> Hi Joshua,
> I think that if the client workstation has not joined a domain, then it
> will
> simply ask for a valid username/password combination for that share in
> order
> to try and access it's content.
>
The machines have a valid machine account, and i have thought of this
possibility too and re-joined them in the domain. When accessing a share
for which he is authorised there is no problem and no box show up on the
client. Just when he tries to access a non-authorised share.
Might it have something to do with the fact that the user is in more then
one domaingroup? for example group users and group employees?
ps i never had this problem with samba 2.2 using smbpasswd as backend.
> Maybe it would be best not to show the share at all except for valid
> users.
> Something like:
> --begin------------------------------
> [example]
> comment = example
> path = /example
> create mask = 0760
> browseable = no
> valid users = @allowedusers2
> read only = No
> wrtie list = @allowedusers2
> --end------------------------------------
>
> This way you won't have to worry about message boxes and stuff like
that.
> If
> the user is not in the valid list, the share shouldn't even show up.
>
> Hope it helps.
>
> Cheers,
> David
>
> El Martes, 5 de Julio de 2005 10:14, J. van Santen escribi?:
>> Hi,
>>
>> I got a problem with accessing some share's on my samba PDC
(3.0.14)
>> When a user tyr to access a share for which he is not authorised a box
>> show up to suplly a name and password to access the share.
>> Why doesnt the user get a box with 'access denied'?
>> When u supply a username (DOMAINNAME\USERNAME) and password which is
>> authorised for the share u get the message: 'SERVERNAME\SHARENAME
access
>> denied. the credential supplied conflict with a existing set of
>> credentials'
>>
>> What could be the problem?
>> Im using samba 3.0.14 with tdbsam as backend. security is set to user.
>> an example of a share defined in smb.conf:
>> [example]
>> comment = example
>> path = /example
>> invalid users = user1
>> read only = No
>>
>> I hope someone can give me the answer
>>
>> Joshua
>
>