[Samba] Minimal configuration for Name Service

[Thiago Crepaldi]

Hello, Marc, thanks for answering


On Wed, Feb 26, 2014 at 2:11 PM, Marc Muehlfeld <samba at marc-muehlfeld.de>wrote:

> Hello Thiago,
>
> Am 26.02.2014 16:16, schrieb Thiago Crepaldi:
>
>  It seems to work fine (http://<mynetbiosname> redirected to our device
>> page), but an "official" confirmation would make me less nervous about
>> this
>> really odd use case.
>>
>
> If you only want to http://servername, you simply have to add that host
> to your DNS server. http does not use netbios. It uses DNS for name
> resolution.


The problem is that we can't assume there is a dns server at all. Our
device is a NAS, which is sold for home users and corporate customers. Some
will have a DNS server in place, others won't =/

>
>
> > My question is, regardless or security mode (workgroup/AD), what
> > would be the minimal smb.conf configuration to provide its own name
> > resolution and completely turn off file/authentication services ?
>
> I think, the most minimal config is:
>
> [global]
> workgroup = WKG
> netbios name = MYNAME
>

I guess I expressed myself poorly. I need a minimal configuration that is
also as safe as possible, so it is desired to turn off all unnecessary
services.


>
>
> I know, that this isn't an answer to your question, but why does your
> company want to run services (smb, etc.) on a host, that doesn't serve
> anything through it? It only opens places for attacks if it's not updated
> regularly.
>

Your question makes perfect sense. The thing is: our NAS's UPNP advertises
the device's name, which the user will use to connect (HTTP) in order to
configure services that will be enabled (e.g. initially the user needs to
go to http://<servername> to create partitions on the available disks.
After that, samba might serve shares)

Another solution wuld be make the UPNP advertise IP instead of names, but
home users might think that is confusing or "ugly" lol

As we can't assume there is a DNS Server, I thought we maybe could use
NetBIOS Name Service to do the trick.

If you want to connect to other services on this host, you don't need
> Samba, as most services use DNS for name resolution.
>

We need to resolve a name so the user can go to the device UI and configure
disks's partitions/Shares. but we can't assume there is a DNS server
available.


>
>
>
> Regards,
> Marc
>
>
>


-- 
Thiago