Re: Samba problems sharing a drive to W2000 (with usermap and SHARE security)
From: banzai (banz_at_kk.com)
Date: 08/25/03
- Next message: Manish Baronia: "C API to get Total SWAP installed on a HPUX machine"
- Previous message: Florian Anwander: "Re: DLT8000 on K-Class HPUX 10.20"
- In reply to: Alan Johnson: "Re: Samba problems sharing a drive to W2000 (with usermap and SHARE security)"
- Next in thread: Alan Johnson: "Re: Samba problems sharing a drive to W2000 (with usermap and SHARE security)"
- Reply: Alan Johnson: "Re: Samba problems sharing a drive to W2000 (with usermap and SHARE security)"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]
Date: Mon, 25 Aug 2003 08:11:57 GMT
Hi Alan
Thanks for your response - security - can you tell me where this is set in
win2000 ? - I don't think this is the problem as I can map to other samba
shares (tru64 unix) with the same client.
Correct hashes - can you explain please, I've set smbpasswd up for both
users - is this sufficient ?
"Alan Johnson" <adjtech@ulster.net> wrote in message
news:EJucnbFaopnFdNWiU-KYgg@thebiz.net...
> banzai wrote:
>
> > Hello
> >
> > Can anybody help on this one ?
> > I'm trying to share a HP-UX filesystem to W2000 clients with SAMBA.
> >
> > Here is the samba conf file (I'm trying to share out the /support area
where
> > access is granted only to local user 'support') :
> >
> > # Global parameters
> > [global]
> > workgroup = EMEA
> > netbios name = HPTEMIP1
> > server string = Samba Server
> > security = SHARE
> > username map = /etc/opt/samba/usermap
> > log level = 4
> > log file = /smblog
> > max log size = 1000
> > local master = No
> > guest account =
> > read only = No
> > short preserve case = No
> > dos filetime resolution = Yes
> >
> > [support]
> > path = /support
> > valid users = support
> > browseable = No
> >
> > I want several defined users to be able to come in on the support
account so
> > I am using a usermap file (at the moment there is just one account
'dasp'
> > defined on the remote (win 2000) side to map to 'support' on the hp-ux
side.
> > ( If I can get it to work then I will ad more):
> >
> > # cat usermap
> > support = dasp
> > #
> >
> > From the log file it looks as though the account mapping is working (see
> > [2003/08/22 16:00:02, 3] below).
> >
> > But it then goes on to report:
> >
> > [2003/08/22 16:00:02, 2] smbd/reply.c:(1016)
> > Defaulting to Lanman password for support
> > [2003/08/22 16:00:02, 4] smbd/password.c:(593)
> > Null passwords not allowed.
> >
> > The HP-UX node has a local 'support' account and smb account both with
the
> > same password. As can bee seen from below, authentication is failing
from
> > 'dasp' but I'm not sure of the exact reason why..
> >
> > TIA
> >
> >
> >
> >
> > [2003/08/22 16:00:01, 2] smbd/server.c:(907)
> > Changed root to /
> > [2003/08/22 16:00:01, 3] smbd/oplock.c:(1214)
> > open_oplock_ipc: opening loopback UDP socket.
> > [2003/08/22 16:00:01, 3] lib/util_sock.c:(813)
> > bind succeeded on port 0
> > [2003/08/22 16:00:01, 3] smbd/oplock.c:(1244)
> > open_oplock ipc: pid = 13958, global_oplock_port = 64352
> > [2003/08/22 16:00:01, 4] lib/time.c:(114)
> > Serverzone is -3600
> > [2003/08/22 16:00:01, 3] smbd/process.c:(846)
> > Transaction 0 of length 72
> > [2003/08/22 16:00:01, 2] smbd/reply.c:(91)
> > netbios connect: name1=HPTEMIP1 name2=DASP01
> > [2003/08/22 16:00:01, 2] smbd/reply.c:(110)
> > netbios connect: local=hptemip1 remote=dasp01
> > [2003/08/22 16:00:01, 3] smbd/process.c:(846)
> > Transaction 1 of length 137
> > [2003/08/22 16:00:01, 3] smbd/process.c:(685)
> > switch message SMBnegprot (pid 13958)
> > [2003/08/22 16:00:01, 3] smbd/sec_ctx.c:(328)
> > setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
> > [2003/08/22 16:00:01, 3] smbd/negprot.c:(342)
> > Requested protocol [PC NETWORK PROGRAM 1.0]
