[Fwd: Re: Problem with smb_auth]

[Buchan Milne]

You need to make sure that only your domain users can read the file
\\YOUR_PDC\netlogon\proxyauth

Since the netlogon service must be guest accessible (I think), just
change the permissions of the proxy_auth file. Mine are

[vyfster15:/home/bgmilne]# ll /home/samba/netlogon/proxyauth 
-rwxr-----    1 bgmilne  domusers        5 Nov 21 16:32
/home/samba/netlogon/proxyauth*

Thus all the members of domusers can also use the proxy.

Buchan

Thorsten Schneider wrote:
> 
> Hi,
> 
> I want to check my squid users with a second linux box that is running Samba 2.07. This box is already used as a PDC and a fileserver. I tried smb_auth for this and this works fine if I submit a valid user id and the related password. If I submit a valid user id and an invalid password it returns "ERR". This is ok.
> But: If I submit an invalid user id it returns also "OK" instead of "ERR".
> I talked to the author of smb_auth and he mentioned that this could be a configuration problem of samba.
> 
> Here is a piece of my log file. The server that wants to check the user id is called LINUX01:
> 
>                 [2001/01/15 09:48:02, 2] lib/access.c:check_access(258)
>                 Allowed connection from linux01 (10.108.47.11)
>                 [2001/01/15 09:48:02, 2] smbd/reply.c:reply_special(97)
>                 netbios connect: name1=FILESRV01 name2=LINUX01
>                 [2001/01/15 09:48:02, 1] smbd/password.c:pass_check_smb(492)
>                 Couldn't find user 'sdkfjsdk' in UNIX password database.
>                 [2001/01/15 09:48:02, 2] smbd/reply.c:reply_sesssetup_and_X(914)
>                 NT Password did not match for user 'sdkfjsdk' ! Defaulting to Lanman
>                 [2001/01/15 09:48:02, 1] smbd/password.c:pass_check_smb(492)
>                 Couldn't find user 'sdkfjsdk' in UNIX password database.
>                 [2001/01/15 09:48:02, 2] lib/access.c:check_access(258)
>                 Allowed connection from linux01 (10.108.47.11)
>                 [2001/01/15 09:48:02, 1] smbd/service.c:make_connection(550)
>                 linux01 (10.108.47.11) connect to service netlogon as user ftp (uid=40, gid=2)
>                 (pid 13774)
>                 [2001/01/15 09:48:02, 2] smbd/open.c:open_file(602)
>                 sdkfjsdk opened file proxyauth read=Yes write=No (numopen=1)
>                 [2001/01/15 09:48:02, 2] smbd/close.c:close_normal_file(159)
>                 ftp closed file proxyauth (numopen=0)
>                 [2001/01/15 09:48:02, 2] smbd/server.c:exit_server(408)
>                 Closing connections
> 
> Thank you for your help
> Thorsten
> 
> -
> Newell Window Fashions Germany GmbH
> EDV / Dept. IT
> Neutrauchburger Str. 20
> D-88316 Isny
> 
> Thorsten Schneider
> Tel.: (+49) 7562 / 985-112  Fax: - 100
> t.schneider at newellwf-de.com
> www.newellwf-de.com

-- 
|----------------Registered Linux User #182071-----------------|
Buchan Milne                Mechanical Engineer, Network Manager
Cellphone * Work               +27 82 472 2231 * +27 21 808 2497
Stellenbosch Automotive Engineering         http://www.cae.co.za