Hello, I have a question that I was wondering if someone could help me with. I am an admin at RIT and we have a large network base of Sun machines. We do authentication via NIS over NFS. We are about to receive a full lab of Windows boxes and need to set up a samba server to serve users' home directories to the Windows boxes. This initial configuration is relatively easy, but we want to use NIS for access control and password authentication. Access control is simple via NIS netgroups, but everything I've turned up for authentication via NIS has just regarded password syncing. Is anyone aware of a method of forcing Samba to use the NIS system for password authentication instead of it's smbpasswd file? Any help would be appreciated! Thanks. Jeff
On Tue, 8 Apr 2003, Jeffrey C. Keller wrote:> just regarded password syncing. Is anyone aware of a method of forcing > Samba to use the NIS system for password authentication instead of it's > smbpasswd file? Any help would be appreciated! Thanks.Hmm, not that I know. Almost same setup here. UNIX-NIS-SMBpass-WinXP
Yes. If your samba server is not a PDC, it can work quite easily.. The samba server needs to be made an NIS client, and 'encrypt passwords = no' must be chosen.. then, samba will look to local authentication methods, which, if the machine uses NIS, samba will use NIS. We have a similar setup where I work. On the downside, you will have to enter a registry edit on each windows box. (it's a very simple procedure). The edit allows the windows machines (i'm assuming XP) to auth off of plaintext passwords. In the case of XP/NT/2000, once you add the edit, it enables the machine to authenticate using BOTH encrypted, and Unencrypted authentication.. (at least this was my observation on Windows NT 4.0 -- someone please correct me if I am wrong) Obviously, plaintext password issues exist, but you're already using NIS. The registry hack is: (in Windows XP) open regedt32 Under HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\lanmanworkstation\parameters\ Modify the Dword 'enableplaintextpassword'. Change value to '1' hexadecimal. Matt Schillinger mschilli@vss.fsi.com On Tue, 2003-04-08 at 07:53, Jeffrey C. Keller wrote:> Hello, I have a question that I was wondering if someone could help me > with. I am an admin at RIT and we have a large network base of Sun > machines. We do authentication via NIS over NFS. We are about to > receive a full lab of Windows boxes and need to set up a samba server to > serve users' home directories to the Windows boxes. This initial > configuration is relatively easy, but we want to use NIS for access > control and password authentication. Access control is simple via NIS > netgroups, but everything I've turned up for authentication via NIS has > just regarded password syncing. Is anyone aware of a method of forcing > Samba to use the NIS system for password authentication instead of it's > smbpasswd file? Any help would be appreciated! Thanks. > > Jeff > > > -- > To unsubscribe from this list go to the following URL and read the > instructions: http://lists.samba.org/mailman/listinfo/samba
Sorry for not commenting on this on my first email.. I don't think that samba will honor a netgroup type setup.. this is up to smb.conf.. You can setup share level access control. Within each share, you can specify 'hosts allow = ' This is a comma separated lists of hostnames or IP addresses, or subnets.. man smb.conf will give the full info. hosts allow can also be used in the Global section of the smb.conf to give rights for ALL shares. Matt Schillinger mschilli@vss.fsi.com On Tue, 2003-04-08 at 07:53, Jeffrey C. Keller wrote:> Hello, I have a question that I was wondering if someone could help me > with. I am an admin at RIT and we have a large network base of Sun > machines. We do authentication via NIS over NFS. We are about to > receive a full lab of Windows boxes and need to set up a samba server to > serve users' home directories to the Windows boxes. This initial > configuration is relatively easy, but we want to use NIS for access > control and password authentication. Access control is simple via NIS > netgroups, but everything I've turned up for authentication via NIS has > just regarded password syncing. Is anyone aware of a method of forcing > Samba to use the NIS system for password authentication instead of it's > smbpasswd file? Any help would be appreciated! Thanks. > > Jeff > > > -- > To unsubscribe from this list go to the following URL and read the > instructions: http://lists.samba.org/mailman/listinfo/samba