Enforce password in Samba Share

['chris']

hi

Howto configure Samba to enforce password question (input field)
by connecting from Windows XP to a Samba Share?

my smb.conf:

[global]
socket options=TCP_NODELAY
workgroup=DOM
local master=no
realm=*
printing=lprng
winbind enum groups=yes
idmap gid=96000-196000
passdb backend=smbpasswd
server string=storage
security=user
idmap uid=10000-110000
printcap name=/usr/syno/etc/printcap
load printers=yes
winbind enum users=yes

[support]
invalid users=nobody,nobody
valid users=nobody,cc,@pw group,linux,admin,Administrator,nobody
comment=""
path=/volume1/support
guest ok=yes
browseable=yes
ftp write only=no
read list=nobody,nobody
write list=nobody,@pw group,admin,Administrator,cc,linux,nobody
writeable=yes

Now I'm getting this error insted of input field:

['chris']

I have Samba Version 3.0.20b

[Vitaly Karasik_1 · Accepted solution]

first, I suggest to clean your users lists - for example, you have "nobody" in all invalid, RO and RW users lists.

second, did you create Samba password file and add all users to it?

['chris']

I've cleaned "nobody", but it doesn't help.

This is quite a strange problem.

At some XP Prof. SP3 workstations asks for user and password and on some others not.
ALL XP workstations are on the same subnet and windows firewalls are disabled.
I think there is a problem of XP settings, but where?

[Vitaly Karasik_1]

I don't remember details, but I guess that MS Windows stores user's credentials somethere when user logged in.
Is reboot client boxes change something? I mean, may be some windows don't ask for password because user already provided it?

['chris']

Reboot client boxes doesn't change anything.
At some boxes, after Restart I'm still getting this error:

"NOT ACCESSIBLE YOU MIGHT NOT HAVE PERMISSION..."

This is a really strange problem.

[Vitaly Karasik_1]

may be it's plaintext vs. encrypted-only password issue?
see http://mclewin.com/node/54 for registry hack and http://www.oculon.org/hijinx/linux/samba.htm for details

['chris']

this link:

http://mclewin.com/node/54

doesn't work.

BTW why should I change Samba configuration?
Some XP workstaions don't denied this connection and I'm getting user and password fields.

XP firewall is everywhere disabled.
All XP workstaions are on the same LAN with same network configuration settings.

[Steven E. Protter]

Shalom,
PSB

this link:

http://mclewin.com/node/54

doesn't work.
>>What is the error. Can you browse into http://mclewin.com/ ?

Why would you expect this to work via http when we're talking about a samba server?
<<


BTW why should I change Samba configuration?
Some XP workstaions don't denied this connection and I'm getting user and password fields.

XP firewall is everywhere disabled.
All XP workstaions are on the same LAN with same network configuration settings.

>>
For the XP workstations to access a samba share, access must be configured in the smb.conf file. The Samba service must be running.

No where in this question do I see any reason for a browser to work.

SEP

[Vitaly Karasik_1]

weird - link works for me.

but in short - it speaks about registry fix for Windows, which allows to Windows send plain-text password:

Configuring Windows 200/XP to authenticate with Samba (plain text password) Registry setting to enable Windows XP/2000 to authenticate against Samba with plain text passwords.

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\LanmanWorkStation\Parameters]
"EnablePlainTextPassword"=dword:00000001


I suggest you to compare this registry key value in 2 Windows clients - one which can login to samba and another which cannot. If they different - this is the case.

['chris']

Sorry this is not, ALL XP clients have the following registry entry:

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\LanmanWorkStation\Parameters]
"EnablePlainTextPassword"=dword:00000000

[Steven E. Protter]

Shalom,

Vitaly asked you to check this:

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\LanmanWorkStation\
Parameters]
"EnablePlainTextPassword"=dword:00000001

You say:

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\LanmanWorkStation\
Parameters]
"EnablePlainTextPassword"=dword:00000000

Is in the registry. Is this a typo, cut and paste error or is there really a difference. You might if there is a difference try changing the registry key on one of the workstations and see if this helps.

SEP

['chris']

There are no difference.
On ALL XP workstations I have the same reistry settings.
The error print screen I've attached in my first posting.