Steve Blackwell
2005-Dec-24 06:18 UTC
[Samba] Do users have to have accounts on a Samba server to map drives?
I know this may be a very simple question but I cant seem to find the answer in the O'Reilly Samba book or from Google. When using Samba 2 (actual version 2.2.12) we had W2K domain users authentication via the ADS to access Samba shares. The W2K users did not actually have Unix accounts on the Samba server, we used the users.map file to map the W2K account name to a guest Unix account. Running Samba 3 (actual version 3.0.14a) this process does not to seem to work the following error message appears in the log files. [2005/12/22 09:14:25, 2] lib/access.c:check_access(322) Allowed connection from (172.26.178.164) [2005/12/22 09:14:25, 0] auth/auth_util.c:make_server_info_info3(1195) make_server_info_info3: pdb_init_sam failed! [2005/12/22 09:14:25, 2] auth/auth.c:check_ntlm_password(310) check_ntlm_password: Authentication for user [darwin] -> [ftp] FAILED with error NT_STATUS_NO_SUCH_USER [2005/12/22 09:14:25, 2] smbd/sesssetup.c:setup_new_vc_session(608) setup_new_vc_session: New VC == 0, if NT4.x compatible we would close all old resources. [2005/12/22 09:14:25, 2] smbd/sesssetup.c:setup_new_vc_session(608) setup_new_vc_session: New VC == 0, if NT4.x compatible we would close all old resources. [2005/12/22 09:14:25, 0] auth/auth_util.c:make_server_info_info3(1195) make_server_info_info3: pdb_init_sam failed! [2005/12/22 09:14:25, 2] auth/auth.c:check_ntlm_password(310) check_ntlm_password: Authentication for user [darwin] -> [ftp] FAILED with error NT_STATUS_NO_SUCH_USER [2005/12/22 09:24:54, 2] smbd/server.c:exit_server(609) Closing connections The only way I found to get the users to mount a Samba share is to create a Unix account. I don't particularly want to create 600 Unix account for users to access a couple of shares. Does anyone know how to get Samba 3 to act the same as Samba 2? Cheers Steve
Andrew Bartlett
2005-Dec-24 06:31 UTC
[Samba] Do users have to have accounts on a Samba server to map drives?
On Thu, 2005-12-22 at 14:54 +0000, Steve Blackwell wrote:> I know this may be a very simple question but I cant seem to find the > answer in the O'Reilly Samba book or from Google. > > When using Samba 2 (actual version 2.2.12) we had W2K domain users > authentication via the ADS to access Samba shares. The W2K users did not > actually have Unix accounts on the Samba server, we used the users.map > file to map the W2K account name to a guest Unix account.> The only way I found to get the users to mount a Samba share is to create > a Unix account. I don't particularly want to create 600 Unix account for > users to access a couple of shares.The best option is to use winbindd, and it will cause the windows accounts to appear on the unix server.> Does anyone know how to get Samba 3 to act the same as Samba 2?Increases in correctness have caused some changes, but given the suggested mapping to 'ftp' above, perhaps you want the 'map to guest bad user' option? I think there is another one for doing the same for authenticated users... Andrew Bartlett -- Andrew Bartlett http://samba.org/~abartlet/ Authentication Developer, Samba Team http://samba.org Student Network Administrator, Hawker College http://hawkerc.net -------------- next part -------------- A non-text attachment was scrubbed... Name: not available Type: application/pgp-signature Size: 189 bytes Desc: This is a digitally signed message part Url : http://lists.samba.org/archive/samba/attachments/20051224/590eecbe/attachment.bin