SAMBA 1.9.18p10 problem

Wat, Andrew (Hong Kong) andrew_wat at hk.ml.com
Tue Oct 20 06:16:21 GMT 1998


I have been using Samba 1.9.18p8 in a Solaris 2.6 machine for months
but suddenly this week there is a problem. Nothing's changed.

I have some persistent connection of my NTSP3 client to the samba share.
When I login as usual, it fails to mount the drive. It either prompt for
password but whatever password the samba rejects, or give a "Access is
Denied" when you try to access the drive when you're in explorer.

In both cases, I need to disconnect the drive and reconnect it and it is
ok.

So it happens only when I logout and login the machine.

The samba is using Unix authentication with security = user

Anyone have similar experience with it?

Thanks


> -----Original Message-----
> From:	samba at samba.anu.edu.au [SMTP:samba at samba.anu.edu.au]
> Sent:	Monday, October 19, 1998 2:45 PM
> To:	Multiple recipients of list
> Subject:	SAMBA digest 1848
> 
> 			    SAMBA Digest 1848
> 
> For information on unsubscribing see http://samba.anu.edu.au/listproc
> Topics covered in this issue include:
> 
>   1) Re: Changing "Shutdown" to "Log off" in Win95?
> 	by Kalle Kiviaho <kivi at ios.chalmers.se>
>   2) Compiling on Linux 2.1.125
> 	by Bilal Siddiqui <Bilal.Siddiqui at Mankato.MSUS.edu>
>   3) Re-exporting NFS shares to Samba
> 	by Rudo de Jong <crj at dds.nl>
>   4) Re: Setting individual umasks for Homes
> 	by "Robert Dahlem" <Robert.Dahlem at frankfurt.netsurf.de>
>   5) Re: Changing "Shutdown" to "Log off" in Win95?
> 	by Robert Franklin <R.C.Franklin at reading.ac.uk>
>   6) SAMBA digest 1846
> 	by Franck Boudinet <boudinet at fr.ibm.com>
>   7) Re: Changing "Shutdown" to "Log off" in Win95?
> 	by Nathan Neulinger <nneul at umr.edu>
>   8) Does NT support crypted SMB data connection?
> 	by Jan Kratochvil <short at ucw.cz>
>   9) Browsing remote domains possible ?
> 	by "Steffen Einsle" <steffen at shark.mayn.de>
>  10) NT login problem
> 	by "Peter Stubbs" <ps258 at hotmail.com>
>  11) BIG Problems with compiling DELPHI projects on SAMBA shares
> 	by Tomek Jarosinski <tomek at is.fh-hamburg.de>
>  12) Question
> 	by mike.phillips at exgate.tek.com
>  13) Mailing List
> 	by "FALVEY Mark <Con>" <mark.falvey at mrwa.wa.gov.au>
>  14) Re: WIN 98 password problem (again)
> 	by Ludolf.Holzheid at t-online.de (Ludolf Holzheid)
>  15) Win98 and Samba
> 	by TSchoessow at t-online.de (Thomas Schoessow)
>  16) security=user AND guest share with NT?
> 	by Nathan Neulinger <nneul at umr.edu>
>  17) Re: WIN 98 password problem
> 	by Mark Hazen <mhazen at franklin.uga.edu>
>  18) NT transfer speeds
> 	by Alex Ardalich <alex at gsm.adelaide.edu.au>
> 
> ----------------------------------------------------------------------
> 
> Date: Sun, 18 Oct 1998 10:15:33 +0200
> From: Kalle Kiviaho <kivi at ios.chalmers.se>
> To: darylb at superserve.com
> Subject: Re: Changing "Shutdown" to "Log off" in Win95?
> Message-ID: <3629A3A5.B18D3663 at ios.chalmers.se>
> 
> Daryl L. Biberdorf wrote:
> 
> > The Samba set up we're using to support 25 or so Win 95 clients
> > is working well, but my users are usually not up to complicated
> > tasks. Has anyone found a way to get logging out down to a single
> > action (like, Start/Logout), instead of Start/Shutdown/Close all
> > programs and log in as another user/Yes?
