Sergei Zuyev
2003-Nov-26 12:11 UTC
[Samba] Please help! How to login other existing domain users to samba nework
I already posted this question some time ago, but no-one came with a solution
or even a comment. Please, I really need this!
So, I repeat:
Configuration:
Server: Mandrake Linux 9.1 box running samba 2.2.7 controling my home network
A Windows 2000 Pro laptop,
a few other Win and Lin boxes
Problem: my wife has an existing remote domain account on her win2000 laptop,
I want her to be able to use a public share on my home network and local
printers.
If I join her to the home domain, she has access to the resources of our home
net, but she cannot read her emails and cannot access her encripted documents
as she's no longer logged as the remote domain user.
Is that possible to grant her access to samba network when she's logged as
the
remote domain user (not being actually connected to that network)? Is trusted
domain serves for that thing? Other windows machines configured as members of
the home domain have no problems connecting, but my wife in the above
configuration gets the message "No servers available to process your
request"
Restriction: I cannot make my home network a member of the remote network
which is actually the network of my wife's enterprise. I tried to mimic her
interprise network name, but this does not help.
Thanks a lot in advance!
Attached is the samba dump
-------------- next part --------------
# Global parameters
[global]
coding system client code page = 932
code page directory = /var/lib/samba/codepages
workgroup = DELIGHT
netbios name = KALITKA
netbios aliases netbios scope server string = Kalitka %v
interfaces = 192.168.1.1/24
bind interfaces only = No
security = USER
encrypt passwords = Yes
update encrypted = No
allow trusted domains = Yes
hosts equiv min passwd length = 5
map to guest = Bad User
null passwords = No
obey pam restrictions = No
password server smb passwd file = /etc/samba/smbpasswd
root directory pam password change = No
passwd program = /usr/bin/passwd
passwd chat = *new*password* %n\n *new*password* %n\n *changed*
passwd chat debug = No
username map password level = 0
username level = 0
unix password sync = No
restrict anonymous = No
lanman auth = Yes
use rhosts = No
admin log = No
log level = 0
syslog = 1
syslog only = No
log file = /var/log/samba/log.%m
max log size = 50
timestamp logs = Yes
debug hires timestamp = No
debug pid = No
debug uid = No
protocol = NT1
large readwrite = Yes
max protocol = NT1
min protocol = CORE
read bmpx = No
read raw = Yes
write raw = Yes
nt smb support = Yes
nt pipe support = Yes
nt status support = Yes
announce version = 4.9
announce as = NT
max mux = 50
max xmit = 16644
name resolve order = wins lmhosts bcast
max ttl = 259200
max wins ttl = 518400
min wins ttl = 21600
time server = No
unix extensions = No
change notify timeout = 60
deadtime = 0
getwd cache = Yes
keepalive = 300
lpq cache time = 10
max smbd processes = 0
max disk size = 0
max open files = 10000
name cache timeout = 660
read size = 16384
socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
stat cache size = 50
use mmap = Yes
total print jobs = 0
load printers = Yes
printcap name = cups
disable spoolss = No
enumports command addprinter command deleteprinter
command show add printer wizard = Yes
os2 driver map strip dot = No
mangling method = hash
character set = ISO8859-5
mangled stack = 50
stat cache = Yes
domain admin group = root @adm
domain guest group = nobody @guest
machine password timeout = 604800
add user script delete user script logon script
logon path = \\%N\%U\profile
logon drive logon home = \\%N\%U
domain logons = No
os level = 20
lm announce = Auto
lm interval = 60
preferred master = Yes
local master = Yes
domain master = Yes
browse list = Yes
enhanced browsing = Yes
dns proxy = No
wins proxy = No
wins server wins support = Yes
wins hook kernel oplocks = Yes
lock spin count = 3
lock spin time = 10
oplock break wait time = 0
add share command change share command delete share
command config file preload lock dir = /var/cache/samba
pid directory = /var/run/samba
utmp directory wtmp directory utmp = No
default service message command dfree command
valid chars remote announce remote browse sync socket
address = 0.0.0.0
homedir map = auto.home
time offset = 0
NIS homedir = No
source environment panic action hide local users = No
host msdfs = No
winbind uid winbind gid template homedir = /home/%D/%U
template shell = /bin/false
winbind separator = \
winbind cache time = 15
winbind enum users = Yes
winbind enum groups = Yes
winbind use default domain = No
comment path alternate permissions = No
username guest account = nobody
invalid users valid users admin users read list
write list printer admin = @adm
force user force group read only = Yes
create mask = 0744
force create mode = 00
security mask = 0777
force security mode = 00
directory mask = 0755
force directory mode = 00
directory security mask = 0777
force directory security mode = 00
force unknown acl user = 00
inherit permissions = No
inherit acls = No
guest only = No
guest ok = No
only user = No
hosts allow = 192.168.1. 127.
