[Samba] W2K server, do you have to use a smbpasswd file?

[Ahmad Yahya]

From: "Derrick MacPherson" <derrick at multimedia.edu>

> I have gone in circles with this to the point I'm now confused... so
> sorry if this has been answered or is somewhere in the docs, cause I
> have definetly missed it. I have set samba up numerous times for nt4
> server, this is the first w2k.
> 
> I have a windows 2000 server, several mixed platform clients. I can't
> seem to get the unix machines to authenticate to the w2k server, unless
> I add an entry for the user into smbpasswd file. is this the only way it
> can be done? The machine added to the domain fine. I include the output
> of some commands that seem relevant:
> 
> ./smbclient -L localhost -N
> INFO: Debug class all level = 3   (pid 3330 from pid 3330)
> added interface ip=192.168.150.242 bcast=192.168.150.255
> nmask=255.255.255.128
> added interface ip=192.168.150.11 bcast=192.168.150.127
> nmask=255.255.255.128
> Anonymous login successful
> Domain=[MERCURYNET] OS=[Unix] Server=[Samba 2.2.2]
> 
>         Sharename      Type      Comment
>         ---------      ----      -------
>         tmp            Disk      Temporary file space
>         othertemp      Disk      Samba 2.2.2
>         IPC$           IPC       IPC Service (Samba 2.2.2)
>         ADMIN$         Disk      IPC Service (Samba 2.2.2)
> 
>         Server               Comment
>         ---------            -------
>         MEGALITH             Samba 2.2.2
>         THANATOS             
> 
>         Workgroup            Master
>         ---------            -------
>         MERCURYNET           
> 
> There is no Master, that seems wrong to me. It should be thanatos
> 
Probably this something connecting with wins. I have no idea.

> when I run the same command to the w2k server (thanatos)
> 
> 
> ./smbclient -L thanatos -N
> INFO: Debug class all level = 3   (pid 3338 from pid 3338)
> added interface ip=192.168.150.242 bcast=192.168.150.255
> nmask=255.255.255.128
> added interface ip=192.168.150.11 bcast=192.168.150.127
> nmask=255.255.255.128
> Password: 
> Anonymous login successful
> Domain=[MERCURYNET] OS=[Windows 5.0] Server=[Windows 2000 LAN Manager]
> 
>         Sharename      Type      Comment
>         ---------      ----      -------
> Error returning browse list: ERRDOS - ERRnoaccess (Access denied.)
> 
This is normal message, afaik, cause w2k doesn't let the anonymous login.
Login as a user of w2k.
./smbclient -L thanatos -U username
This login forces you to entry the password.

>         Server               Comment
>         ---------            -------
>         AIGER                
>         ARES                 
>         ARTEMIS              
>         ATUM                 
>         BISHAMON             
>         CERVELO              
>         IZANAMI              
>         MEGALITH             Samba 2.2.2
>         MP3                  Samba 2.2.2
>         ORACLE               
>         ORCUS                
>         OSIRUS               
>         PAX                  
>         RA                   
>         REALITY              
>         RETAS5               
>         RETAS6               
>         RETAS7               
>         RETAS8               
>         SOL                  
>         THANATOS             
>         THOR                 
>         VELOCITY             
> 
>         Workgroup            Master
>         ---------            -------
>         MERCURYNET           THANATOS
> 
> 
> my smb.conf:
> 
> [global]
>         workgroup = MERCURYNET
>         security = DOMAIN
You must run 'winbindd' daemon to use with security = domain.
Make adjustment to your 'etc/pam.d/login' that there's a doc how to do it.

hth
Yaya