Setting up virtual samba servers

[MCCALL,DON (HP-USA,ex1)]

Hi Michael,
I have the same behavior here on Samba 2.0.7 on HP-UX 11.0.
My printers section looks as follows:

[printers]
load printers = no
browseable = no

And from an NT workstation I STILL get a Printers share showing up, though
it is empty.
In fact, if I remove the printers section entirely, I STILL get a
printers share show up.

I scanned the debug file, and found the netenum smb call that we reply to to
give back a list of shares to the client, and we (samba) are NOT sending any
information back that indicates that we HAVE a printers share; I am
beginning to suspect that this is a client side aberation....
Don

-----Original Message-----
From: MEwing at berkleyis.com [mailto:MEwing at berkleyis.com]
Sent: Monday, December 18, 2000 4:56 PM
To: Robert Dahlem
Cc: samba at samba.org
Subject: RE: Setting up virtual samba servers




Robert,

Thanks.    I tried specifying the password server and password file in the
smb.conf file
and it worked.   I had tried that before but for some reason it didn't work
- other issues
may have caused it fail then.

>> >Is it possible to setup the smb.conf file to NOT have the "user's
>> >home directory" and "printers" shares visible when using the "Network
>> >Neighborhood" utility to view and access the shares that are
>> >available from the samba server?    I only want the users to be able
>> >to see the shares that I have been defined for the samba server.
>>
>> Doesn't "browseable = no" help?

I tried this, but it didn't seem to make any difference.

I created a [printers] definition and specified "load printers = no" and
"browseable = no".  When I went back to the "Network Neighborhood" the
"Printers" share is still displayed.  I'll keep investigating this.

Thanks.

Michael Ewing




 

                    "Robert

                    Dahlem"              To:     "MEwing at berkleyis.com"

                    <Robert.Dahle        <MEwing at berkleyis.com>

                    m at gmx.net>           cc:     "samba at samba.org"
<samba at samba.org>       
                                         Subject:     RE: Setting up virtual
samba servers 
                    12/18/00

                    03:24 PM

                    Please

                    respond to

                    "Robert

                    Dahlem"

 

 





Micheal,

On Mon, 18 Dec 2000 15:09:27 -0600, MEwing at berkleyis.com wrote:

>In my current setup, almost all of the options are defined in the
>master smb.conf file.

Good.

>Following is a listing of the only options that are defined in the
>two virtual smb.conf files that I have setup.
>
>     virtual01.conf
>          [global]
>                security = server
>                password server = local_PDC
>
>     virtual02.conf
>          [global]
>                security = user

This is default, so it has just documentation purposes. Your server
will run with "security = user" as long as it does not include
virtual01.conf.

>                password file = /opt/samba/etc/smbpasswd

You should move this to the master configuration file: Think of a
situation where the client does not explicitly tell a server name
(remember: the program smbpasswd is a client too!). So where should
Samba search its password database?


>The configuration that I am trying to support is as follows.
>
>     Both virtual servers support the same file shares.   The only
>difference between the servers is how the user is authenticated.
>One virtual server uses the local PDC system to authenticate the
>users' passwords.   The second virtual server uses the local
>smbpasswd file to provide access for a limited number of remote users
>that are not listed in our local PDC.

Are you sure you really need all the virtual stuff? The man page for
smb.conf says:

  "security=server"

    In this mode Samba will try to validate the username/password by
    passing it to another SMB server, such as an NT box. If this fails
    it will revert to "security = user", [...]

So I think you don't need no virtual servers at all. Just configure:

  security = server
  password server = ...
  password file = ...

>Or, is it possible to setup the smb.conf file of a regular samba
>server to use multiple authentication methods?    (ie.  The samba
>server would first check the local smbpasswd file then it would check
>the PDC.)

No, only the other way round. BTW: That's what you described in the
first place. :-)


>Here is a separate question about resource shares.

>Is it possible to setup the smb.conf file to NOT have the "user's
>home directory" and "printers" shares visible when using the "Network
>Neighborhood" utility to view and access the shares that are
>available from the samba server?    I only want the users to be able
>to see the shares that I have been defined for the samba server.

Doesn't "browseable = no" help?

Regards,
        Robert


--
---------------------------------------------------------------
Robert.Dahlem at gmx.net           Fax +49-69-432647
---------------------------------------------------------------

Sent using PMMail (http://www.pmmail2000.com) - fast, decent, email
software; far better than Outlook. Try it sometime.