hi.. I have samba 2.2.1a on Mandrake 8.1, 2.4.17. My problem is a user from remote Win2k workstation can't see my shares when he wants to access my PC using my hostname. When accessing using my ip address, it works.. The error message in W2K is 'This user is not authorized to log in from this station' - or something like that.. Here's a part of my config. The same (or almost the same) config works on another linux, so I'm desperate with this one.. Thanks in advance for your suggestions. Michael [global] coding system = ISO-8859-2 client code page = 852 workgroup = XXXXX netbios name = xxxxxxx server string interfaces = 10.10.1.164/24 security = SHARE map to guest = Bad User encrypt passwords = yes smb passwd file = /etc/samba/smbpasswd log level = 3 log file = /var/log/samba/log.%m max log size = 50 socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192 load printers = No printcap name = lpstat logon path = \\%L\Profiles\%U os level = 33 preferred master = False domain master = False printer admin = xxxxxxx printing = cups [doc] comment=doc path=/mnt/d/share/pub/doc/ read only=Yes guest ok=Yes
First of all, if I can you give an advice, upgrade your samba config to 2.2.5 and be sure installing all latests patches on your w2k station ( sp3 now ). In your config file, workgroup must be defined with the same name as in your w2k station. You can also remove logon path. This is only for configuring Samba as a PDC. For the user declaration, it is better, for a security reason, not to use passwords coming from your /etc/passwd file. So use better smbpasswd to create passwords specific to samba. For this, you have to change "security SHARE" with "security = user". and finally, I don't know what this is "map to guest = Bad User" try without this. vincent ----- Original Message ----- From: "m." <michal017@centrum.sk> To: <samba@lists.samba.org> Sent: Wednesday, August 28, 2002 11:16 AM Subject: [Samba] win/linux connect problem> hi.. > I have samba 2.2.1a on Mandrake 8.1, 2.4.17. My problem is a user fromremote Win2k workstation can't see my shares when he wants to access my PC using my hostname. When accessing using my ip address, it works.. The error message in W2K is 'This user is not authorized to log in from this station' - or something like that..> Here's a part of my config. The same (or almost the same) config works onanother linux, so I'm desperate with this one..> Thanks in advance for your suggestions. > Michael > > [global] > coding system = ISO-8859-2 > client code page = 852 > workgroup = XXXXX > netbios name = xxxxxxx > server string > interfaces = 10.10.1.164/24 > security = SHARE > map to guest = Bad User > encrypt passwords = yes > smb passwd file = /etc/samba/smbpasswd > log level = 3 > log file = /var/log/samba/log.%m > max log size = 50 > socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192 > load printers = No > printcap name = lpstat > logon path = \\%L\Profiles\%U > os level = 33 > preferred master = False > domain master = False > printer admin = xxxxxxx > printing = cups > > [doc] > comment=doc > path=/mnt/d/share/pub/doc/ > read only=Yes > guest ok=Yes > -- > To unsubscribe from this list go to the following URL and read the > instructions: http://lists.samba.org/mailman/listinfo/samba >
If you want to allow your w2k clients to acces your linux server through an identification on a w2k PDC server ( so NOT your linux samab server ), you have to put following parameters in your smb.conf file: workgroup = <domain name> security = domain encrypt = yes password server = <w2k PDC server name> Is that configuration mentionned above you'd like to have ??? If yes, you can also add your linux server in the server manager of your w2k server. For the read-only mode, you can set "writable = no" in each share. But this will put this share in read-only for everybody. ----- Original Message ----- From: "m." <michal017@centrum.sk> To: "vincent blondel" <vincent.blondel@chello.be> Sent: Wednesday, August 28, 2002 12:15 PM Subject: Re: [Samba] win/linux connect problem> ok.. I will upgrade samba to 2.2.5.. > can I leave smb.conf the same? > > I set up the workgroup in smb.conf the same as domain on win2k.. is thatok?> > as for the user/share security - I don't want to setup an account forevery user that can access my computer.. I would like to have our domain server (which is win2k server at the moment) to verify the user's domain login/password - is that possible?