SAMBA digest 1575

[Ernie Oporto]

I have gone through this since Samba 1.9.17p1.  It seems to happen I have
restricted the login for someone.   I.e., if their WinNT account says that
they can only log into the machine "machinename", then Samba seems to pay
attention to that information, even though no one is actually logging into
Samba, but just accessing its shares.

I haven't tried removing the "encrypt passwords = yes" feature, but that
doesn't sound like something I should do.  After all, if a Win95 computer
can connect to a WinNT 4.0SP3 machine that doesn't have encryption turned
off, then why shouldn't it be able to connect to the Samba server that is
referencing that same server?  None of those server names are in the allowed
login field for any of those accounts, yet those people can get into those
shares on those servers.

Something is still broken here.  I mentioned this before and got a reply
from someone on the Samba team, but they never replied back after I sent
them the requested level 10 log.

-Ernie

-----Original Message-----
From: samba at samba.anu.edu.au <samba at samba.anu.edu.au>
To: Multiple recipients of list <samba at samba.anu.edu.au>
Date: Friday, January 30, 1998 8:06 PM
Subject: SAMBA digest 1575

> 16) Re: NT - Not allowed from this workstation
> by Randy Sims <randal.sims at srs.gov>
>
>
>Date: Fri, 30 Jan 1998 18:16:01 -0500
>From: Randy Sims <randal.sims at srs.gov>
>To: Koos van den Hout _U nix and we all_ <koos at pizza.hvu.nl>
>Cc: samba at samba.anu.edu.au
>Subject: Re: NT - Not allowed from this workstation
>Message-ID: <199801302316.AA04628 at gateway1.srs.gov>
>
>Koos van den Hout _U nix and we all_ <koos at pizza.hvu.nl> writes:
>
>> > When trying to make a share from one of the 2 remaining workstations, I
>> > will recevie an error message saying that:
>> >
>> > The account is not authorized to login from this workstation.
>>
>> Sounds familiair. After a two-day fight with samba servers, NT
>> workstations, NT servers and win95 clients we finally found a config that
>> will serve all of these...
>
>Unfortunately, we added workgroup cross-subnet browsing with samba as
>both a local master browser and a domain master browser. I'm only
>doing NT workstations and NT server -- no Win95.
>
>>
>> Compile the latest samba so it has the correct libaries for dealing with
>> NT encrypted passwords.
>> *Don't* set encrypt passwords = yes (otherwise some win95 clients can't
>> get in).
>
>In order to get the cross-subnet browsing to work, we had to use ...
>
> domain logons = yes
> security = user
> encrypt passwords = yes
>
>> Do use smbpasswd to set passwords for people.
>>
>> So far (fingers crossed) this works for us and lets users locally and
>> remote access our servers.
>
>Everything works OK, but (actually BUT, as in big problem) we cannot
>access the samba server.  We get the Enter Network Password from NT
>with the message ...
>
> "Incorrect password or unknown username for:
>
> \\<samba server>
>
>No amount of entering "correct" usernames and/or passwords provokes
>any sort of success. Frustration!
>
>We can use smbclient and access the NT resources in the workgroup.
>
>Our verion is Samba 1.9.18p2. Help!
>
>>
>>                                                    Koos
>>
>> --
>>   Koos van den Hout,     Internetter, Unix freak, ISFJ and BBS SysOp at
large
>>   koos at pizza.hvu.nl (Work)                                Fax:
+31-30-2586290
>>   koos at kzdoos.xs4all.nl (Home)                      Workphone:
+31-30-2586287
>>   http://www.cetis.hvu.nl/~koos/   Looking for a license plate with "RFC
822"
>

-------------- next part --------------
A non-text attachment was scrubbed...
Name: Ernie A Oporto.vcf
Type: application/vcard
Size: 455 bytes
Desc: not available
Url : http://lists.samba.org/archive/samba/attachments/19980201/84b4875c/ErnieAOporto.bin