Running Samba 2.2.6 on RedHat 7.2 in a Microsoft NT4 Domain, trying to
create or copy a text file to a share from a MS Windows 2000 Professional
workstation (client2k) gives 'Access denied'
Reading the log file (level 3) for samba.client2k (not an activity I feel
much comfort in doing correctly) it looks like I am being recognized as a
'guest user' which is a problem but for testing purposes I have changed
smb.conf for this share to allow guest access, which it does not seem to.
I am also attempting to achieve a successful integration with winbind as I
don't want to manage users on two platforms.
wbinfo -u gives a list of domain users
wbinfo -g gives a list of domain groups
wbinfo -t gives 'secret is good'
Here is my smb.conf:
# Samba config file created using SWAT
# from UNKNOWN (127.0.0.1)
# Date: 2002/10/23 15:08:25
# Global parameters
[global]
workgroup = GPSC
netbios name = WILLIAM
server string = GPSC Application Samba Server
interfaces = lo eth0
bind interfaces only = Yes
security = DOMAIN
encrypt passwords = Yes
map to guest = Bad User
password server = *
log level = 3
log file = /var/log/samba.%m
max log size = 50
keepalive = 30
os level = 2
local master = No
dns proxy = No
wins server = 192.168.1.2
kernel oplocks = No
winbind uid = 10000-20000
winbind gid = 10000-20000
template homedir = /home/win/%D/%U
winbind separator = +
invalid users = root
printer admin = @DOM+PRINTADMIN
hosts allow = 127. 192.168.
print command lpq command lprm command
[homes]
comment = Home Directories
read only = No
create mask = 0750
browseable = No
[Apps]
comment = Where network apps are loaded
path = /home/apps
guest ok = Yes
Kind regards,
Steven S. Macfarlane
tel 712.204.8875
You are being treated as a guest user because "map to guest = Bad
User"
Bad User - Means user logins with an invalid
password are rejected, unless the username does
not exist, in which case it is treated as a guest
login and mapped into the guest account.
This means that your login name or password is not being recognised and you
are being treated as the guest user - default is 'nobody'. If nobody
does
not exist in your domain then you need to create a user called this.
However, that will only get you as far as guest shares - and I suppose you
need to address the actual matter of not being recognised yourself. Are the
permissions on directory /home/apps 770 with group GPSC+"domain users"
or
something similar?
If so then see what you get if you do a 'getent passwd' or 'getent
group'.
HTH a bit,
Noel
looks like I am being recognized as a 'guest user' which is a problem
but
for testing purposes I have changed smb.conf for this share to allow guest
access, which it does not seem to.
I am also attempting to achieve a successful integration with winbind as I
don't want to manage users on two platforms.
wbinfo -u gives a list of domain users
wbinfo -g gives a list of domain groups
wbinfo -t gives 'secret is good'
Here is my smb.conf:
# Samba config file created using SWAT
# from UNKNOWN (127.0.0.1)
# Date: 2002/10/23 15:08:25
# Global parameters
[global]
workgroup = GPSC
netbios name = WILLIAM
server string = GPSC Application Samba Server
interfaces = lo eth0
bind interfaces only = Yes
security = DOMAIN
encrypt passwords = Yes
map to guest = Bad User
password server = *
log level = 3
log file = /var/log/samba.%m
max log size = 50
keepalive = 30
os level = 2
local master = No
dns proxy = No
wins server = 192.168.1.2
kernel oplocks = No
winbind uid = 10000-20000
winbind gid = 10000-20000
template homedir = /home/win/%D/%U
winbind separator = +
invalid users = root
printer admin = @DOM+PRINTADMIN
hosts allow = 127. 192.168.
print command lpq command lprm command
[homes]
comment = Home Directories
read only = No
create mask = 0750
browseable = No
[Apps]
comment = Where network apps are loaded
path = /home/apps
guest ok = Yes
Kind regards,
Steven S. Macfarlane
tel 712.204.8875
--
To unsubscribe from this list go to the following URL and read the
instructions: http://lists.samba.org/mailman/listinfo/samba
---
Incoming mail is certified Virus Free.
