Password server option necessary?

[MCCALL,DON (HP-USA,ex1)]

Hello Nimish,
No, that's not the way it works - the whole point of security = server is
that you are TELLING samba that someone ELSE will be doing ntlmV1 password
authentication FOR you.  The password server = line needs to be there to
tell samba WHO to pass authentication off to.  You should specify the
"workgroup = " to be the DOMAIN of the NT server that will be doing your
password authentication, and the password server = line be a list of
PDC/BDC's in that domain, or a "*" which will tell samba to go FIND a
PDC/BDC in that domain.

If you want Samba to do it's own authentication, you should be in
security=USER mode, and set up your smbpasswd file with the usernames and
passwords of the users you want to have access to your machine.

I won't go into detail, but please read chapter 6 in the O'Reilly "Using
Samba" book; you can purchase it, or read it online in html format at
http://us2.samba.org/samba/oreilly/using_samba/

Hope this helps,
Don



-----Original Message-----
From: Nimish Philip [mailto:nimish.philip at kssb.kroschu.com]
Sent: Tuesday, January 30, 2001 2:31 AM
To: samba at us5.samba.org
Subject: Password server option necessary?


Hello

My security setting is server i.e security = server
Is it then necessary/mandatory  to have an explicit password server =
<whatever> declaration?

Can't the server running samba act as the password server?

The setup is samba 2.0.7 on Solaris 2.5.1 and i'm trying to login and
map drives from a Win2k Server machine.

This is a snip of my log file...

[2001/01/30 09:14:55, 1] smbd/files.c:file_init(216)
  file_init: Information only: requested 10000 open files, 1014 are
available.
[2001/01/30 09:15:37, 0] smbd/password.c:server_cryptkey(1025)
  password server not available
[2001/01/30 09:15:37, 1] smbd/password.c:server_validate(1069)
  password server  is not connected
[2001/01/30 09:15:37, 1] smbd/reply.c:reply_sesssetup_and_X(925)
  Rejecting user 'nimish': authentication failed


--
 Nimish Philip (I.T. Department)
 Kromberg & Schubert Brits South Africa (Pty) Ltd.
 Phone  : +27 12 2501100 ext: 1117
 Fax    : +27 12 2501122