Re: Samba problems sharing a drive to W2000 (with usermap and SHARE security)
From: Alan Johnson (adjtech_at_ulster.net)
Date: 08/24/03
- Previous message: Alan Johnson: "Re: Secure replacement for "Secure" web console?"
- In reply to: banzai: "Samba problems sharing a drive to W2000 (with usermap and SHARE security)"
- Next in thread: banzai: "Re: Samba problems sharing a drive to W2000 (with usermap and SHARE security)"
- Reply: banzai: "Re: Samba problems sharing a drive to W2000 (with usermap and SHARE security)"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]
Date: Sun, 24 Aug 2003 12:35:41 -0400
banzai wrote:
> Hello
>
> Can anybody help on this one ?
> I'm trying to share a HP-UX filesystem to W2000 clients with SAMBA.
>
> Here is the samba conf file (I'm trying to share out the /support area where
> access is granted only to local user 'support') :
>
> # Global parameters
> [global]
> workgroup = EMEA
> netbios name = HPTEMIP1
> server string = Samba Server
> security = SHARE
> username map = /etc/opt/samba/usermap
> log level = 4
> log file = /smblog
> max log size = 1000
> local master = No
> guest account =
> read only = No
> short preserve case = No
> dos filetime resolution = Yes
>
> [support]
> path = /support
> valid users = support
> browseable = No
>
> I want several defined users to be able to come in on the support account so
> I am using a usermap file (at the moment there is just one account 'dasp'
> defined on the remote (win 2000) side to map to 'support' on the hp-ux side.
> ( If I can get it to work then I will ad more):
>
> # cat usermap
> support = dasp
> #
>
> From the log file it looks as though the account mapping is working (see
> [2003/08/22 16:00:02, 3] below).
>
> But it then goes on to report:
>
> [2003/08/22 16:00:02, 2] smbd/reply.c:(1016)
> Defaulting to Lanman password for support
> [2003/08/22 16:00:02, 4] smbd/password.c:(593)
> Null passwords not allowed.
>
> The HP-UX node has a local 'support' account and smb account both with the
> same password. As can bee seen from below, authentication is failing from
> 'dasp' but I'm not sure of the exact reason why..
>
> TIA
>
>
>
>
> [2003/08/22 16:00:01, 2] smbd/server.c:(907)
> Changed root to /
> [2003/08/22 16:00:01, 3] smbd/oplock.c:(1214)
> open_oplock_ipc: opening loopback UDP socket.
> [2003/08/22 16:00:01, 3] lib/util_sock.c:(813)
> bind succeeded on port 0
> [2003/08/22 16:00:01, 3] smbd/oplock.c:(1244)
> open_oplock ipc: pid = 13958, global_oplock_port = 64352
> [2003/08/22 16:00:01, 4] lib/time.c:(114)
> Serverzone is -3600
> [2003/08/22 16:00:01, 3] smbd/process.c:(846)
> Transaction 0 of length 72
> [2003/08/22 16:00:01, 2] smbd/reply.c:(91)
> netbios connect: name1=HPTEMIP1 name2=DASP01
> [2003/08/22 16:00:01, 2] smbd/reply.c:(110)
> netbios connect: local=hptemip1 remote=dasp01
> [2003/08/22 16:00:01, 3] smbd/process.c:(846)
> Transaction 1 of length 137
> [2003/08/22 16:00:01, 3] smbd/process.c:(685)
> switch message SMBnegprot (pid 13958)
> [2003/08/22 16:00:01, 3] smbd/sec_ctx.c:(328)
> setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
> [2003/08/22 16:00:01, 3] smbd/negprot.c:(342)
> Requested protocol [PC NETWORK PROGRAM 1.0]
> [2003/08/22 16:00:01, 3] smbd/negprot.c:(342)
> Requested protocol [LANMAN1.0]
> [2003/08/22 16:00:01, 3] smbd/negprot.c:(342)
> Requested protocol [Windows for Workgroups 3.1a]
