Samba - Login as Administrator from NT

[Soumen Ghosh_1]

Hello,

We have a Unix machine which is accessed from NT Workstations on Network Neighbourhood. NT domain name is say, domain_1 and some users from this nt domain are configured to use this.

Security level is server and nt pdc is used as authentication server by samba.

Now I want a user who has logged in as Administrator in the NT workstation and not as any user in the nt domain also to access the same share on the unix machine.

What configuration changes are required?

Is it possible to authenticate some users via the pdc and other users via some other mechanism?

Thanks in advance.

Soumen Ghosh

[Darren Prior]

Hi Soumen,

Firstly you cannot split the authentication as far as I'm aware.

To allow Administrator to access the share just add them to the 'valid users' entry for that particular share in smb.conf (either manually or using SWAT.) To the best of my limited NT knowledge :-) Administrator is just an account on the machine (in the same way as root is an account on a Unix box.) To check this theory - try connecting to the Samba share as administrator and then check the log.smb or use smbstatus to see what the (attempted) connection's username was.

regards,

Darren.

[Animesh Chakraborty]

hi Soumen,
Please don't forget to assign points to those who took time to help you.

This member has assigned points to 3 of 41 responses to his/her questions.


Animesh

[Soumen Ghosh_1]

Hello Darren,

Thanks for the answer.
The problem is that users are authenticated against pdc of the nt domain. And administrator account of some specific machine cannot be authenticated against the pdc.

Is it possible that users are authenticated against their unix passwords so that their nt credential is not required at all.

Thanks again for taking time to help me without worrying about points earned unlike many others.

Regards.

Soumen Ghosh

[Darren Prior · Accepted solution]

Hi Soumen,

If you cannot authenticate the administrator against the pdc, do you then get a "enter user and password" box that you could use to enter a valid user?

"Net use" from DOS/Command Prompt allows you to specify the user name - this might override the Administrator username perhaps?

Otherwise you might need to reconsider your security level in Samba - perhaps user-level security might be better for you. This could get messy, as you'd need to investigate password syncing and you'd lose the benefits of using your pdc.

regards,

Darren.