
> instructions:  http://lists.samba.org/mailman/listinfo/samba
>

> -----Original Message-----
> From: Rich Pinder [mailto:rpinder@usc.edu]
> Sent: Monday, April 15, 2002 2:02 PM
> To: 'samba@lists.samba.org'
> Subject: Re: [Samba] Windows password caching - NT server vs
> Samba....(wasSimple (?) question )
> 
> 
> Thanks... (i failed to mention that in the last post - i 
> changed it back
> to security=user to get it workin).
> I think the way i was trying the smbusers file made no sense - i had 
> rpinder = rpinder (no reason for that, eh??)
There is, actually - unix user name = domain user name
even if they're  the same, they should be mapped in
the file;  otherwise it sees it as an unknown (to unix, at least)
user trying to access the server via smb.

Jim
> I'll keep looking in the docs.
> 
> rich
> 
As many docs as there are, it's never enough!!!

Jim