> 
> You can load c:\windows\system\shell32.dll into a resource editor,
> like the one in Borland C++ 5.0, and disable everything except
> "Close all programs and login as another user" ..
> 
> /mvh Kalle Kiviaho
> 
> ------------------------------
> 
> Date: Sun, 18 Oct 1998 05:42:19 -0500
> From: Bilal Siddiqui <Bilal.Siddiqui at Mankato.MSUS.edu>
> To: samba at samba.anu.edu.au
> Subject: Compiling on Linux 2.1.125
> Message-ID: <3629C60A.6450827B at Mankato.MSUS.edu>
> 
> Hello...
> 
> I have red hat with kernel 2.1.125 and getting some type/other errors
> from smb.h.
> This causes other errors to be triggered also.  Specifically they are
> related to
> line 30 of the current smb.h.  It says something like 'struct should
> be followed
> by a semi colon before ___u16'.
> 
> I followed the instruction provided and everything else compiles fine.
> Any help
> is appreciated.
> 
> -Bilal Siddiqui
> 
> 
> ------------------------------
> 
> Date: Sun, 18 Oct 1998 14:33:36 +0200 (CEST)
> From: Rudo de Jong <crj at dds.nl>
> To: Samba Digest <samba at samba.anu.edu.au>
> Subject: Re-exporting NFS shares to Samba
> Message-ID: <Pine.LNX.3.96.981018142451.297A-100000 at rudopc.grunn.nl>
> 
> Hi there,
> 
> I have a problem with WinNT 4.0 Workstation as clients trying to
> connect
> to NFS shares which are being exported to a SparcStation 10 running
> Samba
> 1.9.18p4 which is offering these as shares to the LAN. In this LAN we
> also
> have clients running Windows95. These clients don't seem to have any
> problems connecting to these shares.
> Could anybody point in the right direction so I can solve these
> problems?
> 
> TIA!
> 
>                      -----------------------------
>                      | Rudo de Jong <crj at dds.nl> |
>                      -----------------------------
> 
>              Fatal Error: Couldn't enter Windows, use Doors.
>                               -----------
> We are Microsoft. UNIX is irrelevant. Openness is futile. The Hive is
> all.
>                        You will be assimilated.
> 
> 
> ------------------------------
> 
> Date: Sun, 18 Oct 1998 15:04:47 +0100
> From: "Robert Dahlem" <Robert.Dahlem at frankfurt.netsurf.de>
> To: "Jeff_Newton at pmc-sierra.com" <Jeff_Newton at pmc-sierra.com>,
> "Multiple recipients of list" <samba at samba.anu.edu.au>
> Subject: Re: Setting individual umasks for Homes
> Message-ID: <199810181304.PAA29312 at beach.frankfurt.netsurf.de>
> 
> Jeff,
> 
> On Sat, 17 Oct 1998 01:23:18 +1000, Jeff Newton wrote:
> 
> >Is there any way I can set different umasks for different users in
> >the "homes" share?
> 
> You have to include another smb.conf within the definition of the
> homes share. I'm 
> not sure which percent substitution (%U?) it is but consider something
> like
> 
>     [homes]
>         ; default settings when smb.conf.%U not found
>         create mask = 0xxx
> 	directory mask = 0xxx
> 	include = /your_path/smb.conf.%U
> 
> Now create a different smb.conf.<what_name_ever> for each user with
> the need for a 
> different umask.
> 
> I don't have my samba machine available at the moment, so please
> apologize typos.
> 
> Hasta la vista,
>                Robert
> 
> -- 
> ---------------------------------------------------------------
> Robert.Dahlem at frankfurt.netsurf.de
> Radio Bornheim - 2:2461/332 at fidonet +49-69-4930830  (ZyX, V34)
>                  2:2461/326 at fidonet +49-69-94414444 (ISDN X.75)
> ---------------------------------------------------------------
> 
> 
> ------------------------------
> 
> Date: Sun, 18 Oct 1998 14:54:06 +0100 (BST)
> From: Robert Franklin <R.C.Franklin at reading.ac.uk>
> To: darylb at superserve.com
> Subject: Re: Changing "Shutdown" to "Log off" in Win95?