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.404 / Virus Database: 228 - Release Date: 15/10/2002
---
Outgoing mail is certified Virus Free.
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.404 / Virus Database: 228 - Release Date: 15/10/2002
getent passwd give list of user e.g.
GPSC+______:x:10011:10001:_____________:/home/win/GPSC/________:/bin/false
getent group lists all groups on RH box and all domain groups w/members e.g.
sshd:x:74:
GPSC+Administrative:x:10007:GPSC+_____a,GPSC+___t__,GPSC+t_____,GPSC+____l_,
GPSC+______y,GPSC+___n__
NOW, I am guessing that "map to guest = Bad User" is a good thing to
use
with my final setup but for now I've #ed it out. So the stuff in my log
about not being able to has disappeared but I think I need to figure out why
my userid is not being recognized.
How do I troubleshoot this?
-----Original Message-----
From: Noel Kelly [mailto:nkelly@citrusnetworks.net]
Sent: Thursday, October 31, 2002 2:55 PM
To: 'steven@9d8.com'; samba@lists.samba.org
Subject: RE: [Samba] Which tree should I be barking up?
You are being treated as a guest user because "map to guest = Bad
User"
Bad User - Means user logins with an invalid
password are rejected, unless the username does
not exist, in which case it is treated as a guest
login and mapped into the guest account.
This means that your login name or password is not being recognised and you
are being treated as the guest user - default is 'nobody'. If nobody
does
not exist in your domain then you need to create a user called this.
However, that will only get you as far as guest shares - and I suppose you
need to address the actual matter of not being recognised yourself. Are the
permissions on directory /home/apps 770 with group GPSC+"domain users"
or
something similar?
If so then see what you get if you do a 'getent passwd' or 'getent
group'.
HTH a bit,
Noel
looks like I am being recognized as a 'guest user' which is a problem
but
for testing purposes I have changed smb.conf for this share to allow guest
access, which it does not seem to.
I am also attempting to achieve a successful integration with winbind as I
don't want to manage users on two platforms.
wbinfo -u gives a list of domain users
wbinfo -g gives a list of domain groups
wbinfo -t gives 'secret is good'
Here is my smb.conf:
# Samba config file created using SWAT
# from UNKNOWN (127.0.0.1)
# Date: 2002/10/23 15:08:25
# Global parameters
[global]
workgroup = GPSC
netbios name = WILLIAM
server string = GPSC Application Samba Server
interfaces = lo eth0
bind interfaces only = Yes
security = DOMAIN
encrypt passwords = Yes
map to guest = Bad User
password server = *
log level = 3
log file = /var/log/samba.%m
max log size = 50
keepalive = 30
os level = 2
local master = No
dns proxy = No
wins server = 192.168.1.2
kernel oplocks = No
winbind uid = 10000-20000
winbind gid = 10000-20000
template homedir = /home/win/%D/%U
winbind separator = +
invalid users = root
printer admin = @DOM+PRINTADMIN
hosts allow = 127. 192.168.
print command lpq command lprm command
[homes]
comment = Home Directories
read only = No
create mask = 0750
browseable = No
[Apps]
comment = Where network apps are loaded
path = /home/apps
guest ok = Yes
Kind regards,
Steven S. Macfarlane
tel 712.204.8875
--
To unsubscribe from this list go to the following URL and read the
instructions: http://lists.samba.org/mailman/listinfo/samba
---
Incoming mail is certified Virus Free.
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.404 / Virus Database: 228 - Release Date: 15/10/2002
---
Outgoing mail is certified Virus Free.
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.404 / Virus Database: 228 - Release Date: 15/10/2002
Steve,
Have you tried authenticating using winbind?
winbind -a user%password
This should tell you if the actual authentication is working. If it is then
I would check your directory permissions.