hosts deny status = Yes
nt acl support = Yes
profile acls = No
block size = 1024
max connections = 0
min print space = 0
strict allocate = No
strict sync = No
sync always = No
use sendfile = No
write cache size = 0
max print jobs = 1000
printable = No
postscript = No
printing = cups
print command = lpr -r -P%p %s
lpq command = lpq -P%p
lprm command = lprm -P%p %j
lppause command lpresume command queuepause command
queueresume command printer name use client driver = No
default devmode = No
printer driver printer driver file = /etc/samba/printers.def
printer driver location default case = lower
case sensitive = No
preserve case = Yes
short preserve case = Yes
mangle case = No
mangling char = ~
hide dot files = Yes
hide unreadable = No
delete veto files = No
veto files hide files veto oplock files map
system = No
map hidden = No
map archive = Yes
mangled names = Yes
mangled map browseable = Yes
blocking locks = Yes
csc policy = manual
fake oplocks = No
locking = Yes
oplocks = Yes
level2 oplocks = Yes
oplock contention limit = 2
posix locking = Yes
strict locking = No
share modes = Yes
copy include exec preexec close = No
postexec root preexec root preexec close = No
root postexec available = Yes
volume fstype = NTFS
set directory = No
wide links = Yes
follow symlinks = Yes
dont descend magic script magic output delete
readonly = No
dos filemode = No
dos filetimes = No
dos filetime resolution = No
fake directory create times = No
vfs object vfs options msdfs root = No
[homes]
comment = Home Directories
read only = No
browseable = No
[printers]
comment = All Printers
path = /var/spool/samba
create mask = 0700
guest ok = Yes
printable = Yes
print command = lpr-cups -P %p -o raw %s -r # using client side
printer drivers.
browseable = No
[print$]
path = /var/lib/samba/printers
write list = @adm root
guest ok = Yes
[pdf-generator]
comment = PDF Generator (only valid users)
path = /var/tmp
printable = Yes
print command = /usr/share/samba/scripts/print-pdf %s ~%u //%L/%u %m
%I "%J" &
[public]
comment = Public Stuff
path = /backup/samba-public
read only = No
guest ok = Yes
Adam Williams
2003-Nov-26 13:08 UTC
[Samba] Please help! How to login other existing domain users to samba nework
You can have her map your public share to a drive letter, and add your printer to her notebook as a remote printer (add printer, network printer \\server\lp0 or whatever). when she's at work on the work's network, it'll just show in explorer that z:\ unable to be found, and same with the printer but they'll still exist, and when she login's at home again, they wil reappear as connected. (have her login as administrator at home, and her samba user when she's at work). Sergei Zuyev wrote:> I already posted this question some time ago, but no-one came with a solution > or even a comment. Please, I really need this! > So, I repeat: > > Configuration: > Server: Mandrake Linux 9.1 box running samba 2.2.7 controling my home network > A Windows 2000 Pro laptop, > a few other Win and Lin boxes > > Problem: my wife has an existing remote domain account on her win2000 laptop, > I want her to be able to use a public share on my home network and local > printers. > > If I join her to the home domain, she has access to the resources of our home > net, but she cannot read her emails and cannot access her encripted documents > as she's no longer logged as the remote domain user. > > Is that possible to grant her access to samba network when she's logged as the > remote domain user (not being actually connected to that network)? Is trusted > domain serves for that thing? Other windows machines configured as members of > the home domain have no problems connecting, but my wife in the above > configuration gets the message "No servers available to process your request" > > Restriction: I cannot make my home network a member of the remote network > which is actually the network of my wife's enterprise. I tried to mimic her > interprise network name, but this does not help. > > Thanks a lot in advance! > > Attached is the samba dump > > > ------------------------------------------------------------------------ > > # Global parameters > [global] > coding system > client code page = 932 > code page directory = /var/lib/samba/codepages > workgroup = DELIGHT > netbios name = KALITKA > netbios aliases > netbios scope > server string = Kalitka %v > interfaces = 192.168.1.1/24 > bind interfaces only = No > security = USER > encrypt passwords = Yes > update encrypted = No > allow trusted domains = Yes > hosts equiv > min passwd length = 5 > map to guest = Bad User > null passwords = No > obey pam restrictions = No > password server > smb passwd file = /etc/samba/smbpasswd > root directory > pam password change = No > passwd program = /usr/bin/passwd > passwd chat = *new*password* %n\n *new*password* %n\n *changed* > passwd chat debug = No > username map > password level = 0 > username level = 0 > unix password sync = No > restrict anonymous = No > lanman auth = Yes > use rhosts = No > admin log = No > log level = 0 > syslog = 1 > syslog only = No > log file = /var/log/samba/log.