> Message-ID: <Pine.GSO.4.03.9810181447330.800-100000 at suma3>
> 
> > From: "Daryl L. Biberdorf" <darylb at superserve.com>
> > To: samba at samba.anu.edu.au
> > Subject: Changing "Shutdown" to "Log off" in Win95?
> > 
> > The Samba set up we're using to support 25 or so Win 95 clients
> > is working well, but my users are usually not up to complicated
> > tasks. Has anyone found a way to get logging out down to a single
> > action (like, Start/Logout), instead of Start/Shutdown/Close all
> > programs and log in as another user/Yes?
> > 
> > I'm tired of explaining this already! :)
> > 
> > Daryl
> > Daryl Biberdorf		darylb at superserve.com
> 
> 
> Our User Services Group had the same complaint.
> 
> The 'solution' was to write a little program to provide a logout
> dialog
> which we could then put a shortcut for on the desktop (and add a hot
> key
> sequence for in the Properties dialog).
> 
> You can find 'Logout95' at http://www.rdg.ac.uk/~suq96rcf/tools/
> 
> Run it with '/?' for help on the various options.
> 
> The are plans for the dialog box to be replaced by a nicer, custom one
> (instead of the standard Windows MessageBox(), one).
> 
> Of course, another way would be to install IE4's new desktop... that
> will
> give you a 'Logout' option (along with several Mb of other rubbish,
> too!).
> 
>   - Bob
> 
> 
> ----------------------------------------------------------------------
> ------
>   I also seek adventure and fortune in the New World! ->
> esteban at mince.net
> ----------------------------------------------------------------------
> ------
>   Bob "Mince" Franklin ~{]                            Tel. (0118) 931
> 8432
>   Systems and Communications                          Fax. (0118) 975
> 3094
>   Computer Services Centre
> R.C.Franklin at reading.ac.uk
>   University of Reading, U.K.
> http://www.compsoc.man.ac.uk/~mince/
> ----------------------------------------------------------------------
> ------
> 
> 
> ------------------------------
> 
> Date: Sun, 18 Oct 1998 14:33:44 +0000
> From: Franck Boudinet <boudinet at fr.ibm.com>
> To: samba at samba.anu.edu.au
> Subject: SAMBA digest 1846
> Message-ID: <5060030006881091000002L312*@MHS>
> 
> 
>                    Status Distribution October 17, 1998 06:57:28
> 
> The message regarding "SAMBA digest 1846" sent on October 17, 1998
> 06:57:28 was sent by
> 
> Status Recipient
>           Type                To
>           Native Name         samba at samba.anu.edu.au
>           Foreign Native Name samba at samba.anu.edu.au\n\n\nINTERNET
> 
> 
> 
> Recipients
> 
> Status Reporters
>           Type                From
>           Name Domain         NOTES
>           Native Name         CN=Franck Boudinet/OU=France/O=IBM at IBMFR
>           Foreign Native Name CN=Franck
> Boudinet/OU=France/O=IBM\nIBMFR\n\n
>           Organization        IBM
>           Org Unit 1          France
>           Last Name           Boudinet
>           First Name          Franck
> 
> 
> 
> Status          769
> Explanation     Invalid recipient
> 
> X.400 Status    769
> 
> ------------------------------
> 
> Date: Sun, 18 Oct 1998 10:28:22 -0500
> From: Nathan Neulinger <nneul at umr.edu>
> To: kivi at ios.chalmers.se
> Cc: Multiple recipients of list <samba at samba.anu.edu.au>
> Subject: Re: Changing "Shutdown" to "Log off" in Win95?
> Message-ID: <19981018102821.A26365 at umr.edu>
> 
> I just recently found a small executable called "Logoff" that does
> this.
> 
> I forget where I got it from though, but I can send it to you if 
> interested. You just double click it and it immediately triggers a 
> complete logout. I'm using it on NT, but I would presume it would also
> 
> work on 95.
> 
> -- Nathan
> 
> On Sun, Oct 18, 1998 at 06:21:34PM +1000, Kalle Kiviaho wrote:
> > Daryl L. Biberdorf wrote:
> > 
> > > The Samba set up we're using to support 25 or so Win 95 clients
> > > is working well, but my users are usually not up to complicated
> > > tasks. Has anyone found a way to get logging out down to a single
> > > action (like, Start/Logout), instead of Start/Shutdown/Close all
> > > programs and log in as another user/Yes?