Noel
-----Original Message-----
From: Steven S. Macfarlane [mailto:aussm@cableone.net]
Sent: 01 November 2002 15:30
To: samba@lists.samba.org
Subject: RE: [Samba] Which tree should I be barking up?
getent passwd give list of user e.g.
GPSC+______:x:10011:10001:_____________:/home/win/GPSC/________:/bin/false
getent group lists all groups on RH box and all domain groups w/members e.g.
sshd:x:74:
GPSC+Administrative:x:10007:GPSC+_____a,GPSC+___t__,GPSC+t_____,GPSC+____l_,
GPSC+______y,GPSC+___n__
NOW, I am guessing that "map to guest = Bad User" is a good thing to
use
with my final setup but for now I've #ed it out. So the stuff in my log
about not being able to has disappeared but I think I need to figure out why
my userid is not being recognized.
How do I troubleshoot this?
-----Original Message-----
From: Noel Kelly [mailto:nkelly@citrusnetworks.net]
Sent: Thursday, October 31, 2002 2:55 PM
To: 'steven@9d8.com'; samba@lists.samba.org
Subject: RE: [Samba] Which tree should I be barking up?
You are being treated as a guest user because "map to guest = Bad
User"
Bad User - Means user logins with an invalid
password are rejected, unless the username does
not exist, in which case it is treated as a guest
login and mapped into the guest account.
This means that your login name or password is not being recognised and you
are being treated as the guest user - default is 'nobody'. If nobody
does
not exist in your domain then you need to create a user called this.
However, that will only get you as far as guest shares - and I suppose you
need to address the actual matter of not being recognised yourself. Are the
permissions on directory /home/apps 770 with group GPSC+"domain users"
or
something similar?
If so then see what you get if you do a 'getent passwd' or 'getent
group'.
HTH a bit,
Noel
looks like I am being recognized as a 'guest user' which is a problem
but
for testing purposes I have changed smb.conf for this share to allow guest
access, which it does not seem to.
I am also attempting to achieve a successful integration with winbind as I
don't want to manage users on two platforms.
wbinfo -u gives a list of domain users
wbinfo -g gives a list of domain groups
wbinfo -t gives 'secret is good'
Here is my smb.conf:
# Samba config file created using SWAT
# from UNKNOWN (127.0.0.1)
# Date: 2002/10/23 15:08:25
# Global parameters
[global]
workgroup = GPSC
netbios name = WILLIAM
server string = GPSC Application Samba Server
interfaces = lo eth0
bind interfaces only = Yes
security = DOMAIN
encrypt passwords = Yes
map to guest = Bad User
password server = *
log level = 3
log file = /var/log/samba.%m
max log size = 50
keepalive = 30
os level = 2
local master = No
dns proxy = No
wins server = 192.168.1.2
kernel oplocks = No
winbind uid = 10000-20000
winbind gid = 10000-20000
template homedir = /home/win/%D/%U
winbind separator = +
invalid users = root
printer admin = @DOM+PRINTADMIN
hosts allow = 127. 192.168.
print command lpq command lprm command
[homes]
comment = Home Directories
read only = No
create mask = 0750
browseable = No
[Apps]
comment = Where network apps are loaded
path = /home/apps
guest ok = Yes
Kind regards,
Steven S. Macfarlane
tel 712.204.8875
--
To unsubscribe from this list go to the following URL and read the
instructions: http://lists.samba.org/mailman/listinfo/samba
---
Incoming mail is certified Virus Free.
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.404 / Virus Database: 228 - Release Date: 15/10/2002
---
Outgoing mail is certified Virus Free.
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.404 / Virus Database: 228 - Release Date: 15/10/2002
--
To unsubscribe from this list go to the following URL and read the
instructions: http://lists.samba.org/mailman/listinfo/samba
---
Incoming mail is certified Virus Free.
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.404 / Virus Database: 228 - Release Date: 15/10/2002
---
Outgoing mail is certified Virus Free.
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.404 / Virus Database: 228 - Release Date: 15/10/2002
I am terrible embarrassed to report that I think it was my permission on my
directory shares, thank you for your direction and assistance.
