samba - Aug 2008 - Removing account/passwd synchronization requirement

I have a basic samba server up and running. My XP clients I can only 
connect to the samba share if have identical account names / passwds on 
both the XP client and the linux server. How can I eliminate this 
requirement so that an XP user can log into any valid account on the 
linux server and connect to the samba share ?

Thanks
Henry

what is your smb.conf?

Henry S wrote:
> I have a basic samba server up and running. My XP clients I can only 
> connect to the samba share if have identical account names / passwds 
> on both the XP client and the linux server. How can I eliminate this 
> requirement so that an XP user can log into any valid account on the 
> linux server and connect to the samba share ?
>
> Thanks
> Henry

Hi all,

I have just noticed the following situation:

Our NT4-style domain users are often (not always) seen by Windows XP as 
members of

Domain Users and
Domain Guests and
Domain Admins and
Domain Computers

although they are definitely only members of "Domain Users". This
gives
us a security problem as "Domain Admins" become local Administrators. 
They are no real "Domain Admins", i.e. there is no problem for the 
domain functions.

Our environment is:
Samba 3.0.24 PDC (Suse Linux 10.0) [cannot upgrade at the moment}
Samba 3.2.1  BDC (Suse Linux 10.3)
Win XP Pro SP3 clients
Database on PDC and BDC is OpenLDAP (replication on BDC).

I could track this down to the following: If I turn off Samba on the 
BDC, everything (after logoff/logon) is ok.  Analyses with "Wireshark"
and "Process Monitor" show that only if a client retrieves information
from the BDC, things go wrong.

N.B. The same problem existed when the BDC was at Samba 3.026a.

Thanks in advance for ideas and help
Peter Rindfuss

As I see it, you have (at least?) 2 options:

1) Set up Samba as a Domain Controller so that your XP machines can be
authenticated via the Samba server by joining the domain. The Samba DC
then holds the master user list.

2) I'm assuming in this case that you'd simply like to use a different
user name than the logged-in user to access shares, etc on the Samba
machine. In XP, under the "User Accounts" dialog off Control Panel,
there's a "Manage Passwords" option on the "Advanced"
tab that lets you
set up a username/password combo when accessing a remote machine.

Jeremy
> -----Original Message-----
> From: samba-bounces+jeremy.evans=pertronic.co.nz@lists.samba.org
> [mailto:samba-bounces+jeremy.evans=pertronic.co.nz@lists.samba.org] On
> Behalf Of Henry S
> Sent: Tuesday, 12 August 2008 16:36
> To: samba@lists.samba.org
> Subject: [Samba] Removing account/passwd synchronization requirement
> 
> I have a basic samba server up and running. My XP clients I can only
> connect to the samba share if have identical account names / passwds
on
> both the XP client and the linux server. How can I eliminate this
> requirement so that an XP user can log into any valid account on the
> linux server and connect to the samba share ?
> 
> Thanks
> Henry
> --
> To unsubscribe from this list go to the following URL and read the
> instructions:  https://lists.samba.org/mailman/listinfo/samba
> 
> Scanned by Bizo Email Filter