> > 
> > You can load c:\windows\system\shell32.dll into a resource editor,
> > like the one in Borland C++ 5.0, and disable everything except
> > "Close all programs and login as another user" ..
> > 
> > /mvh Kalle Kiviaho
> 
> 
> ------------------------------------------------------------
> Nathan Neulinger                       EMail:  nneul at umr.edu
> University of Missouri - Rolla         Phone: (573) 341-4841
> Computing Services                       Fax: (573) 341-4216
> 
> ------------------------------
> 
> Date: Sun, 18 Oct 1998 17:57:48 +0200
> From: Jan Kratochvil <short at ucw.cz>
> To: samba at samba.anu.edu.au
> Subject: Does NT support crypted SMB data connection?
> Message-ID: <19981018175748.45664 at atrey.karlin.mff.cuni.cz>
> 
> Hi all
> 
>   I know that when one part of SMB connection is Win95, the connection
> itself
> is on the network clear, unencrypted. (ALTHOUGH PASSWORD NEGOTIATION
> MAY BE
> ITSELF CRYPTED!)
>   The question is: Is it also true for NT-NT connection or Samba2.0-NT
> connection? I know that some crypto things were hacked out by packet
> sniffing
> from NT but I don't know exectly which. And sorry, I don't have around
> any
> NT handy to test this.
>   It can be externally crypted by using Windows version of SecureSHell
> with port
> 139 forwarding, couldn't it?
>   I need to know this for determining an enterprise solution.
> 
> 
> 
>  				Thanks for a great pice of sw,
> 						Jan Kratochvil
> 
> PS: CC would be nice to be GSM SMS notified.
> 
> ------------------------------
> 
> Date: Sun, 18 Oct 1998 13:10:25 -0000
> From: "Steffen Einsle" <steffen at shark.mayn.de>
> To: "Samba Mailing List" <samba at samba.anu.edu.au>
> Subject: Browsing remote domains possible ?
> Message-ID: <005401bdfa98$abe92c00$648ba8c0 at shark.fish.de>
> 
> Hello to all,
> 
> BROWSING and WINS-problem:
> 
> I currently have set up about 10 or 12 separated networks using Linux
> 2.0.35/Samba 1.19.xx.
> Using Isdn4Linux I have set up static routes to our central office
> server
> (same config).
> My networks use an IP range of 192.168.xx.0/24 where xx is different
> for
> every network.
> The IP configuration works fine now (I can telnet without any
> problems,
> dialling, connect...)
> Clients are mostly Win95 (and a few Win3.11) machines using LM-file
> sharing.
> I have set up each server to be PDC and WINS server for that local
> network
> ONLY.
> Thus browsing in the local network works just fine.
> 
> I want to be able to include the remote domains in my local
> browse-list
> without having
> to resync every then and now. I want to connect to the remote network
> ONLY
> when a direct
> access to the remote PDC (or remote browse list) is made.
> I know I can't see the remote browse-list without connection, of
> course, but
> currently
> when I contact a remote server (by //server-name) the remote
> domain-name is
> added to my
> local database but access is denied
> "No access to (remote-domain-name). The computer or share with this
> name
> cannot be found"
> 
> I can access every share on the remote server just fine, but I cannot
> access
> the remote
> browse list.
> 
> After I disconnect from the remote server also the remote domain-name
> disappears from my
> local browse-list (that is ok for me, although annoying)
> 
> Here my config: (all remote servers have similar configs: different
> workgroup= and different
>                  ip-addresses, 192.168.123.x, 192.168.124.x, ...)
> 
> [global]
>    workgroup = LOCAL_DOMAIN
>    domain master = no
>    domain logons = yes
>    encrypt passwords = yes
>    time server = yes
>    socket address = 192.168.122.1
>    remote announce = 192.168.122.255
>    local master = yes
>    preferred master = yes
>    guest account = ftp
>    security = user
>    bind interfaces only = true
>    interfaces = 192.168.122.1/24
>    wins support = yes
>    dns proxy = yes
> 
> 
> 
> thanks for any help.