Steven
-----Original Message-----
From: Noel Kelly [mailto:nkelly@citrusnetworks.net]
Sent: Friday, November 01, 2002 1:53 PM
To: 'steven@9d8.com'; samba@lists.samba.org
Subject: RE: [Samba] Which tree should I be barking up?
Steve,
Have you tried authenticating using winbind?
winbind -a user%password
This should tell you if the actual authentication is working. If it is then
I would check your directory permissions.
Noel
-----Original Message-----
From: Steven S. Macfarlane [mailto:aussm@cableone.net]
Sent: 01 November 2002 15:30
To: samba@lists.samba.org
Subject: RE: [Samba] Which tree should I be barking up?
getent passwd give list of user e.g.
GPSC+______:x:10011:10001:_____________:/home/win/GPSC/________:/bin/false
getent group lists all groups on RH box and all domain groups w/members e.g.
sshd:x:74:
GPSC+Administrative:x:10007:GPSC+_____a,GPSC+___t__,GPSC+t_____,GPSC+____l_,
GPSC+______y,GPSC+___n__
NOW, I am guessing that "map to guest = Bad User" is a good thing to
use
with my final setup but for now I've #ed it out. So the stuff in my log
about not being able to has disappeared but I think I need to figure out why
my userid is not being recognized.
How do I troubleshoot this?
-----Original Message-----
From: Noel Kelly [mailto:nkelly@citrusnetworks.net]
Sent: Thursday, October 31, 2002 2:55 PM
To: 'steven@9d8.com'; samba@lists.samba.org
Subject: RE: [Samba] Which tree should I be barking up?
You are being treated as a guest user because "map to guest = Bad
User"
Bad User - Means user logins with an invalid
password are rejected, unless the username does
not exist, in which case it is treated as a guest
login and mapped into the guest account.
This means that your login name or password is not being recognised and you
are being treated as the guest user - default is 'nobody'. If nobody
does
not exist in your domain then you need to create a user called this.
However, that will only get you as far as guest shares - and I suppose you
need to address the actual matter of not being recognised yourself. Are the
permissions on directory /home/apps 770 with group GPSC+"domain users"
or
something similar?
If so then see what you get if you do a 'getent passwd' or 'getent
group'.
HTH a bit,
Noel
looks like I am being recognized as a 'guest user' which is a problem
but
for testing purposes I have changed smb.conf for this share to allow guest
access, which it does not seem to.
I am also attempting to achieve a successful integration with winbind as I
don't want to manage users on two platforms.
wbinfo -u gives a list of domain users
wbinfo -g gives a list of domain groups
wbinfo -t gives 'secret is good'
Here is my smb.conf:
# Samba config file created using SWAT
# from UNKNOWN (127.0.0.1)
# Date: 2002/10/23 15:08:25
# Global parameters
[global]
workgroup = GPSC
netbios name = WILLIAM
server string = GPSC Application Samba Server
interfaces = lo eth0
bind interfaces only = Yes
security = DOMAIN
encrypt passwords = Yes
map to guest = Bad User
password server = *
log level = 3
log file = /var/log/samba.%m
max log size = 50
keepalive = 30
os level = 2
local master = No
dns proxy = No
wins server = 192.168.1.2
kernel oplocks = No
winbind uid = 10000-20000
winbind gid = 10000-20000
template homedir = /home/win/%D/%U
winbind separator = +
invalid users = root
printer admin = @DOM+PRINTADMIN
hosts allow = 127. 192.168.
print command lpq command lprm command
[homes]
comment = Home Directories
read only = No
create mask = 0750
browseable = No
[Apps]
comment = Where network apps are loaded
path = /home/apps
guest ok = Yes
Kind regards,
Steven S. Macfarlane
tel 712.204.8875
--
To unsubscribe from this list go to the following URL and read the
instructions: http://lists.samba.org/mailman/listinfo/samba
---
Incoming mail is certified Virus Free.
