Peter Petrov
2008-Oct-12 21:13 UTC
[Samba] Multiple Samba accounts with the rights of a single Unix account?
Is it possible to have a standalone Samba server map different username/password pairs to a single Unix account? More specifically, I'll be using an external passdb (pdb-mysql or LDAP), and each username will only see a home directory with the same name. But I don't want to have to create a separate Unix account / UID for each username/password, the restriction by directory is enough. Instead, a single Unix account will be given rights to access all home directories, and I want Samba to use it for all username/password pairs. Is such a setup possible? The 'username map' option is not suitable, because the username is translated prior to authentication, so all usernames would share the same password.
Norberto Bensa
2008-Oct-13 01:42 UTC
[Samba] Multiple Samba accounts with the rights of a single Unix account?
Quoting Peter Petrov <lists@ppetrov.com>:> Is it possible to have a standalone Samba server map different > username/password pairs to a single Unix account?force user/group? ---------------------------------------------------------------- This message was sent using IMP, the Internet Messaging Program.
Peter Petrov
2008-Oct-15 01:50 UTC
[Samba] Multiple Samba accounts with the rights of a single Unix account?
On Mon, Oct 13, 2008 at 4:35 AM, Norberto Bensa <nbensa@gmail.com> wrote:> Quoting Peter Petrov <lists@ppetrov.com>: > > Is it possible to have a standalone Samba server map different >> username/password pairs to a single Unix account? >> > > force user/group? >"force user/group" almost works. But smbd still tries to find a matching Unix account for each username, failing with errors like this: [2008/10/15 04:29:42, 0] passdb/pdb_get_set.c:pdb_get_group_sid(210) pdb_get_group_sid: Failed to find Unix account for admin [2008/10/15 04:29:42, 1] auth/auth_util.c:make_server_info_sam(562) User admin in passdb, but getpwnam() fails! Any ideas?
Paul Venzke
2008-Oct-15 02:35 UTC
[Samba] Multiple Samba accounts with the rights of a single Unix account?
On Tue October 14 2008 20:49, Peter Petrov wrote:> On Mon, Oct 13, 2008 at 4:35 AM, Norberto Bensa <nbensa@gmail.com> wrote: > > Quoting Peter Petrov <lists@ppetrov.com>: > > > > Is it possible to have a standalone Samba server map different > > > >> username/password pairs to a single Unix account? > > > > force user/group? > > "force user/group" almost works. But smbd still tries to find a matching > Unix account for each username, failing with errors like this: > > [2008/10/15 04:29:42, 0] passdb/pdb_get_set.c:pdb_get_group_sid(210) > pdb_get_group_sid: Failed to find Unix account for admin > [2008/10/15 04:29:42, 1] auth/auth_util.c:make_server_info_sam(562) > User admin in passdb, but getpwnam() fails! > > Any ideas?Will a username map file work for what you want? Look in manual for the parameter "username map=" in smb.conf. -- Paul
Norberto Bensa
2008-Oct-15 02:37 UTC
[Samba] Multiple Samba accounts with the rights of a single Unix account?
Quoting Peter Petrov <ppetrov@ppetrov.com>:> On Mon, Oct 13, 2008 at 4:35 AM, Norberto Bensa <nbensa@gmail.com> wrote: > >> Quoting Peter Petrov <lists@ppetrov.com>: >> >> Is it possible to have a standalone Samba server map different >>> username/password pairs to a single Unix account? >>> >> >> force user/group? >> > > "force user/group" almost works. But smbd still tries to find a matching > Unix account for each username, failing with errors like this: >Well, yes. Samba needs to map each username to a unix uid. I've re-read your original post and AFAIK, what you want to do is not possible. You'll still need to create the unix users. ---------------------------------------------------------------- This message was sent using IMP, the Internet Messaging Program.