> 
> 
> 
> 
> 
> ------------------------------
> 
> Date: Sun, 18 Oct 1998 21:36:57 +0100
> From: "Peter Stubbs" <ps258 at hotmail.com>
> To: <samba at samba.anu.edu.au>
> Subject: NT login problem
> Message-ID: <000f01bdfad7$1ab93560$56eab094 at win-98-beta3>
> 
> Hi All,
> 
> I have taken over a network with samba 1.9.17 running on some old
> suns.
> 
> What I'd like to have happen is for people to be able to have access
> to unix
> shares based on their unix account group membership (which I know how
> to do
> thanks to the FAQ) and for them not to be prompted for an account and
> password when they connect (like
> connecting to a NT share)
> 
> The first part is easy, but I don't know how to achieve the second
> part.
> The previous admin used /etc/hosts.equiv, and the related smb.conf
> entry to
> get rid of all login validation. I'm not keen on that, and I don't
> think
> that it should be necessary.
> 
> Also, do I still have to set NT to use plain text passwords?
> 
> TIA,
> Peter
> 
> 
> 
> 
> ------------------------------
> 
> Date: Sun, 18 Oct 1998 22:57:04 -0400
> From: Tomek Jarosinski <tomek at is.fh-hamburg.de>
> To: samba at samba.anu.edu.au
> Subject: BIG Problems with compiling DELPHI projects on SAMBA shares
> Message-ID: <362AAA7F.EBBBE4A7 at is.fh-hamburg.de>
> 
> Hello,
> we have a problem here. We are using Samba 1918p10 on Solaris 2.5.1 on
> Sun servers and Solarisx86 on pc servers with many, many NT 4.0/sp3
> clients. Working great with different applications (Office, SPSS, and
> many others), now we installed Delphi 3.0, and if students are trying
> to
> compile Delphi projects on samba home share we have big problems.
> Compiling and working on local disk or Novell shares are working fine,
> but using samba share as home directory for Delphi projects just
> doesn't
> work. Delphi is not able to rename files updating a project, actually
> Delphi is trying to rename first some files, and then create new files
> with the same names. When i turned share modes = no, i can update
> *.exe
> files, but all source files are just locked. I turned locking = no for
> the homes share, but it doesn't help.
> homes are defined like this:
> ---------------------------
> [homes]
> comment = HOMES
> browseable = no
> writable = yes
> path = /home/%u
> create mode = 0755
> share modes = no
> ---------------------------
> ANY IDEAS ???            HEEEELP      !!!
> 
> 
> ------------------------------
> 
> Date: Sun, 18 Oct 1998 14:40:48 -0700
> From: mike.phillips at exgate.tek.com
> To: samba at samba.anu.edu.au
> Subject: Question
> Message-ID:
> <D95DF3673FF8D01195A300805F19CCCF032ECAA8 at eu-marl-m02.marl.tek.com>
> 
> G'day all,
> 
> I am new to the list, so please be careful with me :-)....Some
> background I
> am a developer not a network person, but I do like to play with
> hardware.
> 
> I have just installed samba 1 9 18p8 (I think this is the version
> number) on
> Linux redhat 5.1.
> The Linux box is a home PC that I use for data store, email and
> general
> playing around with.
> 
> I am connected to my works MS network via ISDN with a nortel-nautica
> unit
> that is doing address translation. (keep with it I'll get there in a
> minute).
> This allows me to have many PC's and printer connected at home on the
> works
> network.
> 
> Now my problem, I can log on to my works network at boot time and
> 'see' my
> Linux box on the floor next to me. But any other PC in the room can't
> 'see'
> the Linux box if I don't log in via work. If I do log in there is no
> problem.
> 
> What I would like to do I have one of the PC's be able to see shares
> on the
> Linux box without having to log in at work, obviously I want my wife
> to be
> able to use the resources without me logging her in and of course it
> is
> difficult to justify Sarah having an account at work :-).
> 
> Now I think I should be able to get around this be enabling 'domain
> logon'
> on the Linux box, but I am not sure if this is going to effect by
> works
> network in any way.
> Can anyone shed some light, or am I up a creek with no paddle...