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.404 / Virus Database: 228 - Release Date: 15/10/2002
---
Outgoing mail is certified Virus Free.
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.404 / Virus Database: 228 - Release Date: 15/10/2002
--
To unsubscribe from this list go to the following URL and read the
instructions: http://lists.samba.org/mailman/listinfo/samba
---
Incoming mail is certified Virus Free.
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.404 / Virus Database: 228 - Release Date: 15/10/2002
---
Outgoing mail is certified Virus Free.
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.404 / Virus Database: 228 - Release Date: 15/10/2002
Oopps - that should have been wbinfo:
wbinfo -a user%password
Noel
-----Original Message-----
From: Noel Kelly
Sent: 01 November 2002 19:53
To: 'steven@9d8.com'; samba@lists.samba.org
Subject: RE: [Samba] Which tree should I be barking up?
Steve,
Have you tried authenticating using winbind?
winbind -a user%password
This should tell you if the actual authentication is working. If it is then
I would check your directory permissions.
Noel
-----Original Message-----
From: Steven S. Macfarlane [mailto:aussm@cableone.net]
Sent: 01 November 2002 15:30
To: samba@lists.samba.org
Subject: RE: [Samba] Which tree should I be barking up?
getent passwd give list of user e.g.
GPSC+______:x:10011:10001:_____________:/home/win/GPSC/________:/bin/false
getent group lists all groups on RH box and all domain groups w/members e.g.
sshd:x:74:
GPSC+Administrative:x:10007:GPSC+_____a,GPSC+___t__,GPSC+t_____,GPSC+____l_,
GPSC+______y,GPSC+___n__
NOW, I am guessing that "map to guest = Bad User" is a good thing to
use
with my final setup but for now I've #ed it out. So the stuff in my log
about not being able to has disappeared but I think I need to figure out why
my userid is not being recognized.
How do I troubleshoot this?
-----Original Message-----
From: Noel Kelly [mailto:nkelly@citrusnetworks.net]
Sent: Thursday, October 31, 2002 2:55 PM
To: 'steven@9d8.com'; samba@lists.samba.org
Subject: RE: [Samba] Which tree should I be barking up?
You are being treated as a guest user because "map to guest = Bad
User"
Bad User - Means user logins with an invalid
password are rejected, unless the username does
not exist, in which case it is treated as a guest
login and mapped into the guest account.
This means that your login name or password is not being recognised and you
are being treated as the guest user - default is 'nobody'. If nobody
does
not exist in your domain then you need to create a user called this.
However, that will only get you as far as guest shares - and I suppose you
need to address the actual matter of not being recognised yourself. Are the
permissions on directory /home/apps 770 with group GPSC+"domain users"
or
something similar?
If so then see what you get if you do a 'getent passwd' or 'getent
group'.
HTH a bit,
Noel
looks like I am being recognized as a 'guest user' which is a problem
but
for testing purposes I have changed smb.conf for this share to allow guest
access, which it does not seem to.
I am also attempting to achieve a successful integration with winbind as I
don't want to manage users on two platforms.
wbinfo -u gives a list of domain users
wbinfo -g gives a list of domain groups
wbinfo -t gives 'secret is good'
Here is my smb.conf:
# Samba config file created using SWAT
# from UNKNOWN (127.0.0.1)
# Date: 2002/10/23 15:08:25
# Global parameters
[global]
workgroup = GPSC
netbios name = WILLIAM
server string = GPSC Application Samba Server
interfaces = lo eth0
bind interfaces only = Yes
security = DOMAIN
encrypt passwords = Yes
map to guest = Bad User
password server = *
log level = 3
log file = /var/log/samba.%m
max log size = 50
keepalive = 30
os level = 2
local master = No
dns proxy = No
wins server = 192.168.1.2
kernel oplocks = No
winbind uid = 10000-20000
winbind gid = 10000-20000
template homedir = /home/win/%D/%U
winbind separator = +
invalid users = root
printer admin = @DOM+PRINTADMIN
hosts allow = 127. 192.168.
print command lpq command lprm command
[homes]
comment = Home Directories
read only = No
create mask = 0750
browseable = No
[Apps]
comment = Where network apps are loaded
path = /home/apps
guest ok = Yes
Kind regards,
Steven S. Macfarlane
tel 712.204.8875
--
To unsubscribe from this list go to the following URL and read the
instructions: http://lists.samba.org/mailman/listinfo/samba
---
Incoming mail is certified Virus Free.
