[Samba] Testing subnets with samba[Scanned]

[Felipe Augusto van de Wiel]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 01/16/2007 12:52 PM, David Greenhall escreveu:
> -----Original Message-----
> From: Felipe Augusto van de Wiel [mailto:felipe at paranacidade.org.br] 
> Sent: 16 January 2007 14:41
> To: samba at lists.samba.org
> Subject: Re: [Samba] Testing subnets with samba[Scanned]
> 
> 
> On 01/15/2007 11:49 AM, David Greenhall escreveu:
[...]
>>>Basically we have one server (mandriva 2006) running
>>>samba, it has two 4 port ethernet cards in it but
>>>only utilitising one port from each card. (10.10.10.1
>>>and 10.10.10.3)
>>>Every machine on the network is using the same subnet 
>>>mask (255.255.255.0)
>>>All machines are connected using one cisco switch.
>>>
>>>What I tried was enabling one of the other ports on the
>>>server and giving it the following details:
>>>IP address: 10.10.10.32
>>>Netmask: 255.255.255.224
>>>Broadcast: 10.10.10.63
>>>
>>>After enabling the card, everything seemed ok (I could
>>>ping the machine from mine straight away) However when
>>>I changed my network settings (win98) to the same subnet,
>>>samba would not let me login.
>>>
>>>The message was  "password expired or logon server refused
>>>connection"
>>>I could not login at all until I reset my network settings 
>>>back to the default subnet 255.255.25.0.
>>>
>>>Would be grateful if anyone could shed some light on this
>>>as I don't understand why I could not login.
>> 
>> 
>> 	It seems that you probably have some restrictions on
>> the smb.conf (like not allowing other networks) or you 
>> didn't "broadcast" properly, in any case, we will need the
>> important part of your smb.conf so we can check the details
>> (and not hard guess from the explanation). :-)

> Ok I probably should have copied the smb file to start with, my apologies.

	:-)


> # Global parameters
> [global]
[...]
> 	interfaces = eth1 eth5 lo
> 		(this was the only line I changed after
		enabling the other cards:  adding eth4)
> 	bind interfaces only = yes
> 	hosts allow = 10.10.10.0/24
> 	hosts deny  = 0.0.0.0/0

	Ok, so you had a rule for networks you accept and what
ports you bind to. Here is where we need to figure out the whole
picture.

	Looking closely you said in your first message that you
did the following setup:

	>>>IP address: 10.10.10.32
	>>>Netmask: 255.255.255.224
	>>>Broadcast: 10.10.10.63


	If that's right we have a small problem, not Samba related
but network related. Using .224 as a mask, creates networks with
32 IP number, but you lost the first (net address) and the last one
(broadcast address), which means that you should not use .32 as an
IP address.
			1st			2nd
	net-address	10.10.10.0		10.10.10.32
	address space	10.10.10.[1-30]		10.10.10.[33-62]
	broadcast	10.10.10.31		10.10.10.63

	Considering that you are using a /24 to allow conections
and you had the right interfaces to bind to, I should say that
changing the IP address would solve the problem. (At least, I
hope so). :-)


	Kind regards,

- --
Felipe Augusto van de Wiel <felipe at paranacidade.org.br>
Coordenadoria de Tecnologia da Informação (CTI) - SEDU/PARANACIDADE
http://www.paranacidade.org.br/           Phone: (+55 41 3350 3300)
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.6 (GNU/Linux)
Comment: Using GnuPG with Debian - http://enigmail.mozdev.org

iD8DBQFFrlKHCj65ZxU4gPQRAvr6AJ4gM8VwihqhdrLNnywrsUzQ7BdLTQCgz9lB
TxW46EAFR5ICe1vIN6d6uCE=
=Dk75
-----END PGP SIGNATURE-----