Samba / CIFS9000 share - User denied access

[Nick Wickens]

Hi All

I have a Samba Share on an 11i box which is accessed by two Windows XP machines. On both machines an XP login of nick corresponds to the Unix login nick and I can connect and use the share "data" without problem. However the second machine does not allow the XP user Daniel to access the share "data". Daniel is setup as a unix and samba user and I have checked passwords and permissions. The global and share options are listed below.

Any ideas ?
[global]
workgroup = TARDIS
server string = TARDIS Samba Server
encrypt passwords = Yes
syslog = 0
log file = /var/opt/samba/log.%m
max log size = 1000
local master = No
writeable = Yes
dos filetime resolution = Yes

[data]
comment = data area
path = /data
valid users = nick,daniel
force group = tardis
create mask = 0660
force create mode = 0660
guest ok = Yes

[RAC_1]

Is daniel same on NT and Unix (same user_id??)

What does the log says??

Anil

[Nick Wickens]

Yes - Identical named users on both systems

log stating -

[2004/06/29 19:48:06, 1] smbd/reply.c:(942)
Rejecting user 'daniel': authentication failed

[RAC_1 · Accepted solution]

log stating -

[2004/06/29 19:48:06, 1] smbd/reply.c:(942)
Rejecting user 'daniel': authentication failed

Reset the password for user daniel again.
smbpasswd command.

Anil

[Nick Wickens]

Ok Problem solved - I had not realised that the XP password, the Unix password AND the smbpassword all had to match.

Obvious I suppose.

[Darren Prior]

Hi Nick,

When you attempt to connect to a share, your Windows box will send your XP login and password to the CIFS server. If the XP login matches the HP-UX login (or you've used a username map file) and the XP password matches the smbpassword then you will connect without any further prompting. It shouldn't be necessary to have the HP-UX password matching the other 2 (although it may well be easier to remember that way!)

You may want to investigate a couple of other options. They're both documented in O'Reilly's Using Samba book, and also the smb.conf man page:

1) using the Windows PDC to authenticate - this saves you from having to have the matching password in the smbpassword file.

2) password syncing - allowing CIFS to update /etc/passwd when the smbpassword is changed.

regards,

Darren.