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.404 / Virus Database: 228 - Release Date: 15/10/2002
---
Outgoing mail is certified Virus Free.
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.404 / Virus Database: 228 - Release Date: 15/10/2002
--
To unsubscribe from this list go to the following URL and read the
instructions: http://lists.samba.org/mailman/listinfo/samba
---
Incoming mail is certified Virus Free.
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.404 / Virus Database: 228 - Release Date: 15/10/2002
---
Outgoing mail is certified Virus Free.
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.404 / Virus Database: 228 - Release Date: 15/10/2002
--
To unsubscribe from this list go to the following URL and read the
instructions: http://lists.samba.org/mailman/listinfo/samba
---
Incoming mail is certified Virus Free.
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.404 / Virus Database: 228 - Release Date: 15/10/2002
---
Outgoing mail is certified Virus Free.
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.404 / Virus Database: 228 - Release Date: 15/10/2002
Ooops here too, looks like that gives:
[root@William home]# wbinfo -a taskla%*******
plaintext password authentication failed
error code was NT_STATUS_INVALID_PARAMETER (0xc000000d)
Could not authenticate user taskla%******* with plaintext password
So I don't have winbind working ok...
-----Original Message-----
From: Noel Kelly [mailto:nkelly@citrusnetworks.net]
Sent: Friday, November 01, 2002 2:12 PM
To: Noel Kelly; 'steven@9d8.com'; samba@lists.samba.org
Subject: RE: [Samba] Which tree should I be barking up?
Oopps - that should have been wbinfo:
wbinfo -a user%password
Noel
-----Original Message-----
From: Noel Kelly
Sent: 01 November 2002 19:53
To: 'steven@9d8.com'; samba@lists.samba.org
Subject: RE: [Samba] Which tree should I be barking up?
Steve,
Have you tried authenticating using winbind?
winbind -a user%password
This should tell you if the actual authentication is working. If it is then
I would check your directory permissions.
Noel
-----Original Message-----
From: Steven S. Macfarlane [mailto:aussm@cableone.net]
Sent: 01 November 2002 15:30
To: samba@lists.samba.org
Subject: RE: [Samba] Which tree should I be barking up?
getent passwd give list of user e.g.
GPSC+______:x:10011:10001:_____________:/home/win/GPSC/________:/bin/false
getent group lists all groups on RH box and all domain groups w/members e.g.
sshd:x:74:
GPSC+Administrative:x:10007:GPSC+_____a,GPSC+___t__,GPSC+t_____,GPSC+____l_,
GPSC+______y,GPSC+___n__
NOW, I am guessing that "map to guest = Bad User" is a good thing to
use
with my final setup but for now I've #ed it out. So the stuff in my log
about not being able to has disappeared but I think I need to figure out why
my userid is not being recognized.
How do I troubleshoot this?
-----Original Message-----
From: Noel Kelly [mailto:nkelly@citrusnetworks.net]
Sent: Thursday, October 31, 2002 2:55 PM
To: 'steven@9d8.com'; samba@lists.samba.org
Subject: RE: [Samba] Which tree should I be barking up?
You are being treated as a guest user because "map to guest = Bad
User"
Bad User - Means user logins with an invalid
password are rejected, unless the username does
not exist, in which case it is treated as a guest
login and mapped into the guest account.
This means that your login name or password is not being recognised and you
are being treated as the guest user - default is 'nobody'. If nobody
does
not exist in your domain then you need to create a user called this.
However, that will only get you as far as guest shares - and I suppose you
need to address the actual matter of not being recognised yourself. Are the
permissions on directory /home/apps 770 with group GPSC+"domain users"
or
something similar?
