CIFS "cookbook"

[Tommy Brown]

I am having a hard time configuring (figuring it out) CIFS 9000 on my new server. I have never worked with samba. I am trying to share a file system "GIS" to a group of users, I can use their Unix login or their NT login to control access, it doesnt matter. I will not do any printing from samba. There are two kinds of users. Some can write/change and others are readonly. Does anyone have s simplified procedure that covers my scenario.
TIA
Tommy

[Joseph T. Wyckoff]

I have never used CIFS either...

However, there is probably a documents directory with some PDF (Adobe Acrobat) documentation.

The document I looked at a few days ago (in CIFS for UX 11i) seemed fairly well laid out, and comprehensive.

[Tommy Brown]

Thanks Joseph,
I looked at that, but I didnt make much sense out of it.
I can get to my unix home directory, readonly. but I still could not see the gis directory.
Tommy

[John Bolene]

Since you can get to your home directory, you are most of the way there.

I suppose you are using the Web Admin Tool. It makes a tough job easy. Just go into it and add the file system that you want to share and a share name. You then have to stop and restart the SMB daemon and wait a bit for the share to be known on the network.

[Joseph T. Wyckoff]

You may find the information here more, bettter, worse, or different... but probably worth a look.

http://docs.hp.com/hpux/netcom/index.html#CIFS/9000

[Joseph T. Wyckoff]

If you do a search of the forum - you can also check the checkbox for manuals... I got plenty of hits just looking at the word CIFS.


Related searches might include SMB, SAMBA, Server Message Blocks, LMX, LM/X, Lan Manager for Unix, ASU, Advanced Server for Unix

Some of this knowledge will be older knowledge, and the tools will doubtless have changed (I mean improved) over time - and some, like the Lan Manager stuff will be pretty close to antique... but may be relevant in the absence of live, competent help.

Good Luck.

[Stefan Schulz]

Tommy:

for a good documentation/reference you should have a look at http://www.oreilly.com/catalog/samba/noframes.html. This is about the best book on samba and you can download it for free (as html or pdf).

As your samba is up and running this is just a configuration problem. Please post your configuration file here. If we can have a look at, we might figure out whats wrong.

If you have a Windows NT domain, you can use this domain for access control. In the general section put security to domain and put your PDC and BDC in the password server. But this is also described in the book mentioned above.

Regards Stefan

[Tommy Brown]

Thanks for the input I have attached my smb.conf. I can see the folders but cannot copy to any but tmp. John, Thanks for the SWAT tip. I had to download the Apache Web server but it helps a littl. Stephen, Using the NT domin fo ruser validation would be great. I cannot seem to get a grip on the passwd/ user authentication. Any pointers/solutions would be extremely appreciated.
Thanks again, Tommy
PS to Joseph. I accessed a lot of the documents you mentioned, but could not grasp the concept much less the mechanics of the configuration.
Tommy

[Stefan Schulz]

Tommy:

here are some configurations from our smb.conf file. These should help you configuring your password server and perhaps fix the problem with the shared directories:

[global]
workgroup = Workgroup
netbios name = UXSERVER
server string = Sambaserver auf UXSERVER
interfaces = 172.16.10.1/255.255.0.0
security = DOMAIN
encrypt passwords = Yes
password server = serv1, serv2, serv3
wins server = 172.16.50.2
guest account = guest
create mask = 0777
directory mask = 0777
hosts allow = 172.16.

[CADTRANSFER]
comment = Transfer CAD - Windows
path = /cadtransfer
writeable = Yes
guest ok = Yes
hosts allow = 172.16.

the encrypt password is necessary for NT with Servicepack 3 and above. serv1 is our PDC serv2 and serv3 are BDC's. Security to domain and not to server is important.

Hope this helps

Regards Stefan

[Stefan Schulz]

Tommy:

here are some configurations from our smb.conf file. These should help you configuring your password server and perhaps fix the problem with the shared directories:

[global]
workgroup = Workgroup
netbios name = UXSERVER
server string = Sambaserver auf UXSERVER
interfaces = 172.16.10.1/255.255.0.0
security = DOMAIN
encrypt passwords = Yes
password server = serv1, serv2, serv3
wins server = 172.16.50.2
guest account = guest
create mask = 0777
directory mask = 0777
hosts allow = 172.16.

[CADTRANSFER]
comment = Transfer CAD - Windows
path = /cadtransfer
writeable = Yes
guest ok = Yes
hosts allow = 172.16.

the encrypt password is necessary for NT with Servicepack 3 and above. serv1 is our PDC serv2 and serv3 are BDC's. Security to domain and not to server is important.

Hope this helps

Regards Stefan

[Stefan Schulz]

Tommy:

here are some configurations from our smb.conf file. These should help you configuring your password server and perhaps fix the problem with the shared directories:

[global]
workgroup = Workgroup
netbios name = UXSERVER
server string = Sambaserver auf UXSERVER
interfaces = 172.16.10.1/255.255.0.0
security = DOMAIN
encrypt passwords = Yes
password server = serv1, serv2, serv3
wins server = 172.16.50.2
guest account = guest
create mask = 0777
directory mask = 0777
hosts allow = 172.16.

[CADTRANSFER]
comment = Transfer CAD - Windows
path = /cadtransfer
writeable = Yes
guest ok = Yes
hosts allow = 172.16.

the encrypt password is necessary for NT with Servicepack 3 and above. serv1 is our PDC serv2 and serv3 are BDC's. Security to domain and not to server is important.

Hope this helps

Regards Stefan

[Stefan Schulz]

forgot to mention the workgroup has to be the name of your domain.

Sorry for this doublepost, but there has been a 404 error again and i tried to reload the document, which actually repostet my reply.

[Tommy Brown]

Thanks, Stefan
A little progress, I still cannot copy or move data into the share. Also, Win 95 users cannot login (minor point all the operational users are NT) I am not sure of any other functional isses yet. I appreciate your help.
Tommy

[Sandra Skinner · Accepted solution]

Tommy,
I looked at your smb.conf file. It appears that you may be trying to use domain level security. If you are, you need to be using

valid users =

instead of username =

The username = is used for share level security.

Hope this helps.

[Craig Rants]

Tommy,
Have your Win95 users applied the registry edit to allow the password encyrption/non-encryption to work? The "Using Samba" documentation presented earlier in your thread should tell you all you need to know that.

GL,
C

[Tommy Brown]

Thanks, Sandra,
We have abandoned CIFS/SAMBA and I had forgotten abouth this thread. I am giving you the points for your answer. We did try domain securiity amongst others, but never really could get it off the ground.
Thanks again,
Tommy