[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [Sheflug] Samba file sharing need help




> I managed to get the peer  to peer network running with samba I now need 
> to sort of file sharing how the hell do  i do that in swat it confuses me.
> My best attempt so far is for my file share to show up on the windoze 
> machine but i cannot open it. Every time i type in the password it say 
> access denyed please some help explain to me how to sort this out.
> Also anyone sorted out blueyonder dialup access problems? no web access 
> for 30 minutes or more?
> 
> all the best sammy

This is probably a problem with WinXX passwords...well...not a problem per 
se, more a feature that has two fixes. But first the problem.

Starting with WinNT 4 SP3 and Win95 OSR 2, Microsoft started encoding 
passwords as they go out over the network. This is a good thing - it helps 
security. However Samba doesn't support this without adding some extra config.

So two solutions:
1. Make samba recognise encrypted/encoded passwords
or
2. Force windows to send out plaintext passwords.

(1) is detailed in the samba docs - can't remember which one off the top of 
my head ... but a quick check at http://ie.samba.org/ reveals the document 
here:
	http://ie.samba.org/samba/ftp/docs/textdocs/ENCRYPTION.txt

(2) is simpler but less secure. Samba comes with a bunch of registry patches, 
named summat like Win95_PlainPassword.reg or WinNT_PlainPassword.reg and 
similar for various incarnations of Windows. If you copy one of these files 
to the windows box, and double click on it, it'll say "registry file merged" 
or words to that effect. You'll then need to reboot the machine.

Another potential method is to change the security type from security = user 
to security = share, then in the share have "guest ok = true". This is done 
in the config file - there is probably a SWAT way of doing it, but I've never 
used the thing :)

Setting security to share and allowing guests means that the particular share 
is open to all to connect to without a password. If you have security = user, 
but public = yes (your smb.conf may use 'guest ok' rather than 'public', but 
this is okay - they're synonyms for each other), you still need to 
authenticate with samba, from what I've experienced. And this may not work (I 
spent a little while trying to get it working on a box at work to no avail).

Thus a minimal smb.conf would look like:

[global]
	security = share

[myshare]
	path = /path/to/my/share
	public = yes
	writeable = yes
	browseable = yes

Though there'd probably be a lot more (and you may want a lot more) in the 
[global] section.

You can't tell I've used samba before can you? :)

Chris...


-- 
Chris Johnson            \  "If not for me then, do it for yourself. If not
sixie@nccnet.co.uk        \  for then do it for the world." -- Stevie Nicks
www.nccnet.co.uk/~sixie/   ~---------------------------------------+
Redclaw chat - http://redclaw.org.uk - telnet redclaw.org.uk 2000   \______


---------------------------------------------------------------------
Sheffield Linux User's Group - http://www.sheflug.co.uk
To unsubscribe from this list send mail to
- <sheflug-request [at] vuw.ac.nz> - with the word 
 "unsubscribe" in the body of the message. 

  GNU the choice of a complete generation.