If so then see what you get if you do a 'getent passwd' or 'getent
group'.
HTH a bit,
Noel
looks like I am being recognized as a 'guest user' which is a problem
but
for testing purposes I have changed smb.conf for this share to allow guest
access, which it does not seem to.
I am also attempting to achieve a successful integration with winbind as I
don't want to manage users on two platforms.
wbinfo -u gives a list of domain users
wbinfo -g gives a list of domain groups
wbinfo -t gives 'secret is good'
Here is my smb.conf:
# Samba config file created using SWAT
# from UNKNOWN (127.0.0.1)
# Date: 2002/10/23 15:08:25
# Global parameters
[global]
workgroup = GPSC
netbios name = WILLIAM
server string = GPSC Application Samba Server
interfaces = lo eth0
bind interfaces only = Yes
security = DOMAIN
encrypt passwords = Yes
map to guest = Bad User
password server = *
log level = 3
log file = /var/log/samba.%m
max log size = 50
keepalive = 30
os level = 2
local master = No
dns proxy = No
wins server = 192.168.1.2
kernel oplocks = No
winbind uid = 10000-20000
winbind gid = 10000-20000
template homedir = /home/win/%D/%U
winbind separator = +
invalid users = root
printer admin = @DOM+PRINTADMIN
hosts allow = 127. 192.168.
print command lpq command lprm command
[homes]
comment = Home Directories
read only = No
create mask = 0750
browseable = No
[Apps]
comment = Where network apps are loaded
path = /home/apps
guest ok = Yes
Kind regards,
Steven S. Macfarlane
tel 712.204.8875
--
To unsubscribe from this list go to the following URL and read the
instructions: http://lists.samba.org/mailman/listinfo/samba
---
Incoming mail is certified Virus Free.
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.404 / Virus Database: 228 - Release Date: 15/10/2002
---
Outgoing mail is certified Virus Free.
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.404 / Virus Database: 228 - Release Date: 15/10/2002
--
To unsubscribe from this list go to the following URL and read the
instructions: http://lists.samba.org/mailman/listinfo/samba
---
Incoming mail is certified Virus Free.
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.404 / Virus Database: 228 - Release Date: 15/10/2002
---
Outgoing mail is certified Virus Free.
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.404 / Virus Database: 228 - Release Date: 15/10/2002
--
To unsubscribe from this list go to the following URL and read the
instructions: http://lists.samba.org/mailman/listinfo/samba
---
Incoming mail is certified Virus Free.
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.404 / Virus Database: 228 - Release Date: 15/10/2002
---
Outgoing mail is certified Virus Free.
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.404 / Virus Database: 228 - Release Date: 15/10/2002
Triple oops, I forgot to put 'Domain+' in front of user in the wbinfo
command, it works fine.
Sorry again and thank you...
Steven
-----Original Message-----
From: Noel Kelly [mailto:nkelly@citrusnetworks.net]
Sent: Friday, November 01, 2002 2:12 PM
To: Noel Kelly; 'steven@9d8.com'; samba@lists.samba.org
Subject: RE: [Samba] Which tree should I be barking up?
Oopps - that should have been wbinfo:
wbinfo -a user%password
Noel
-----Original Message-----
From: Noel Kelly
Sent: 01 November 2002 19:53
To: 'steven@9d8.com'; samba@lists.samba.org
Subject: RE: [Samba] Which tree should I be barking up?
Steve,
Have you tried authenticating using winbind?
winbind -a user%password
This should tell you if the actual authentication is working. If it is then
I would check your directory permissions.
Noel
-----Original Message-----
From: Steven S. Macfarlane [mailto:aussm@cableone.net]
Sent: 01 November 2002 15:30
To: samba@lists.samba.org
Subject: RE: [Samba] Which tree should I be barking up?
getent passwd give list of user e.g.