> 
> 'ooroo
> 
> Mike...(:)-)
> 
> ------------------------------
> 
> Date: Mon, 19 Oct 1998 07:46:40 +0800
> From: "FALVEY Mark <Con>" <mark.falvey at mrwa.wa.gov.au>
> To: "'samba at samba.anu.edu.au'" <samba at samba.anu.edu.au>
> Subject: Mailing List
> Message-ID:
> <60334FB5333BD2118CB15000463018781F772A at dacsrv03.mrwa.wa.gov.au>
> 
> james.patton at mrwa.wa.gov.au is no longer a valid id in our Department,
> please remove this name from your mailing list.
> Regards
> 	Mark
> 
> 
> ___________________________________________________
> Mark Falvey
> Network Administrator
> Main Roads Western Australia                                        
> E-Mail:   mark.falvey at gecits-ap.com         
> Ph:   08 9323 4256    Fax:  08 9323 4138
>                                  
> 
> ------------------------------
> 
> Date: Mon, 19 Oct 1998 03:24:43 +0200
> From: Ludolf.Holzheid at t-online.de (Ludolf Holzheid)
> To: Samba Mailing List <samba at samba.anu.edu.au>
> Subject: Re: WIN 98 password problem (again)
> Message-ID: <362A94DB.6D6DFBA6 at t-online.de>
> 
> Szekely Denes wrote:
> > 
> > Three days ago I had a mad ideea to install Win 98 on my PC. Until
> this
> > date I cannot map or access from WINDOWS my user directory and any
> other
> > shared resurces on the SCO, because my password is rejected.
> >
> And some others answered...
> 
> 
> At first, I wanted to post a response to Szekely only, not CC'd to the
> list, as this is _not_ a new topic for the list, but I'm feeling
> Szekely
> (and other readers of the list) haven't got the information he was
> (they
> are) seeking for.
> 
> 
> It's right, Win98 uses - in opposite to Win95 - (clear-text
> equivalent)
> encrypted passwords by default.
> 
> To make a Win98 box and a Samba talk to each other, there are 2
> options:
> 
> (1)
> Switch the the samba box (and all the rest of the network) to
> encrypted
> passwords (see ENCRYPTION.TXT).
> 
> (2)
> Switch the Win98 box to plain-text passwords.
> To do so, open the Win98 explorer, doubleclick on
> Win95_PlainPassword.reg (part of the Samba distribution). The NT
> registry keys don't work for Win9x (yet).
> 
> 
> I recommend option (2) for now and use the "update encrypted" switch
> in
> smb.conf to build the password database. This should ease a later
> switch
> to option (1) (Szekely's box will not remain the only Win98 box at his
> LAN ;-).
> 
> 
> Ludolf
> 
> ------------------------------
> 
> Date: Sun, 18 Oct 1998 18:37:37 +0200
> From: TSchoessow at t-online.de (Thomas Schoessow)
> To: samba at samba.anu.edu.au
> Subject: Win98 and Samba
> Message-ID: <4.1.19981018183146.00c403f0 at server>
> 
> Hi there,
> 
> I know, that question has been answered a thousand times -), but what
> do I
> need to do to get access from a win98 client. It asks for a password,
> but
> there is no password !!
> 
> What do I need to do on both sides ?.
> 
> Thanks for your help
> 
> Thomas
> 
> 
> 
> 
> ------------------------------
> 
> Date: Sun, 18 Oct 1998 21:40:26 -0500
> From: Nathan Neulinger <nneul at umr.edu>
> To: samba at samba.anu.edu.au
> Subject: security=user AND guest share with NT?
> Message-ID: <19981018214025.A32393 at umr.edu>
> 
> Ok, here is the situation, I have a GINA module that does a samba
> mount 
> on NT w/ a guest connection. 
> 
> If I set the security mode to share, it works fine. If I set the
> security 
> mode to user, it doesn't. 
> 
> However, having security=share causes other weird problems with NT, 
> notably that once a connection has been made to a server as a guest
> user, 
> you can never connect to a share as a specific user. To reproduce, go
> to 
> map drive, don't put a userid in, then, when the next panel pops up
> that 
> asks for a user and pass, it doesn't matter what you put for the user,
> it 
> never uses it.
