passwords and NIS+

Diane Oman oman at cs.umt.edu
Thu Jun 29 18:57:04 GMT 2000


Hello,

I'm new to samba.  Trying to get it running on Solaris on Intel
using NIS+.  I configured it with the --with-nisplus --with-nisplus-home
and --with-automount.  I don't seem to be able to get authentication
to work.  

I've created the smbpasswd file from my nis+ tables, set the perms
per the docs (encryption.txt to name one) and when I try to run
smbpasswd to set a password for a user I get the following
message:

as root:

# /usr/local/samba/bin/smbpasswd oman
added interface ip=xxx.xxx.xxx.xx bcast=xxx.xxx.xxx.xx nmask=255.255.255.0
New SMB password:
Retype new SMB password:
make_sam_from_nisresult: NIS+ lookup failure: Database for table does not
exist
Failed to find entry for user oman.
Failed to modify password entry for user oman
# 

as a user:

[stillwater:oman] % /usr/local/samba/bin/smbpasswd
added interface ip=xxx.xxx.xxx.xx bcast=xxx.xxx.xxx.xx nmask=255.255.255.0
Old SMB password:
New SMB password:
Retype new SMB password:
machine 127.0.0.1 rejected the password change: Error was : The specified
password is invalid.
Failed to change password for oman
[stillwater:oman] % 

But this message is deceiving - and when it says the "specified password
is invalid"  - which password?  The old or the new?  When I've first
created the smbpasswd file from the NIS+ tables - what is the initial
"Old SMB password"?  Just a carriage return?  The unix password?  I don't
think so - it's just 32 X's in the smbpasswd file - so null?  (<CR>?)


- this is from the log files:

[2000/06/29 12:33:35, 2] smbd/server.c:main(746)
  Changed root to /
[2000/06/29 12:33:35, 2] lib/access.c:check_access(258)
  Allowed connection from localhost (127.0.0.1)
[2000/06/29 12:33:35, 2] smbd/reply.c:reply_special(97)
  netbios connect: name1=127.0.0.1        name2=STILLWATER     
[2000/06/29 12:33:35, 2] smbd/connection.c:utmp_claim(560)
  utmp_claim: conn NULL
[2000/06/29 12:33:35, 2] lib/access.c:check_access(258)
  Allowed connection from localhost (127.0.0.1)
[2000/06/29 12:33:35, 0] passdb/nispass.c:make_sam_from_nisresult(372)
  make_sam_from_nisresult: NIS+ lookup failure: Database for table does
not exist
[2000/06/29 12:33:35, 0] smbd/chgpasswd.c:check_oem_password(638)
  check_oem_password: getsmbpwnam returned NULL
[2000/06/29 12:33:35, 2] smbd/server.c:exit_server(408)
  Closing connections

I'm pretty confused at this point.  When it says "NIS+ lookup failure:
Database for table does not exist" is it complaining it doesn't
find my regular unix database (password.org_dir) - or do I have
to make an NIS+ table for the smbpasswd file (smbpasswd.org_dir). I'm
not finding much in the way of docs on this specifically.  I need
to get past this to get on with the rest of the connections and
printing stuff.

What are the scripts mknissmbpasswd.sh and mknissmbpwdtbl.sh in
the source tree's script subdirectory?  mknissmbpasswd.sh looks like
it builds the smbpasswd.org_dir table - is this essential?

I'm using encryption, and here's a copy of my smb.conf file:

[global]
   netbios name = STILLWATER
   workgroup = COMPSCI
   server string = samba server (solaris)
   hosts allow = 150.131.15. 150.131.110. 204.128.243. 127.
   printing = cups
   log file = log.%m
   log level = 2
   syslog = 4
   max log size = 5000
   encrypt passwords = yes
   smb passwd file = /usr/local/samba/private/smbpasswd
   local master = no
   dead time = 60
[test]
   comment = testing only
   path = /home/faculty/test
   read only = no
   guest ok = yes
[homes]
   comment = unix home directory space
   path = %H
   writeable = yes
   valid users = %S
   create mode = 0600
   directory mode = 0700
   locking = no

I really don't know how much of it works, or is correct at this point.

I've truss'd a few smbpasswd calls which seems to be more confusing.
If anyone could help me I'd greatly appreciate it!

Anyone out there using this with NIS+?

And I guess the last question should be - did I miss this stuff in
the docs?

Thanks for any help,

Diane
--



More information about the samba mailing list