> > [2003/08/22 16:00:01, 3] smbd/negprot.c:(342)
> > Requested protocol [LANMAN1.0]
> > [2003/08/22 16:00:01, 3] smbd/negprot.c:(342)
> > Requested protocol [Windows for Workgroups 3.1a]
> > [2003/08/22 16:00:01, 3] smbd/negprot.c:(342)
> > Requested protocol [LM1.2X002]
> > [2003/08/22 16:00:01, 3] smbd/negprot.c:(342)
> > Requested protocol [LANMAN2.1]
> > [2003/08/22 16:00:01, 3] smbd/negprot.c:(342)
> > Requested protocol [NT LM 0.12]
> > [2003/08/22 16:00:01, 3] smbd/negprot.c:(426)
> > Selected protocol NT LM 0.12
> > [2003/08/22 16:00:02, 3] smbd/process.c:(846)
> > Transaction 2 of length 155
> > [2003/08/22 16:00:02, 3] smbd/process.c:(685)
> > switch message SMBsesssetupX (pid 13958)
> > [2003/08/22 16:00:02, 3] smbd/sec_ctx.c:(328)
> > setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
> > [2003/08/22 16:00:02, 3] smbd/reply.c:(888)
> > Domain=[] NativeOS=[Windows 2000 2195] NativeLanMan=[Windows 2000
5.0]
> > [2003/08/22 16:00:02, 3] smbd/reply.c:(899)
> > sesssetupX:name=[]
> > [2003/08/22 16:00:02, 3] smbd/reply.c:(1079)
> > No such user [] - using guest account
> > [2003/08/22 16:00:02, 1] smbd/reply.c:(1113)
> > Username is invalid on this system
> > [2003/08/22 16:00:02, 3] smbd/error.c:(94)
> > error string = No such file or directory
> > [2003/08/22 16:00:02, 3] smbd/error.c:(109)
> > error packet at smbd/reply.c(1115) cmd=115 (SMBsesssetupX)
> > NT_STATUS_LOGON_FAILURE
> > [2003/08/22 16:00:02, 3] smbd/process.c:(846)
> > Transaction 3 of length 166
> > [2003/08/22 16:00:02, 3] smbd/process.c:(685)
> > switch message SMBsesssetupX (pid 13958)
> > [2003/08/22 16:00:02, 3] smbd/sec_ctx.c:(328)
> > setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
> > [2003/08/22 16:00:02, 3] smbd/reply.c:(888)
> > Domain=[EMEA] NativeOS=[Windows 2000 2195] NativeLanMan=[Windows 2000
> > 5.0]
> > [2003/08/22 16:00:02, 3] smbd/reply.c:(899)
> > sesssetupX:name=[DasP]
> > [2003/08/22 16:00:02, 4] lib/username.c:(139)
> > Scanning username map /etc/opt/samba/usermap
> > [2003/08/22 16:00:02, 3] lib/username.c:(173)
> > Mapped user DasP to support
> > [2003/08/22 16:00:02, 2] smbd/reply.c:(1016)
> > Defaulting to Lanman password for support
> > [2003/08/22 16:00:02, 4] smbd/password.c:(593)
> > Null passwords not allowed.
> > [2003/08/22 16:00:02, 3] smbd/reply.c:(1073)
> > Registered username support for guest access
> > [2003/08/22 16:00:02, 3] smbd/process.c:(991)
> > Chained message
> > [2003/08/22 16:00:02, 3] smbd/process.c:(685)
> > switch message SMBtconX (pid 13958)
> > [2003/08/22 16:00:02, 3] smbd/sec_ctx.c:(328)
> > setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
> > [2003/08/22 16:00:02, 4] smbd/reply.c:(334)
> > Got device type ?????
> > [2003/08/22 16:00:02, 4] smbd/password.c:(593)
> > Null passwords not allowed.
> > [2003/08/22 16:00:02, 2] smbd/service.c:(331)
> > Invalid username/password for support []
> > [2003/08/22 16:00:02, 3] smbd/error.c:(109)
> > error packet at smbd/reply.c(166) cmd=117 (SMBtconX)
> > NT_STATUS_WRONG_PASSWORD
> > [2003/08/22 16:01:02, 3] smbd/sec_ctx.c:(328)
> >
> >
> >
> You should check to see if in Security settings on the W2000 system "
> allow 3rd party SMB servers to use unencrypted passwds" is checked. Do
> you have an smbpasswd file with the correct hashes in it?
>
- Next message: Manish Baronia: "C API to get Total SWAP installed on a HPUX machine"
- Previous message: Florian Anwander: "Re: DLT8000 on K-Class HPUX 10.20"
- In reply to: Alan Johnson: "Re: Samba problems sharing a drive to W2000 (with usermap and SHARE security)"
- Next in thread: Alan Johnson: "Re: Samba problems sharing a drive to W2000 (with usermap and SHARE security)"
- Reply: Alan Johnson: "Re: Samba problems sharing a drive to W2000 (with usermap and SHARE security)"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]
Relevant Pages
|