GPSC+______:x:10011:10001:_____________:/home/win/GPSC/________:/bin/false
getent group lists all groups on RH box and all domain groups w/members e.g.
sshd:x:74:
GPSC+Administrative:x:10007:GPSC+_____a,GPSC+___t__,GPSC+t_____,GPSC+____l_,
GPSC+______y,GPSC+___n__
NOW, I am guessing that "map to guest = Bad User" is a good thing to
use
with my final setup but for now I've #ed it out. So the stuff in my log
about not being able to has disappeared but I think I need to figure out why
my userid is not being recognized.
How do I troubleshoot this?
-----Original Message-----
From: Noel Kelly [mailto:nkelly@citrusnetworks.net]
Sent: Thursday, October 31, 2002 2:55 PM
To: 'steven@9d8.com'; samba@lists.samba.org
Subject: RE: [Samba] Which tree should I be barking up?
You are being treated as a guest user because "map to guest = Bad
User"
Bad User - Means user logins with an invalid
password are rejected, unless the username does
not exist, in which case it is treated as a guest
login and mapped into the guest account.
This means that your login name or password is not being recognised and you
are being treated as the guest user - default is 'nobody'. If nobody
does
not exist in your domain then you need to create a user called this.
However, that will only get you as far as guest shares - and I suppose you
need to address the actual matter of not being recognised yourself. Are the
permissions on directory /home/apps 770 with group GPSC+"domain users"
or
something similar?
If so then see what you get if you do a 'getent passwd' or 'getent
group'.
HTH a bit,
Noel
looks like I am being recognized as a 'guest user' which is a problem
but
for testing purposes I have changed smb.conf for this share to allow guest
access, which it does not seem to.
I am also attempting to achieve a successful integration with winbind as I
don't want to manage users on two platforms.
wbinfo -u gives a list of domain users
wbinfo -g gives a list of domain groups
wbinfo -t gives 'secret is good'
Here is my smb.conf:
# Samba config file created using SWAT
# from UNKNOWN (127.0.0.1)
# Date: 2002/10/23 15:08:25
# Global parameters
[global]
workgroup = GPSC
netbios name = WILLIAM
server string = GPSC Application Samba Server
interfaces = lo eth0
bind interfaces only = Yes
security = DOMAIN
encrypt passwords = Yes
map to guest = Bad User
password server = *
log level = 3
log file = /var/log/samba.%m
max log size = 50
keepalive = 30
os level = 2
local master = No
dns proxy = No
wins server = 192.168.1.2
kernel oplocks = No
winbind uid = 10000-20000
winbind gid = 10000-20000
template homedir = /home/win/%D/%U
winbind separator = +
invalid users = root
printer admin = @DOM+PRINTADMIN
hosts allow = 127. 192.168.
print command lpq command lprm command
[homes]
comment = Home Directories
read only = No
create mask = 0750
browseable = No
[Apps]
comment = Where network apps are loaded
path = /home/apps
guest ok = Yes
Kind regards,
Steven S. Macfarlane
tel 712.204.8875
--
To unsubscribe from this list go to the following URL and read the
instructions: http://lists.samba.org/mailman/listinfo/samba
---
Incoming mail is certified Virus Free.
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.404 / Virus Database: 228 - Release Date: 15/10/2002
---
Outgoing mail is certified Virus Free.
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.404 / Virus Database: 228 - Release Date: 15/10/2002
--
To unsubscribe from this list go to the following URL and read the
instructions: http://lists.samba.org/mailman/listinfo/samba
---
Incoming mail is certified Virus Free.
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.404 / Virus Database: 228 - Release Date: 15/10/2002
---
Outgoing mail is certified Virus Free.
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.404 / Virus Database: 228 - Release Date: 15/10/2002
--
To unsubscribe from this list go to the following URL and read the
instructions: http://lists.samba.org/mailman/listinfo/samba
---
Incoming mail is certified Virus Free.
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.404 / Virus Database: 228 - Release Date: 15/10/2002
---
Outgoing mail is certified Virus Free.
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.404 / Virus Database: 228 - Release Date: 15/10/2002