samba - Jun 2008 - Vista VPN machines having trouble getting into Samba shares.

Trouble with VPN authentication


Hello all

Here is the scenario:

Linux/Samba is a domain member on a Windows NT domain. ADS authentication is
used.

Users are connecting via VPN managed by Windows Remote Access and Routing. 

Shares are managed by Groups. Windows server handles DNS/WINS. Samba is pointing
to WINS server.

The issue:

Users with Vista cant get into shares. Users with XP are fine.

The shares look like this:

[Secure]
path = "/share/Secure"
valid users = @"DOMAIN+users", @"DOMAIN+admins", 
browseable = yes
writeable = yes
create mask = 2770
security mask = 2770


[Primary]
path = "/share/Primary"
valid users = @"DOMAIN+users"
browseable = yes
writeable = yes
create mask = 2770
security mask = 2770


The Vista VPN users can get in the "Primary" share but cant get into
the "Secure" share. 
>From an XP VPN, this same user can get into both shares. 
On the local area network he can get into both shares. 

Wins is handled by a windows machine and its IP is entered in the VPN connection
properties.

So my question is what would cause a denial of access to the Secure share? 

Is there any special parameters that need to be added to help support Vista? 

Thanks

Corporate Security, Data Security, ESI
Tampa computer crime, forensic, security experts, E-Discovery.
http://a8-asy.a8ww.net/a8-ads/adftrclick?redirectid=cab7433e531508b2fc2308cbc8d9cbf9


-- 
Powered by Outblaze