> or, another option - have each user accessing my shares in read only mode,so I don't need passwords - is that the 'share' mode?> > I removed 'map to guest' > > michael > > On Wed, 28 Aug 2002 11:59:28 +0200 > "vincent blondel" <vincent.blondel@chello.be> wrote: > > > First of all, if I can you give an advice, upgrade your samba config to > > 2.2.5 and be sure installing all latests patches on your w2k station (sp3> > now ). > > > > In your config file, workgroup must be defined with the same name as inyour> > w2k station. You can also remove logon path. This is only forconfiguring> > Samba as a PDC. > > > > For the user declaration, it is better, for a security reason, not touse> > passwords coming from your /etc/passwd file. So use better smbpasswd to > > create passwords specific to samba. For this, you have to change"security > > SHARE" with "security = user".> > > > and finally, I don't know what this is "map to guest = Bad User" trywithout> > this. > > > > vincent > > > > ----- Original Message ----- > > From: "m." <michal017@centrum.sk> > > To: <samba@lists.samba.org> > > Sent: Wednesday, August 28, 2002 11:16 AM > > Subject: [Samba] win/linux connect problem > > > > > > > hi.. > > > I have samba 2.2.1a on Mandrake 8.1, 2.4.17. My problem is a userfrom> > remote Win2k workstation can't see my shares when he wants to access myPC> > using my hostname. When accessing using my ip address, it works.. The > > error message in W2K is 'This user is not authorized to log in from this > > station' - or something like that.. > > > Here's a part of my config. The same (or almost the same) configworks on> > another linux, so I'm desperate with this one.. > > > Thanks in advance for your suggestions. > > > Michael > > > > > > [global] > > > coding system = ISO-8859-2 > > > client code page = 852 > > > workgroup = XXXXX > > > netbios name = xxxxxxx > > > server string > > > interfaces = 10.10.1.164/24 > > > security = SHARE > > > map to guest = Bad User > > > encrypt passwords = yes > > > smb passwd file = /etc/samba/smbpasswd > > > log level = 3 > > > log file = /var/log/samba/log.%m > > > max log size = 50 > > > socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192 > > > load printers = No > > > printcap name = lpstat > > > logon path = \\%L\Profiles\%U > > > os level = 33 > > > preferred master = False > > > domain master = False > > > printer admin = xxxxxxx > > > printing = cups > > > > > > [doc] > > > comment=doc > > > path=/mnt/d/share/pub/doc/ > > > read only=Yes > > > guest ok=Yes > > > -- > > > To unsubscribe from this list go to the following URL and read the > > > instructions: http://lists.samba.org/mailman/listinfo/samba > > > > > > > > > -- > > To unsubscribe from this list go to the following URL and read the > > instructions: http://lists.samba.org/mailman/listinfo/samba > > > >
m., Add: wins support = yes wins server = (ip of samba server) to smb.conf. Make sure nmbd is running: e.g. type '/etc/init.d/[smb or samba or samba.server or whatever your distro uses] restart' as root (no quotes). add wins server ip to DHCP data on DHCP server so clients will automatically get the wins server ip address. Clients will need to restart or release/renew their ip's. For non-DHCP clients add it to the TCP/IP properties->advanced->wins tab. The problem here is (lack of) NetBIOS name resolution preventing the Windows boxen from finding the samba server by name. HTH -- Christopher Barry Manager of Information Sysytems InfiniCon Systems http://www.infiniconsys.com office:610.233.ISIS direct:610.233.4870 cell:267.879.8321 -----Original Message----- From: m. [mailto:michal017@centrum.sk] Sent: Wednesday, August 28, 2002 11:28 AM To: samba@lists.samba.org Subject: Re: [Samba] win/linux connect problem For security = share the problem was root's TMPDIR set to /root/tmp.. unsetting this variable had my samba workin in security = share but the problem with accessing my samba from win workstation using hostname persists.. (acess by IP works..) On Wed, 28 Aug 2002 16:32:38 +0200 "vincent blondel" <vincent.blondel@chello.be> wrote:> following this article ( > http://www.mandrakeuser.org/docs/connect/csamba5.html ) , it seems samba, as > member of a Windows domain, only search for the password of the user and not > the user itself. I think you will have to create user entries in your linux > box. > > ----- Original Message ----- > From: "m." <michal017@centrum.sk> > To: <samba@lists.samba.org> > Sent: Wednesday, August 28, 2002 3:11 PM > Subject: Re: [Samba] win/linux connect problem > > > > Now I'm trying to make security = share work.. > > I get this in my log when trying to do 'smbclient -L myhost -U guest' > > > > [2002/08/28 15:08:47, 3] smbd/sec_ctx.c:set_sec_ctx(313) > > setting sec ctx (99, 99) - sec_ctx_stack_ndx = 0 > > [2002/08/28 15:08:47, 3] smbd/sec_ctx.c:set_sec_ctx(319) > > 1 user groups: > > 99 > > [2002/08/28 15:08:47, 5] smbd/uid.c:change_to_user(201) > > change_to_user uid=(0,99) gid=(0,99) > > [2002/08/28 15:08:47, 3] smbd/vfs.c:vfs_ChDir(568) > > vfs_ChDir to /root/tmp > > [2002/08/28 15:08:47, 0] smbd/service.c:make_connection(612) > > liptak (10.10.1.164) Can't change directory to /root/tmp (Permission > denied) > > [2002/08/28 15:08:47, 3] smbd/sec_ctx.c:set_sec_ctx(313) > > setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 > > [2002/08/28 15:08:47, 5] smbd/uid.c:change_to_root_user(216) > > change_to_root_user: now uid=(0,0) gid=(0,0) > > [2002/08/28 15:08:47, 3] smbd/connection.c:yield_connection(48) > > Yielding connection to IPC$ > > [2002/08/28 15:08:47, 3] smbd/error.c:error_packet(91) > > error string = Permission denied > > [2002/08/28 15:08:47, 3] smbd/error.c:error_packet(106) > > error packet at smbd/reply.c(165) cmd=117 (SMBtconX) > NT_STATUS_BAD_NETWORK_NAME > > > > > > On Wed, 28 Aug 2002 11:59:28 +0200 > > "vincent blondel" <vincent.blondel@chello.be> wrote: > > > > > First of all, if I can you give an advice, upgrade your samba config to > > > 2.2.5 and be sure installing all latests patches on your w2k station ( > sp3 > > > now ). > > > > > > In your config file, workgroup must be defined with the same name as in > your > > > w2k station. You can also remove logon path. This is only for > configuring > > > Samba as a PDC. > > > > > > For the user declaration, it is better, for a security reason, not to > use > > > passwords coming from your /etc/passwd file. So use better smbpasswd to > > > create passwords specific to samba. For this, you have to change > "security > > > SHARE" with "security = user". > > > > > > and finally, I don't know what this is "map to guest = Bad User" try > without > > > this. > > > > > > vincent > > > > > > ----- Original Message ----- > > > From: "m." <michal017@centrum.sk> > > > To: <samba@lists.samba.org> > > > Sent: Wednesday, August 28, 2002 11:16 AM > > > Subject: [Samba] win/linux connect problem > > > > > > > > > > hi.. > > > > I have samba 2.2.1a on Mandrake 8.1, 2.4.17. My problem is a user > from > > > remote Win2k workstation can't see my shares when he wants to access my > PC > > > using my hostname. When accessing using my ip address, it works.. The > > > error message in W2K is 'This user is not authorized to log in from this > > > station' - or something like that.. > > > > Here's a part of my config. The same (or almost the same) config > works on > > > another linux, so I'm desperate with this one.. > > > > Thanks in advance for your suggestions. > > > > Michael > > > > > > > > [global] > > > > coding system = ISO-8859-2 > > > > client code page = 852 > > > > workgroup = XXXXX > > > > netbios name = xxxxxxx > > > > server string > > > > interfaces = 10.10.1.164/24 > > > > security = SHARE > > > > map to guest = Bad User > > > > encrypt passwords = yes > > > > smb passwd file = /etc/samba/smbpasswd > > > > log level = 3 > > > > log file = /var/log/samba/log.%m > > > > max log size = 50 > > > > socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192 > > > > load printers = No > > > > printcap name = lpstat > > > > logon path = \\%L\Profiles\%U > > > > os level = 33 > > > > preferred master = False > > > > domain master = False > > > > printer admin = xxxxxxx > > > > printing = cups > > > > > > > > [doc] > > > > comment=doc > > > > path=/mnt/d/share/pub/doc/ > > > > read only=Yes > > > > guest ok=Yes > > > > -- > > > > To unsubscribe from this list go to the following URL and read the > > > > instructions: http://lists.samba.org/mailman/listinfo/samba > > > > > > > > > > > > > -- > > > To unsubscribe from this list go to the following URL and read the > > > instructions: http://lists.samba.org/mailman/listinfo/samba > > > > > > > > -- > > To unsubscribe from this list go to the following URL and read the > > instructions: http://lists.samba.org/mailman/listinfo/samba > > > -- > To unsubscribe from this list go to the following URL and read the > instructions: http://lists.samba.org/mailman/listinfo/samba > >-- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba