topic Enforce password in Samba Share in Operating System - Linux

Enforce password in Samba Share

'chris' — Sat, 28 Nov 2009 20:59:21 GMT

hi

Howto configure Samba to enforce password question (input field)
by connecting from Windows XP to a Samba Share?

my smb.conf:

[global]
socket options=TCP_NODELAY
workgroup=DOM
local master=no
realm=*
printing=lprng
winbind enum groups=yes
idmap gid=96000-196000
passdb backend=smbpasswd
server string=storage
security=user
idmap uid=10000-110000
printcap name=/usr/syno/etc/printcap
load printers=yes
winbind enum users=yes

[support]
invalid users=nobody,nobody
valid users=nobody,cc,@pw group,linux,admin,Administrator,nobody
comment=""
path=/volume1/support
guest ok=yes
browseable=yes
ftp write only=no
read list=nobody,nobody
write list=nobody,@pw group,admin,Administrator,cc,linux,nobody
writeable=yes

Now I'm getting this error insted of input field:

Re: Enforce password in Samba Share

'chris' — Sat, 28 Nov 2009 22:01:37 GMT

I have Samba Version 3.0.20b

Re: Enforce password in Samba Share

Vitaly Karasik_1 — Sun, 29 Nov 2009 08:38:51 GMT

first, I suggest to clean your users lists - for example, you have "nobody" in all invalid, RO and RW users lists.

second, did you create Samba password file and add all users to it?

Re: Enforce password in Samba Share

'chris' — Wed, 09 Dec 2009 20:45:28 GMT

I've cleaned "nobody", but it doesn't help.

This is quite a strange problem.

At some XP Prof. SP3 workstations asks for user and password and on some others not.
ALL XP workstations are on the same subnet and windows firewalls are disabled.
I think there is a problem of XP settings, but where?

Re: Enforce password in Samba Share

Vitaly Karasik_1 — Thu, 10 Dec 2009 09:23:25 GMT

I don't remember details, but I guess that MS Windows stores user's credentials somethere when user logged in.
Is reboot client boxes change something? I mean, may be some windows don't ask for password because user already provided it?

Re: Enforce password in Samba Share

'chris' — Tue, 15 Dec 2009 00:33:28 GMT

Reboot client boxes doesn't change anything.
At some boxes, after Restart I'm still getting this error:

"NOT ACCESSIBLE YOU MIGHT NOT HAVE PERMISSION..."

This is a really strange problem.

Re: Enforce password in Samba Share

Vitaly Karasik_1 — Tue, 15 Dec 2009 14:13:46 GMT

may be it's plaintext vs. encrypted-only password issue?
see http://mclewin.com/node/54 for registry hack and http://www.oculon.org/hijinx/linux/samba.htm for details

Re: Enforce password in Samba Share

'chris' — Tue, 15 Dec 2009 15:10:56 GMT

this link:

http://mclewin.com/node/54

doesn't work.

BTW why should I change Samba configuration?
Some XP workstaions don't denied this connection and I'm getting user and password fields.

XP firewall is everywhere disabled.
All XP workstaions are on the same LAN with same network configuration settings.

Re: Enforce password in Samba Share

Steven E. Protter — Tue, 15 Dec 2009 20:16:34 GMT

Shalom,
PSB

this link:

http://mclewin.com/node/54

doesn't work.
>>What is the error. Can you browse into http://mclewin.com/ ?

Why would you expect this to work via http when we're talking about a samba server?
<<

BTW why should I change Samba configuration?
Some XP workstaions don't denied this connection and I'm getting user and password fields.

XP firewall is everywhere disabled.
All XP workstaions are on the same LAN with same network configuration settings.

>>
For the XP workstations to access a samba share, access must be configured in the smb.conf file. The Samba service must be running.

No where in this question do I see any reason for a browser to work.

SEP

Re: Enforce password in Samba Share

Vitaly Karasik_1 — Wed, 16 Dec 2009 09:07:49 GMT

weird - link works for me.

but in short - it speaks about registry fix for Windows, which allows to Windows send plain-text password:

Configuring Windows 200/XP to authenticate with Samba (plain text password) Registry setting to enable Windows XP/2000 to authenticate against Samba with plain text passwords.

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\LanmanWorkStation\Parameters]
"EnablePlainTextPassword"=dword:00000001

I suggest you to compare this registry key value in 2 Windows clients - one which can login to samba and another which cannot. If they different - this is the case.

Re: Enforce password in Samba Share

'chris' — Thu, 17 Dec 2009 00:57:26 GMT

Sorry this is not, ALL XP clients have the following registry entry:

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\LanmanWorkStation\Parameters]
"EnablePlainTextPassword"=dword:00000000

Re: Enforce password in Samba Share

Steven E. Protter — Thu, 17 Dec 2009 22:34:52 GMT

Shalom,

Vitaly asked you to check this:

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\LanmanWorkStation\
Parameters]
"EnablePlainTextPassword"=dword:00000001

You say:

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\LanmanWorkStation\
Parameters]
"EnablePlainTextPassword"=dword:00000000

Is in the registry. Is this a typo, cut and paste error or is there really a difference. You might if there is a difference try changing the registry key on one of the workstations and see if this helps.

SEP

Re: Enforce password in Samba Share

'chris' — Sun, 20 Dec 2009 17:06:25 GMT

There are no difference.
On ALL XP workstations I have the same reistry settings.
The error print screen I've attached in my first posting.