WIN NT 4.0 NO GO & YES I HAVE ENCRYPTED PASSWORDS

[Gerry Maddock]

Thats odd, I dont have ipchains or iptables installed and I am still unable
to connect to this box from an NT sys. I have no probs whatsoever with my 9x
boxes. With what William just wrote, I should be able to join too since I
dont have any firewall running yet.

-----Original Message-----
From: samba-ntdom-admin at lists.samba.org
[mailto:samba-ntdom-admin at lists.samba.org]On Behalf Of William L. Terry
Sent: Thursday, October 11, 2001 2:58 PM
To: samba-ntdom
Subject: Re: WIN NT 4.0 NO GO & YES I HAVE ENCRYPTED PASSWORDS


Okay I feel foolish now.  I was sure I had removed firewall
control on this system but obviously not.  Setting ipchains -F
cleared the problem on this one machine. I still have the
problem on another system but I need the ipchains/iptables as
that system is running as a VPN.  I did remove any restrictions
to ports 137 and 139, but perhaps it is best for me to revisit
the setup.

I am posting my *working* smb.conf file for samba 2.2.1a with
RH7.1 for Gerry to look at.

FYI.  RH7.1 by default sets up ipchains rather than iptables
even though it is a 2.4 kernel.

[global]
     netbios name = SIRRUS
     workgroup = MESA
     os level = 64
     preferred master = yes
     domain master = yes
     local master = yes
     security = user
     encrypt passwords = yes
     domain logons = yes
     logon path = \\%N\profiles\%u
     logon drive = H:
     logon home = \\SIRRUS\%u
     logon script = logon.cmd
     wins support = yes
     domain admin group = root @ntadmin

[netlogon]
     path = /usr/local/samba/lib/netlogon
     writeable = no
     write list = ntadmin

[profiles]
     path = /export/smb/ntprofile
     writeable = yes
     create mask = 0600
     directory mask = 0700

[public]
   path = /home/public
   public = yes
   only guest = yes
   writable = yes
   printable = no


Buchan Milne wrote:

> Just so we are all sure .... run the following commands as root:
>
> # ipchains -L #(2.2 kernel)
>
> # iptables -L #(2.4 kernel)
>
> If you get any output besides the default action for each chain, try
> disabling all the rules with:
>
> #ipchains -F #(2.2. kernel)
>
> # iptables -F #(2.4 kernel)
>
> and try again.
>
> If that doesn't work, install Mandrake 8.1, which ships with XFS, ACLs
> and samba-2.2.1a (or Mandrake 8.0 and all the required stuff  avaiable
> at http://www.cae.co.za/~bgmilne/mandrake/samba/samba-2.2.1a_xfs/) ;-)
>
> Buchan
>

--
William L. Terry             (bill at sweye.com)
Southwestern Eye Center       http://www.sweye.com/
Information Systems
480-892-8400 ext. 142