[Samba] Windows password caching - NT server vs Samba....(was Simple (?) question )

Van Sickler, Jim vansickj-eodc at Kaman.com
Mon Apr 15 13:53:02 GMT 2002


Rich,

  If you aren't using PDC/BDC, then Security = domain is wrong.
It could be: security = share, username map = /etc/dbusers.map,
and your app unix account mapped to everybody in that file
(e.g. sambashare = *).

This is all (mostly ;-) ) guesswork.  Take a look at the
docs - smb.conf(5) has what you're looking for, I think.
Look at the "security" and "username map" sections-I just
noticed that "domain user map" (smbusers) and "username
map" (dbusers.map, or whatever you choose) are used
quite differently.


Jim

> -----Original Message-----
> From: Rich Pinder [mailto:rpinder at usc.edu]
> Sent: Monday, April 15, 2002 12:54 PM
> To: 'samba at lists.samba.org'
> Subject: Re: [Samba] Windows password caching - NT server vs
> Samba....(wasSimple (?) question )
> 
> 
> 
> 
> "Van Sickler, Jim" wrote:
> > 
> > > -----Original Message-----
> > > From: Rich Pinder [mailto:rpinder at usc.edu]
> > > Sent: Monday, April 15, 2002 10:30 AM
> > > To: samba at lists.samba.org
> > > Subject: [Samba] Windows password caching - NT server vs 
> Samba....(was
> > > Simple (?) question )
> > >
> > >
> > > I'm still puzzled about what's happening here.
> > >
> > > To recap (full details below) our windows NT client has different
> > > behavior depending on whether it's hitting an NT server, 
> vs a Samba
> > > server.
> > >
> > > A user/pw that is entered and accepted when accessing the 
> NT server is
> > > 'remembered' the next time the same resource is needed.  
> So the user
> > > doesnt get the 'login' prompt.
> > >
> > > But the same user/pw scenario is NOT remembered when 
> trying to access
> > > the Samba server.
> > >
> > > Note - the user/pw for the samba/NT share is NOT the same 
> user/pw that
> > > the person uses to log into their own NT client (its NOT 
> using network
> > > based authentication).
> > >
> > Rich,
> > 
> > A couple of other things to look out for:
> > 
> > In your smb.conf, add an entry for Password Server, and list your
> > PDC and BDC.  Be sure your Workgroup entry matches the Domain name.
> > 
> > Add the domain users accessing the share to the "smbusers"
> > file (in the directory your smb.conf is located).
> > 
> 
> Thanks Jim,
> 
> I'm running as workgroups, so I dont even bother with PDC / BDC's. 
> I've verified that the workgroups line is correct:
>   workgroup = TEACHERS
> 
> The smbusers file - I thought that had to do with unix user names
> mapping differently (which doesnt really apply in this case - the one
> user name i'm using is same in unix and samba).  But I added 
> a line - no
> effect.
> 
> I'll keep still fumbling my way through!
> 
> rich
> 
> -- 
> To unsubscribe from this list go to the following URL and read the
> instructions:  http://lists.samba.org/mailman/listinfo/samba
> 




More information about the samba mailing list