> [2003/08/22 16:00:01, 3] smbd/negprot.c:(342)
> Requested protocol [LM1.2X002]
> [2003/08/22 16:00:01, 3] smbd/negprot.c:(342)
> Requested protocol [LANMAN2.1]
> [2003/08/22 16:00:01, 3] smbd/negprot.c:(342)
> Requested protocol [NT LM 0.12]
> [2003/08/22 16:00:01, 3] smbd/negprot.c:(426)
> Selected protocol NT LM 0.12
> [2003/08/22 16:00:02, 3] smbd/process.c:(846)
> Transaction 2 of length 155
> [2003/08/22 16:00:02, 3] smbd/process.c:(685)
> switch message SMBsesssetupX (pid 13958)
> [2003/08/22 16:00:02, 3] smbd/sec_ctx.c:(328)
> setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
> [2003/08/22 16:00:02, 3] smbd/reply.c:(888)
> Domain=[] NativeOS=[Windows 2000 2195] NativeLanMan=[Windows 2000 5.0]
> [2003/08/22 16:00:02, 3] smbd/reply.c:(899)
> sesssetupX:name=[]
> [2003/08/22 16:00:02, 3] smbd/reply.c:(1079)
> No such user [] - using guest account
> [2003/08/22 16:00:02, 1] smbd/reply.c:(1113)
> Username is invalid on this system
> [2003/08/22 16:00:02, 3] smbd/error.c:(94)
> error string = No such file or directory
> [2003/08/22 16:00:02, 3] smbd/error.c:(109)
> error packet at smbd/reply.c(1115) cmd=115 (SMBsesssetupX)
> NT_STATUS_LOGON_FAILURE
> [2003/08/22 16:00:02, 3] smbd/process.c:(846)
> Transaction 3 of length 166
> [2003/08/22 16:00:02, 3] smbd/process.c:(685)
> switch message SMBsesssetupX (pid 13958)
> [2003/08/22 16:00:02, 3] smbd/sec_ctx.c:(328)
> setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
> [2003/08/22 16:00:02, 3] smbd/reply.c:(888)
> Domain=[EMEA] NativeOS=[Windows 2000 2195] NativeLanMan=[Windows 2000
> 5.0]
> [2003/08/22 16:00:02, 3] smbd/reply.c:(899)
> sesssetupX:name=[DasP]
> [2003/08/22 16:00:02, 4] lib/username.c:(139)
> Scanning username map /etc/opt/samba/usermap
> [2003/08/22 16:00:02, 3] lib/username.c:(173)
> Mapped user DasP to support
> [2003/08/22 16:00:02, 2] smbd/reply.c:(1016)
> Defaulting to Lanman password for support
> [2003/08/22 16:00:02, 4] smbd/password.c:(593)
> Null passwords not allowed.
> [2003/08/22 16:00:02, 3] smbd/reply.c:(1073)
> Registered username support for guest access
> [2003/08/22 16:00:02, 3] smbd/process.c:(991)
> Chained message
> [2003/08/22 16:00:02, 3] smbd/process.c:(685)
> switch message SMBtconX (pid 13958)
> [2003/08/22 16:00:02, 3] smbd/sec_ctx.c:(328)
> setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
> [2003/08/22 16:00:02, 4] smbd/reply.c:(334)
> Got device type ?????
> [2003/08/22 16:00:02, 4] smbd/password.c:(593)
> Null passwords not allowed.
> [2003/08/22 16:00:02, 2] smbd/service.c:(331)
> Invalid username/password for support []
> [2003/08/22 16:00:02, 3] smbd/error.c:(109)
> error packet at smbd/reply.c(166) cmd=117 (SMBtconX)
> NT_STATUS_WRONG_PASSWORD
> [2003/08/22 16:01:02, 3] smbd/sec_ctx.c:(328)
>
>
>
You should check to see if in Security settings on the W2000 system "
allow 3rd party SMB servers to use unencrypted passwds" is checked. Do
you have an smbpasswd file with the correct hashes in it?
- Previous message: Alan Johnson: "Re: Secure replacement for "Secure" web console?"
- In reply to: banzai: "Samba problems sharing a drive to W2000 (with usermap and SHARE security)"
- Next in thread: banzai: "Re: Samba problems sharing a drive to W2000 (with usermap and SHARE security)"
- Reply: banzai: "Re: Samba problems sharing a drive to W2000 (with usermap and SHARE security)"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]
Relevant Pages
|