Login Failure

Grant grant at conprojan.com.au
Mon Mar 26 01:26:44 GMT 2001


Nice explanation... However, howcome "sometimes" it allows it through and
other times it doesn't. Sometimes on the 2nd, 3rd, or 4th attempt it
allows the domain login to samba, on other attempts it will say the
password is incorrect.

On Mon, 26 Mar 2001, Tim Potter wrote:

> Seth Thornberry writes:
> 
> > ]Well not knowing anything about the setup, the standard answer is
> > ]workstations having DHCP addresses without forward and reverse
> > ]DNS entries and using 'hosts allow' and 'hosts deny' in the
> > ]smb.conf file.
> > 
> > How is that an answer? Or is that just a description of the problem? Does
> > samba not support that kind of set up? Why does samba have to have the DNS
> > names of the computers accessing it? Shouldn't samba be using netbios names?
> > Is this documented somewhere that I'm missing?
> 
> OK - when host machines connect to Samba and the 'hosts allow'
> and 'hosts deny' options are present, Samba needs to determine
> the DNS name to work out whether to allow the connection.  If the
> host does not have a reverse IP then it is automatically rejected
> as Samba cannot determine whether to allow or deny the
> connection.  This is because the code is based on the tcp wrapper
> code and netbios names are too easy to spoof.
> 
> Er, I don't think it is actually documented anywhere.  )-:
> 
> 
> Tim.
> 
> 
> 





More information about the samba mailing list