> 
> Is there any way to get both to work?
> 
> -- Nathan
> 
> ------------------------------------------------------------
> Nathan Neulinger                       EMail:  nneul at umr.edu
> University of Missouri - Rolla         Phone: (573) 341-4841
> Computing Services                       Fax: (573) 341-4216
> 
> ------------------------------
> 
> Date: Sun, 18 Oct 1998 23:38:52 -0400 (EDT)
> From: Mark Hazen <mhazen at franklin.uga.edu>
> To: Multiple recipients of list <samba at samba.anu.edu.au>
> Subject: Re: WIN 98 password problem
> Message-ID:
> <Pine.GSO.4.00.9810182325530.4018-100000 at ben.franklin.uga.edu>
> 
> 
> > From: Sarma Seetamraju <sarma at usa.net>
> > Subject: Re: SAMBA digest 1846 -- WIN 98 password problem
> > 
> > Maybe you can allow for old+new methods of authentication in your
> newer
> > releases :-
> > // consider FIRST that the passwd passed is cleartext
> > //    then use old method... of NOT using smbpasswd for
> authentication.
> > //            I guess you would use that in the UNIX crypt system
> call & match
> 
> This defeats the purpose of encrypted passwords. By god, when I stop
> collecting using the methods SAMBA already provides to us for
> migration to
> encrypted passwords, I will allow no unencryted connections. We're
> even
> getting rid of Telnet, in favor of SSH on all of our machines.
> 
> Encryption is no longer a tool for the paranoid, it's a necessity...
> espcially considering how freqeuntly machines have been getting hacked
> all
> around me. Sure, your network might be secure... but how about every
> single network a packet crosses to get from any of your users'
> locations
> to the server?
> 
> My honest suggestion would to be, as a quick fix, read the
> documentation
> on Encryption, as well as the Win95/NT notes, and set up the server
> for
> migration. Next, use the .reg files included with SAMBA for whichever
> platform you're talking about, and... TEMPORARILY... patch the client
> to
> use plaintext passwords. This impacts fewer users in the immediate
> sense,
> and allows the one problem machine to get back on the network. Go look
> in
> the DOCS directory under the SAMBA source tree... or, if you installed
> a
> RedHat Linux RPM, under /usr/doc/samba*.
> 
> After a couple of weeks of collection using the 'update encrypted'
> flag,
> change 'encrypt passwords' to 'yes'. But don't just leave clients
> unencrypted... remember, someone sniffing the wire with linsniff or
> some
> other such tool, will get the user's logon password, and will most
> likely
> use that to compromise the rest of the server. 
> 
> Please, though, don't make any assumptions about passwords... even
> *allowing* a check against a plaintext password as a default makes the
> systems running such a service one step easier to crack. I've had
> enough
> serious crack attempts in the past two weeks (11 logged) to worry
> about
> without this. =)
> 
> </Heavy Paranoia Mode Off>
> 
> Regards,
> 
> -mh.
> ----
>    . _+m"m+_"+_   Mark Hazen   Systems Group Coordinator
>  d' Jp     qh qh               The Franklin College of Arts & Sciences
> Jp  O       O  O               The University of Georgia (706)542-1546
> Yb  Yb     dY dY
>  O   "Y5m2Y"  "     even the mightiest wave starts out as a ripple.
>   "Y_           why make waves when it's easier to nurture ripples?
> 
> 
> ------------------------------
> 
> Date: Mon, 19 Oct 1998 13:57:02 +0930
> From: Alex Ardalich <alex at gsm.adelaide.edu.au>
> To: samba at samba.anu.edu.au
> Subject: NT transfer speeds
> Message-ID: <19981019135702.A21850 at gsm.adelaide.edu.au>
> 
> Heyas,
> 
> Did anyone resolve this problem?
> 
> I only realised how slow this was for me when installing netscape
> off a network drive crawled from a NT Workstation (SP3) compared
> to a W95 box.
> 
> Redhat 5.1, samba-1.9.18p10-51.1
> 
> Only option I have is TCP_NODELAY
> 
> Thanks, Alex
> 
> ------------------------------
> 
> End of SAMBA Digest 1848
> ************************


More information about the samba mailing list