Trusted System and Samba

[Mark Fenton]

Haven't seen this one discussed, or even referenced -- is Samba compatible with trusted system?

We are looking at trusted system to handle some of the security goals we have (user account lockout for failed password attempts, password history and triviality, user auditing) but have requirements for both Samba host and client access to and from the UNIX.

Any insights or directions to where to find info appreciated.

[Jonathan Kamminga]

Hi Mark,

I picked up this pdf earlier this year:

http://de.samba.org/samba/docs/Samba-HOWTO-Collection.pdf

Chapter 15 & 16 may be of interest to you...

Rgds,

Jon.

[Jonathan Kamminga]

Mark,

Looks like this link is broken now, try this one:

http://us1.samba.org/samba/docs/Samba-HOWTO-Collection.pdf

Rgds,

Jon.

[Mark Fenton]

Good link -- I had thought to look on the Samba web site, but was hoping that HP had some specific documentation on the topic that would be helpful.

The link you provided doesn't really address the issue that I'm asking, though.

The issue is that we want to get some of the login and user tracking/control features of HP-UX Trusted System, but so far as I know, CIFS-9000, the HP version of Samba 2.x uses NIS to do a bunch of its work. And as NIS doesn't run under trusted system, this potentially prevents our using CIFS-9000 if we go to 'Trusted system'. Hmmm.

Any other ideas?

[Steven E. Protter]

Real Life:

We do it here

3 of the 4 systems I manage are trusted and all 4 systems are running cifs/9000 with shares avaialble.

We have not intergrated the setup into our Primary Domain controller, so we used the smbpasswd -a to set up the users.

One quirk: When the main password expires the old samba password does not. If you want those to change integrate with a PDC or rum the smbpasswd command on a regular basis.

It works nice, no problems no issues, no errors.

To directly deal with your issues you will probably need to intergrate with a domain controller based on the experience posted above.

SEP

[John Kittel]

We are running samba on two of our HP-UX 11i systems, serving file shares to our Windows NT domain PCs. Samba set up to do Domain authentication against our Windows domain controllers ( user logs in on PC to domain, the Samba shares for which the user is enabled are automatically available to the user without re-authenticating). Works great. I learned how to do that with just the standard Samba documentation that comes with the distribution.

[John Kittel]

forgot to mention, our HP-UX systems are trusted.

[Mark Fenton]

Thanks, Steve. I only have the one, lonely UNIX box in a Windows Desert, so it's hard to test much before I implement it.

I just was remembering how much trouble I had when the Windows Admin here switched the DNS server to a different box, and the errors I got in trying to go the opposite direction (UNIX to Windows using cifsclient).

Thank you all for your assistance.

[Darren Prior]

Hi Mark,

I believe you may have got a little confused - CIFS has ties with NFS rather than NIS ;)

As others have stated, there shouldn't be a problem running CIFS on a trusted box. I also run a trusted CIFS server as a test box.

regards,

Darren.

[Bharat Katkar]

Hi,
See if this helps.


http://lists.samba.org/archive/samba/1999-October/015043.html

Regards,