topic Re: CIFS server configuration in Operating System - HP-UX

CIFS server configuration

yash123 — Thu, 13 Nov 2008 11:30:04 GMT

Hi All,
Have configured samba server to share hp ux directory in windows macihne.
while connecting to samba server from windows xp i am able to view shared unix directories, while opening(double clik) particular folder getting dialogbox asking for Guest password.
user name column is deactive so I cant enter my own user name.

Kindly advice me on this

thnaks in advance
Yash

Re: CIFS server configuration

Ganesan R — Thu, 13 Nov 2008 12:09:03 GMT

Hi,

Have you created smbpasswd file and added the user accounts.

if not follow the steps to create it.

Create a password file :

# touch /var/opt/samba/private/smbpasswd
# chmod 500 /var/opt/samba/private
# chmod 600 /var/opt/samba/private/smbpasswd

#/opt/samba/bin/smbpasswd -a username

# /opt/samba/bin/smbpasswd -a vantive -> Here vantive is user name
New SMB password:
Retype new SMB password:
User vantive does not exist in system password file (usually /etc/passwd). Cannot add account without a valid local system user.
Failed to modify password entry for user vantive

Here samba account failed because the user vantive is not there in unix accounts

#/sbin/init.d/samba start

Re: CIFS server configuration

yash123 — Thu, 13 Nov 2008 12:17:27 GMT

Hi Ganesh,
have done all these steps already.
while connecting default login name is Guest
and cant change login name.
Please see attached screen shot

thnaks
Yash

Re: CIFS server configuration

Jayan Nair — Fri, 14 Nov 2008 07:08:37 GMT

Hi Gurus,

Please help me on this issue.
Will assign points!

Re: CIFS server configuration

Johnson Punniyalingam — Fri, 14 Nov 2008 07:37:58 GMT

Hi Try,

//user:password@9.124.102.219

Thx
Johnson

Re: CIFS server configuration

Jayan Nair — Fri, 14 Nov 2008 09:55:31 GMT

Hi Jhonson

Cant login on that way also

Re: CIFS server configuration

eric roseme — Fri, 14 Nov 2008 21:56:08 GMT

post your smb.conf. You have an authentication problem - either with how you are configuring guest access, or how your logon user is authenticated.

For guest, there are several ways to setup access. Do a "testparm -s -v | grep guest" and look at the guest parms - you need "guest account" and "guest ok". Get into SWAT and press help on these global attributes and read how to set them. CIFS sets "guest account = smbnull" by default - you'll never logon as guest.

If you are not trying to logon as guest, then your auth-n is messed up and you have to figure out why. The smb.conf posting will help. I probably will not be able to come back here until Monday, tho.

Good luck.

Eric

Re: CIFS server configuration

Jayan Nair — Mon, 17 Nov 2008 07:29:56 GMT

Hi Eric,
Thanks for your sugession.
Have attahced samba configuration

Re: CIFS server configuration

Matti_Kurkela — Mon, 17 Nov 2008 08:19:35 GMT

See the description of Samba username/password validation at:
http://us1.samba.org/samba/docs/man/manpages-3/smb.conf.5.html#VALIDATIONSECT

You're using "security=share". This is a method that is not native to HP-UX nor Windows XP: it's the method used by Windows 9x and older.

At the moment, there is no "user" or "username" directives anywhere in your smb.conf.

When "security=share" is used, the client never explicitly sends the username it wants to use when connecting. You must use Samba's "username" (or equivalently "user") configuration directive to list the users that might be using this service. Samba will try to match the supplied password with each listed user: if the password matches AND the user is listed in the "valid users = " setting for the share, access is allowed.

From the smb.conf man page:
---------------
The username line is not a great solution in many cases as it means Samba will try to validate the supplied password against each of the usernames in the username line in turn. This is slow and a bad idea for lots of users in case of duplicate passwords. You may get timeouts or security breaches using this parameter unwisely.
----------------

In most cases, the setting "security = user" works more reliably and is easier to understand than "security = share".

(In my opinion, using "security = share" is just stupid unless your server must work with DOS/Win3.11/Windows 9x machines which cannot do anything better.)

If you insist on using "security=share", you'll need to add "user=root test1 jayan" to the settings of your test share. Yes, it means that the same usernames are listed twice: once in "user=" and another time in "valid users=".

But I recommend switching to "security=user" instead.

MK

Re: CIFS server configuration

yash123 — Mon, 17 Nov 2008 08:44:33 GMT

Hello MK,

Thanks......
The issue is solved.
Thanks all..