Samba issues

[Scott Sabo]

For some reason, I cannot get samba to allow users to put files on a mounted drive from w2k w/o having the group assiged as smbnull.

We were doing so well...

server: HPUX 11.23
workstations: W2k

What I want is for the users to be prompted for their unix password when they try to map the drive, and then when the file is transfered, it should go in as them (I have a forced group, and that works fine).

Help!

Scott

[hpuxrox]

I need your samba server version, how your connected (share,domain,ads,etc.).

Have you tried CIFS?

Thanks,

Yates

[Scott Sabo]

Looks like from smbclient I have 2.5.5, I've also attached the smb.conf file.

Whats cifs

Scott

[Alzhy · Accepted solution]

edit /etc/opt/cifsclient/cifsclient.cfg and
change the workgroup directive

/opt/cifsclient/bin/cifsclient start

then simply:

cifsmount //W2kWSname/sharename /unixmnt -U W2kUsername

Enter passwd for W2kUsername.


The Win2k Share can thence be accessed locally on /unixmnt.

[Geoff Wild]

CIFS - HP's Samba:

http://www.software.hp.com/portal/swdepot/displayProductInfo.do?productNumber=B8725AA

http://www.software.hp.com/portal/swdepot/displayProductInfo.do?productNumber=CIFSTP3

As far as I know, you can NOT use unix passwords to access a share on a NT server...

They have to have a NT ID on the NT server...

I know with Samba and Winbind, NT users do NOT need to have an UNix id on the Unix server...

Rgds...Geoff

[Steven E. Protter]

In your smb.conf file is a pointer for a log file.

That file will contain information regarding samba connect attempts.

log file = /var/opt/samba/log.%m

The most common issue leading to this response is that the users don't have rights to the file.

You need your files not be owned by samba or smbnull user.

You need to set up groups on HP-UX that make sense to your authentication setup. Change the files in the samba shares to an ownership your W2k workstations can deal with.

chgrp -R sambashare *

Based on your smb.conf file it probably would be best to create a group in HP-UX and have that name match the primary group of the W2K users.

It would be helpful to know if you have a primary domain controller and what OS it uses. That could be used to simplify access.

SEP

[hpuxrox]

Did it work before? Did you update the win2k clients?

I would strongy suggest upgrading to 3.x revison. Microsoft issued updates to w2k a while back that basicly made any version before 3.x useless.

CIFS is hps (supported) version of samba. It has configuration scripts that automate some of the configuration.

As far as samba, I usualy use swat to do most of my configuration. (man swat) Then once I get a good pilot I push the smb.conf out to all the clients.

[Scott Sabo]

So what I hear Yates saying is that I should AT LEAST update Samba to v. 3. Right?

Some more reference for everyone:

These are w2k systems that use Netware for authentication, and they are only mapping thru Windows to the HP systems with the \\10.20.83.33\sharename method.

The user ids on the HPs match the user id in Netware.

There is a group that all of the users belong to , CAEUsers, that gets assigned ownership when a file is transfered via the Samba mount. The issue is with the "owner" ID.


Thanks in advance.

Scott

[Steven E. Protter]

Okay.

I have this working on Samba server 2.2 and 3.0.7, both of which are available at software.hp.com. Search for CIFS

CIFS=Samba
CIFS is HP speak for Samba.

same product.

Please upload your smb.conf file and id command for the unix users involved.

This is a unix permissions issue.

Also, please consider giving everyone except me points. I got enough.

SEP

[Scott Sabo]

Steven, what do you mean by "id command for the unix users involved"?

[Scott Sabo]

Incoming!

[Scott Sabo]

anyone? anyone?

[Steven E. Protter]

Real sorry I didn't answer the question earlier. I saw the bunny and assumed it was a done deal.


Log on as the user

or su - username

from root

type the following command:

id

The output is helpful in making sure your users are properly set up on the Unix side of the house.

With smb.conf user authentication, users must exist seperately on Windows and Unix.

SEP

[Scott Sabo]

No problem... I was not sure if our "smart" spam killer was "working" or not.

this is what I get for me:
fire 22: id
uid=109(sabos) gid=103(CAEUsers)
fire 23:

CAEUsers group is the forced group for samba.

So, should there be a setting that will ask the users to log into the Unix host when mapping in Windows?

Thanks for your patient help.

Scott

[Steven E. Protter]

in smb.conf

security=user

This should force a login. The goup they get will be whatever group is defined in /etc/passwd

SEP