Getting Desperate

[Meyer, Aaron]

Ok, I've got a test instance of Samba 2.2.2 running. 
it is setup with USER security so all accounts are authenticated locally -
not on the DOMAIN. Which means you have to be careful or you'll get
conflicting credentials.


This configuration will use an existing NT or 2000 PDC as WINS and Master
Browser server. All user authentication is done locally.
I don't have Winbindd running at all.

Add each user by 'useradd <username>' and 'smbpasswd <username>'

when passwords expire on the domain, they will NOT be updated here,
credential confliction may then occur. Passwords will have to be synced
manually. I did have winbindd working, but took it out because it was so
dreadfully slow on our domain with 30,000+ users.

Each user can map his own home directory by running. Their home directory
will be specified in your /etc/passwd file.

	'net use Z: \\servername\<username> /persistent:yes'



<< smb.conf >>
[global]
	workgroup = workgroup
	netbios name = barlnxpc
	server string = barlnxpc
	comment =
	
	## Hide Linux so Corp doesn't freak out!
	announce as = NT Workstation
	announce version = 4.0

	guest account = nobody
	keep alive = 30
	
	log file = /opt/samba-2.2.2/var/log/samba/log.%m
	max log size = 50

	security = USER
	encrypt passwords = yes
	smb passwd file = /opt/samba-2.2.2/private/smbpasswd
	username map = /opt/samba-2.2.2/private/smbusers

	socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192

	domain master = no
	preferred master = no
	domain logons = no
	wins server = 10.250.8.2
	wins proxy = no
	dns proxy = no

	[homes]
		comment = Users Home Directory
		browseable = no
		writable = yes
		
	[C$]
		path = /
		comment = Admin Share
		browseable = yes
		writeable = yes
		admin users = root	
		valid users = root @samba-admins
		public = no

	[Sharedir]
		path = /exports/sharedir
		comment = Network Share Folder
		writeable = yes
		public = no

<< EOF smb.conf >>

	
	Hope this helps you.
		Aaron Meyer  LNXRLZ, MSSKS, 2kBLWS


-----Original Message-----
From: Paul J. Caritj [mailto:pcaritj at riovia.net]
Sent: Friday, October 19, 2001 1:11 AM
To: samba-ntdom at lists.samba.org
Subject: Getting Desperate


OK,
I'm getting desperate. I am sure this problem is nothing out of the
ordinary, but I've never used samba (and, only rarely, linux) and I need
this thing running by next week.
What I've Done:
I have a Windows2000 PDC and (save one) 2000 clients. I have a linux
fileserver (Kernel 2.4; Redhat 7.1; Samba 2.2.2) sharing two public folders
("Resources" and "Tax")

What I need:
A home directory for any given user who browses their way into the
fileserver through Network Neighborhood. Each also needs to map a network
drive (Z:) to their Home directory. I have the home directories working
properly but no one can log in.

At the risk of sounding lazy, what should smb.conf look like? How do I
handle passwords (that is the main issue). I have little interest in
integrating with the PDC's security. I just want to make the accounts
manually on the unxix machine.

So, I know this is a lot to ask, but could someone give me a step by step to
(in summary) do the following:

configure home directories for users in which the corrosponding user has
full permissions (Read, write, execute, the whole enchilada) that they can
successfully log into from their Win2000 workstation. Again, password
servers, domain membership, etc are irrelevent. I'm willing to either use
encrypted passwords on the Liux box OR unencrypted passwords on the Windows
box. Whichever is easier, as long as it works.

If someone could help me with this I would appreciate it SO much.

Thank you,
Paul Caritj
pcaritj at riovia.net