Secure Samba share

[Aji Thomas]

Hi Guys,

I have samba share configured with security=server on HP-UX box. And we have configured the password servers which are windows machines for login authentication.

---------------------------------------
# Global parameters
[global]
workgroup = DOMAIN_NAME
server string = Samba Server
security = SERVER
password server = kddserver1
syslog = 0
log file = /var/opt/samba/log.%m
max log size = 1000
local master = No
read only = No
short preserve case = No
dos filetime resolution = Yes

[hht]
comment = HHT Share
path = /ksis/hht
guest ok = Yes

[maximo]
path = /appcon4/
valid users = oracl
----------------------------------------


The issue is that maximo share is secured by specifying oracl is the valid user. But htt is a open share by setting guest ok to yes.

But the issue is when we try to access the resource //hpmachine or //hpmachine./hht it prompts for ussername/password. But we just require authentication only while accessing //hpmachine/maximo


Please advice since we are in production. When we put back security=share it starts working, but then we are unable to secure with password //hpmachine/maximo.


Thanks and regards,
AJi

[Steven E. Protter]

Shalom,

You need to run a
net join

command on this server. This will require authentication credentials for an admin user on the windows machine.

Also check the WINS server information.

You may need a machine account for the hp machine on the domain as well.

SEP

[Aji Thomas]

Hi,

We dont have this hp-ux machine joined to our windows domain. So we dont prefer to do a net join. we havent specified wins server. Is it required. We have no issues if the security is set to share. But then we cannot secure that maximo folder.

Please advice,
AJi

[Aji Thomas]

Hi Guys,

Once security=server is set, is there a way for accessing resouces on the same box which is a open share. It should'nt prompt for username/password in any case.

On one server we noticed that once security=server is set, accessing the resource within our domain was fine, but while accessing from other domain/remote site, which works normal with share mode, requests for username/password.

Please advice at the earliest since we are live.
AJi

[Ivan Ferreira · Accepted solution]

Try using these configuration parameters:

guest account = nobody
map to guest = Bad User

[Aji Thomas]

Hi,

Thanks for the update,
It works with
map to guest = Bad User
and not when
guest account = nobody
is set.

Thanks for the support,
AJI

[Geoff Wild]

Add the following share:

[IPC$]
path = /tmp
valid users = list users here
# or allow all
hosts allow = 192.168.1.0/21, 127.0.0.1
hosts deny = 0.0.0.0/0


Just modify the ip address/class for your environment.

Rgds...Geoff