Samba and Windows

[Ed Bullard]

I have been working with Samba for only a couple of days now and need help so my knowledge is limited. I have just a basic Samba setup running on HP-UX 11.23 and several Windows Server that need to connect to it. On all of the server running Windows Server 2003 I can connect without any problems. On my servers running Windows Server 2000 I get connected but it rejects the user. I have tried changing the registry entries to allow plain text passwords and set the encrypt passwords to yes in the smb.conf. Below is an extract of the log file and the smb.conf file. All of the servers are on the same subnet so I don't think that networking is the issue, but I may be wrong.

Any assistance would be greatly Appreciated.

==============================================
[2005/09/29 08:50:11, 1] smbd/reply.c:reply_sesssetup_and_X(1037)
Rejecting user 'bull': authentication failed

==============================================
[global]
server string = %h Samba %v
allow hosts =
security = user
encrypt passwords = yes
log file = /home/bull/testing/log.%m
log level = 1
max log size = 50
share modes = yes
local master = no

[bulls]
comment = Bulls testing
path = /home/bull/testing
browseable = yes
writable = yes
create mode = 0775
valid users =
==============================================

[Francesco Campalastri]

Hi Ed,
it is a little bit strange that you have an empty line "valid users=".

If every one is allowed you have to delay this line.

In any case can you post the output of smb.log?


Bye

[Steven E. Protter]

Samba is really CIFS, which is a client that Windows and HP-UX and other OS' use to connect to Windows or CIFS/Samba shares..

You have a samba log file defined in your smb.conf file. It contains clues as to what is going on.

You have serveral choices concerning security and user authentication which seem to be the issue at hand now.

1) You can set up users in unix and when connnection is attempted, the user will be authenticated by the unix password. security = user in the the smb.conf file, users are added with the smbpasswd command on Unix.

2) Network based authentication. You can use Windows ADS, LDAP, probabaly a few other protocols to authenticate users. This takes a little more time to set up, but its possilbe to end up with 1 user id/password combination providing access to Windows server resources, local windows machines and Samba shares on your HP-UX machines.

SEP

[Geoff Wild]

With W2k and W2000 in the mix, I'd go for SECURITY=DOMAIN or ADS (if Active directory is running in your environment).

See my thread on how I setup ADS:

http://forums1.itrc.hp.com/service/forums/questionanswer.do?threadId=949365

Rgds...Geoff