topic Re: Secure Samba share in Operating System - HP-UX

Secure Samba share

Aji Thomas — Wed, 10 May 2006 02:20:34 GMT

Hi Guys,

I have samba share configured with security=server on HP-UX box. And we have configured the password servers which are windows machines for login authentication.

---------------------------------------
# Global parameters
[global]
workgroup = DOMAIN_NAME
server string = Samba Server
security = SERVER
password server = kddserver1
syslog = 0
log file = /var/opt/samba/log.%m
max log size = 1000
local master = No
read only = No
short preserve case = No
dos filetime resolution = Yes

[hht]
comment = HHT Share
path = /ksis/hht
guest ok = Yes

[maximo]
path = /appcon4/
valid users = oracl
----------------------------------------

The issue is that maximo share is secured by specifying oracl is the valid user. But htt is a open share by setting guest ok to yes.

But the issue is when we try to access the resource //hpmachine or //hpmachine./hht it prompts for ussername/password. But we just require authentication only while accessing //hpmachine/maximo

Please advice since we are in production. When we put back security=share it starts working, but then we are unable to secure with password //hpmachine/maximo.

Thanks and regards,
AJi

Re: Secure Samba share

Steven E. Protter — Wed, 10 May 2006 02:29:04 GMT

Shalom,

You need to run a
net join

command on this server. This will require authentication credentials for an admin user on the windows machine.

Also check the WINS server information.

You may need a machine account for the hp machine on the domain as well.

SEP

Re: Secure Samba share

Aji Thomas — Wed, 10 May 2006 03:07:13 GMT

Hi,

We dont have this hp-ux machine joined to our windows domain. So we dont prefer to do a net join. we havent specified wins server. Is it required. We have no issues if the security is set to share. But then we cannot secure that maximo folder.

Please advice,
AJi

Re: Secure Samba share

Aji Thomas — Wed, 10 May 2006 04:19:36 GMT

Hi Guys,

Once security=server is set, is there a way for accessing resouces on the same box which is a open share. It should'nt prompt for username/password in any case.

On one server we noticed that once security=server is set, accessing the resource within our domain was fine, but while accessing from other domain/remote site, which works normal with share mode, requests for username/password.

Please advice at the earliest since we are live.
AJi

Re: Secure Samba share

Ivan Ferreira — Wed, 10 May 2006 08:37:04 GMT

Try using these configuration parameters:

guest account = nobody
map to guest = Bad User

Re: Secure Samba share

Aji Thomas — Wed, 10 May 2006 08:41:48 GMT

Hi,

Thanks for the update,
It works with
map to guest = Bad User
and not when
guest account = nobody
is set.

Thanks for the support,
AJI

Re: Secure Samba share

Geoff Wild — Wed, 10 May 2006 09:03:06 GMT

Add the following share:

[IPC$]
path = /tmp
valid users = list users here
# or allow all
hosts allow = 192.168.1.0/21, 127.0.0.1
hosts deny = 0.0.0.0/0

Just modify the ip address/class for your environment.

Rgds...Geoff