smbpasswd -d
Scott Merrill
smerrill at svfc.org
Tue Apr 17 19:12:25 GMT 2001
Hello all!
I'm running Samba 2.2.0-alpha3 on a Red Hat Linux 6.2 machine. I'm
extremely pleased with it, and am eagerly awaiting the official 2.2 release.
Today, though, I stumbled onto a bit of a problem. I've got a few temporary
and external vendor user accounts that I want to disable, since they're not
needed right now (but will be needed in the future, so I don't want to
delete them).
---begin---
[root at svclx001 /root]# smbpasswd -d temp_icss
Disabled user temp_icss.
[root at svclx001 /root]# cat /etc/smbpasswd |grep temp_icss
temp_icss:529:44EFCE164AB921CAAAD3B435B51404EE:32ED87BDB5FDC5E9CBA8854737681
8D4:[U ]:LCT-3AA65A61
---end---
According to the smbpasswd man page, when root executes 'smbpasswd -d
<user>', it should insert a "D" into the status field of the smbpasswd file.
As you can see, no such "D" is being inserted!
Additionally:
---begin---
[root at svclx001 /root]# smbclient //svclx001/data -Utemp_icss%123456
added interface ip=10.10.1.1 bcast=10.10.255.255 nmask=255.255.0.0
Got a positive name query response from 10.10.1.1 ( 10.10.1.1 )
Domain=[SVFC] OS=[Unix] Server=[Samba 2.2.0-alpha3]
smb: \>
---end---
The temp_icss user is not being denied access. I don't see anything in my
log files - but that may be because I'm logging at the default level. I
suppose I could increase log level to 10.
Has anyone experienced anything like this?
Thanks,
Scott
Below, please find my /etc/smb.conf file:
---begin---
[global]
workgroup = SVFC
server string = Main St. Server 001
hosts allow = 10.10. 10.20. 127.
printcap name = /etc/printcap
load printers = yes
printing = bsd
log file = /var/log/samba/log.%m
# log level = 10
max log size = 50
security = user
encrypt passwords = yes
smb passwd file = /etc/smbpasswd
unix password sync = yes
passwd program = /usr/bin/passwd %u
passwd chat = *New*UNIX*password* %n\n *Retype*new*UNIX*password* %n\n
*passwd:*all*authentication*tokens*updated*successfully*
# add user script = /usr/sbin/adduser -g server -d /dev/null -s
/bin/false -n -M %m$
domain admin group = @admins
domain admin users = root smerrill mpriess svfc_admin
socket options = TCP_NODELAY IPTOS_LOWDELAY SO_SNDBUF=8192 SO_RCVBUF=8192
remote announce = 10.20.1.1
local master = yes
os level = 65
domain master = yes
preferred master = yes
domain logons = yes
logon script = svfc.bat
logon home = \\%G\%U\.profile
name resolve order = wins lmhosts bcast
wins support = yes
wins proxy = yes
dns proxy = yes
preserve case = yes
short preserve case = yes
status = yes
share modes = no
#============================ Share Definitions
==============================
[homes]
comment = Home Directories
browseable = no
writable = yes
hide dot files = yes
[netlogon]
comment = Network Logon Service
path = /home/netlogon
guest ok = no
writable = no
write list = svfc_admin
# force user = root
# force group = samba
[Profiles]
path = /%G/%U/.profile
browseable = no
guest ok = yes
[printers]
comment = All Printers
path = /var/spool/samba
browseable = no
# Set public = yes to allow user 'guest account' to print
guest ok = no
writable = no
printable = yes
[apps]
comment = SVFC Applications
path = /samba/apps
public = no
writable = no
printable = no
create mask = 0666
directory mask = 0775
# force group = samba
# force user = samba
hide dot files = yes
[data]
comment = SVFC Data
path = /samba/data
public = no
writable = yes
printable = no
create mask = 0666
directory mask = 0775
force group = users
# force user = samba
hide dot files = yes
[public]
comment = Public Stuff
path = /samba/public
public = no
writable = yes
printable = no
create mask = 0666
directory mask = 0775
# force user = users
force group = users
hide dot files = yes
[groups]
comment = Group Shared Data
path = /samba/groups
public = no
writable = yes
printable = no
create mask = 0666
directory mask = 0775
force group = users
# force user = patches
hide dot files = yes
[norton]
comment = Norton Antivirus updates
path = /samba/data/norton/update
public = yes
writable = no
printable = no
guest ok = yes
hide dot files = yes
More information about the samba-ntdom
mailing list