%m > max log size = 50 > timestamp logs = Yes > debug hires timestamp = No > debug pid = No > debug uid = No > protocol = NT1 > large readwrite = Yes > max protocol = NT1 > min protocol = CORE > read bmpx = No > read raw = Yes > write raw = Yes > nt smb support = Yes > nt pipe support = Yes > nt status support = Yes > announce version = 4.9 > announce as = NT > max mux = 50 > max xmit = 16644 > name resolve order = wins lmhosts bcast > max ttl = 259200 > max wins ttl = 518400 > min wins ttl = 21600 > time server = No > unix extensions = No > change notify timeout = 60 > deadtime = 0 > getwd cache = Yes > keepalive = 300 > lpq cache time = 10 > max smbd processes = 0 > max disk size = 0 > max open files = 10000 > name cache timeout = 660 > read size = 16384 > socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192 > stat cache size = 50 > use mmap = Yes > total print jobs = 0 > load printers = Yes > printcap name = cups > disable spoolss = No > enumports command > addprinter command > deleteprinter command > show add printer wizard = Yes > os2 driver map > strip dot = No > mangling method = hash > character set = ISO8859-5 > mangled stack = 50 > stat cache = Yes > domain admin group = root @adm > domain guest group = nobody @guest > machine password timeout = 604800 > add user script > delete user script > logon script > logon path = \\%N\%U\profile > logon drive > logon home = \\%N\%U > domain logons = No > os level = 20 > lm announce = Auto > lm interval = 60 > preferred master = Yes > local master = Yes > domain master = Yes > browse list = Yes > enhanced browsing = Yes > dns proxy = No > wins proxy = No > wins server > wins support = Yes > wins hook > kernel oplocks = Yes > lock spin count = 3 > lock spin time = 10 > oplock break wait time = 0 > add share command > change share command > delete share command > config file > preload > lock dir = /var/cache/samba > pid directory = /var/run/samba > utmp directory > wtmp directory > utmp = No > default service > message command > dfree command > valid chars > remote announce > remote browse sync > socket address = 0.0.0.0 > homedir map = auto.home > time offset = 0 > NIS homedir = No > source environment > panic action > hide local users = No > host msdfs = No > winbind uid > winbind gid > template homedir = /home/%D/%U > template shell = /bin/false > winbind separator = \ > winbind cache time = 15 > winbind enum users = Yes > winbind enum groups = Yes > winbind use default domain = No > comment > path > alternate permissions = No > username > guest account = nobody > invalid users > valid users > admin users > read list > write list > printer admin = @adm > force user > force group > read only = Yes > create mask = 0744 > force create mode = 00 > security mask = 0777 > force security mode = 00 > directory mask = 0755 > force directory mode = 00 > directory security mask = 0777 > force directory security mode = 00 > force unknown acl user = 00 > inherit permissions = No > inherit acls = No > guest only = No > guest ok = No > only user = No > hosts allow = 192.168.1. 127. > hosts deny > status = Yes > nt acl support = Yes > profile acls = No > block size = 1024 > max connections = 0 > min print space = 0 > strict allocate = No > strict sync = No > sync always = No > use sendfile = No > write cache size = 0 > max print jobs = 1000 > printable = No > postscript = No > printing = cups > print command = lpr -r -P%p %s > lpq command = lpq -P%p > lprm command = lprm -P%p %j > lppause command > lpresume command > queuepause command > queueresume command > printer name > use client driver = No > default devmode = No > printer driver > printer driver file = /etc/samba/printers.def > printer driver location > default case = lower > case sensitive = No > preserve case = Yes > short preserve case = Yes > mangle case = No > mangling char = ~ > hide dot files = Yes > hide unreadable = No > delete veto files = No > veto files > hide files > veto oplock files > map system = No > map hidden = No > map archive = Yes > mangled names = Yes > mangled map > browseable = Yes > blocking locks = Yes > csc policy = manual > fake oplocks = No > locking = Yes > oplocks = Yes > level2 oplocks = Yes > oplock contention limit = 2 > posix locking = Yes > strict locking = No > share modes = Yes > copy > include > exec > preexec close = No > postexec > root preexec > root preexec close = No > root postexec > available = Yes > volume > fstype = NTFS > set directory = No > wide links = Yes > follow symlinks = Yes > dont descend > magic script > magic output > delete readonly = No > dos filemode = No > dos filetimes = No > dos filetime resolution = No > fake directory create times = No > vfs object > vfs options > msdfs root = No > > [homes] > comment = Home Directories > read only = No > browseable = No > > [printers] > comment = All Printers > path = /var/spool/samba > create mask = 0700 > guest ok = Yes > printable = Yes > print command = lpr-cups -P %p -o raw %s -r # using client side > printer drivers. > browseable = No > > [print$] > path = /var/lib/samba/printers > write list = @adm root > guest ok = Yes > > [pdf-generator] > comment = PDF Generator (only valid users) > path = /var/tmp > printable = Yes > print command = /usr/share/samba/scripts/print-pdf %s ~%u //%L/%u %m > %I "%J" & > > [public] > comment = Public Stuff > path = /backup/samba-public > read only = No > guest ok = Yes >