Help with networking and samba

lazhome · 07-10-2006, 04:47 PM

Hi Everyone. I know there is a thread below with a kinda simler question, but it didnt answer mine. I have Suse 10.1 running of a P4 machine. I cant see any of the machines (almost all MS, a few macs). I followed some of the questions from the last post and here is what i get.

ps aux|grep mbd
root 20578 0.0 0.4 9620 2312 ? Ss 14:09 0:00 /usr/sbin/smbd -D
root 20579 0.0 0.2 9620 1084 ? S 14:09 0:00 /usr/sbin/smbd -D
deviants 21370 0.0 0.1 2752 696 pts/0 R+ 14:36 0:00 grep mbd

On my smb.conf file i have share set to "user", but i still cant access the linux box from any pc. I do not belive that we have a DC on this network, its all router DHCP. I have been using SWAT for samba configuration, Below is my smb.conf.

# Samba config file created using SWAT
# from 127.0.0.1 (127.0.0.1)
# Date: 2006/07/10 14:10:17

[global]
netbios name = SUSE
interfaces = eth0, eth1
security = SHARE
map to guest = Bad User
server signing = auto
printcap name = cups
add machine script = /usr/sbin/useradd -c Machine -d /var/lib/nobody -s /bin/false %m$
logon path = \\%L\profiles\.msprofile
logon drive = P:
logon home = \\%L\%U\.9xprofile
domain logons = Yes
os level = 65
preferred master = Yes
domain master = Yes
wins support = Yes
ldap ssl = no
cups options = raw
include = /etc/samba/dhcp.conf

[homes]
comment = Home Directories
valid users = %S, %D%w%S
read only = No
inherit acls = Yes
browseable = No

[profiles]
comment = Network Profiles Service
path = %H
read only = No
create mask = 0600
directory mask = 0700
store dos attributes = Yes

[users]
comment = All users
path = /home
read only = No
inherit acls = Yes
veto files = /aquota.user/groups/shares/

[groups]
comment = All groups
path = /home/groups
read only = No
inherit acls = Yes

[printers]
comment = All Printers
path = /var/tmp
create mask = 0600
printable = Yes
browseable = No

[print$]
comment = Printer Drivers
path = /var/lib/samba/drivers
write list = @ntadmin, root
force group = ntadmin
create mask = 0664
directory mask = 0775

[/home/deviants/documents]
path = /tmp

[netlogon]
comment = Network Logon Service
path = /var/lib/samba/netlogon
write list = root

[locations]
comment = Locations Share
path = /home/deviants/Documents/Locations/
read only = No
inherit acls = Yes

I really appricate any help, thanks in advance.

P.s. - if you have irc, im on in the #suse and #samba channels as deviants.

amitsharma_26 · 07-10-2006, 05:27 PM

hey lazhome;

I dint got one thing for sure; As in your samba configuration suggests that you want you samba to act as a PDC but still you hav set your security mode as a share only.

Have you done that intentionally ?

lazhome · 07-10-2006, 06:21 PM

im am just trying to get samba set up. I thought it was better to have it set up as the PDC instead of the BDC. After i can get file sharing working, i can redo the permissions and put it back to user. I dont know how to add users and passwords yet either

manishsingh4u · 07-10-2006, 06:26 PM

To add users to samba

Code:

smbpasswd -a anyLinuxLocalUser

EDIT:
Here's my /etc/samba/smb.conf

Code:

[global]
workgroup = WORKGROUP
server string = Samba Server
dns proxy = no
log file = /var/log/samba/log.%m
max log size = 1000
syslog = 0
panic action = /usr/share/samba/panic-action %d
security = user
encrypt passwords = true
passdb backend = tdbsam guest
obey pam restrictions = yes
invalid users = root
passwd program = /usr/bin/passwd %u
socket options = TCP_NODELAY
[homes]
   read only = no
   public = no
   create mask = 0755
   valid users = %U

Hope it helps.

amitsharma_26 · 07-10-2006, 06:56 PM

Hey laz;

It wud b better for you to get a know how abt the way these security modes work..

From : http://amitsharma.linuxbloggers.com/how_to_samba.htm
----------------------
1. security = share

Samba associate a password with each share.
User sends a share request & its own password but it does not explicitly sends its username for this request. In return samba now figures out about the user from its password it has got & then turn that share/pass into user/pass combination & grant the share access to that particular user.

Client ~~> (share/pass) ~~> Samba
Samba ~~> (figure out the user from the pass) ~~> (grants access of share) ~~> Client

2. **security = user

Samba mount shares with requested username / passoword combination.
Client ~~> (protocol negotiation) ~~> (session request (+ username/password + machine name)) ~~> Samba
Samba ~~> (authenticate user/pass) ~~> (grant access to mount shares) ~~> Client

* also valid for samba to act as a domain controller.
** Default security level for smb.conf, even if security=user is not mentioned in smb.conf.

------------------------
You can go thru the link, as i've mentioned a step by step implemenatation of Samba as PDC over dere.

You can ask me in b/w for any query or clarification.