samba - Mar 2016 - Add domain defauts to WORKGROUP if not specified

We currently are running smbclient 4.0.7. Users need to add domain name or
"\" before username for authentication to succeed. Otherwise,
smbclient prepends WORKGROUP\ to username.

In a particular environment, "WORKGROUP\username" does not have access
to the user's home directory.

If we add "workgroup =" parameter in smb.conf file, it now passes. Is
it valid to always to specify a "" workgroup value in the config file
? Does that have other concequences ?

Mike

Hi,

You don't tell us too much about your environment...

In AD mode workgroup = <string> refers to short domain name.
In AD mode a user can be represented using two forms:
<username> or <short domain name>\<username>

If you are running samba in AD mode, as says the man page of smb.conf:
       workgroup (G)

           This controls what workgroup your server will appear to be in
when queried by clients. *Note that this parameter also controls the Domain
name used with the security = domain setting.*

           Default: workgroup = WORKGROUP

           Example: workgroup = MYGROUP

It seems in AD mode workgroup is not optional.

Regarding other consequences, MS Windows uses a lot domain short name, so...


2016-03-10 17:37 GMT+01:00 Tompkins, Michael <Michael.Tompkins at
xerox.com>:
> We currently are running smbclient 4.0.7. Users need to add domain name or
> "\" before username for authentication to succeed. Otherwise,
smbclient
> prepends WORKGROUP\ to username.
>
> In a particular environment, "WORKGROUP\username" does not have
access to
> the user's home directory.
>
> If we add "workgroup =" parameter in smb.conf file, it now
passes. Is it
> valid to always to specify a "" workgroup value in the config
file ? Does
> that have other concequences ?
>
> Mike
>
> --
> To unsubscribe from this list go to the following URL and read the
> instructions:  https://lists.samba.org/mailman/options/samba
>

On 10/03/16 16:37, Tompkins, Michael wrote:
> We currently are running smbclient 4.0.7. Users need to add domain name or
"\" before username for authentication to succeed. Otherwise,
smbclient prepends WORKGROUP\ to username.
>
> In a particular environment, "WORKGROUP\username" does not have
access to the user's home directory.
>
> If we add "workgroup =" parameter in smb.conf file, it now
passes. Is it valid to always to specify a "" workgroup value in the
config file ? Does that have other concequences ?
>
> Mike
>
If you don't add the 'workgroup =' line to smb.conf, then Samba
users
the default, which is 'workgroup = WORKGROUP'. You can test this by 
commenting out the workgroup line in smb.conf (if it is there) and then 
running 'testparm -v', this will show all the default options as well as
the ones you have added.

Rowland