Hi,

I'm having some trouble with Samba Permissions on an NT4 domain. I've tried so many things, I've confused myself. I was having issues where windows users who "owned" a file, couldn't write to it. Assuming it was a domain/samba problem between my NT4.0 PDC and Fedora 3 Samba file server, I decided to 'rejoin' the domain.

It 'seemed' to work, but then nobody could write to their Home directories...I made the problem worse! I went to the Samba GUI and found duplicate members of my domain listed in the "mapped user" list. When I look in the Fedora Users list though, everything looks normal - just one of each user. Samba GUI shows duplicate member names.

So my question is, where can I find the file that holds these duplicate domain member names so I can try to fix it? I mapped myself in the Samba gui using the second instance of my name, and it appears to have fixed my access problems....but I really don't want to leave duplicate entries in there....

My brain is frazzled, so sorry if this doesn't make sense. Bottom line is I have duplicate instances of each NT4.0 domain member in my 'mapping options' in the Samba GUI. Any help would be greatly appreciated.

Thanks in advance,

Mark.

I think the /etc/samba/private/smbpasswd keeps the info about the samba users, or wherever the samba stuff is kept on your machine.

I've never used a gui to set up the users, just the commandline smbpasswd program, and that's where it stores all the info i believe.

You might try poking around for that file and see if that helps ya.

Thanks Buaku,

I only see one instance of each user in the smbpasswd file - which incidentally, is located in the samba folder...I don't have a "private" folder in the samba folder - only have files.

Thanks for the help though, I appreciate any further assistance anyone can provide.

Thanks again,

Mark.

Ok, after looking through it more, I 'think' I know the problem. When I joined the domain and tried to set up trusts, the Fedora box acquired all my users off the NT4.0 box...and it 'happened' to be formatted exactly like I had added users in the Fedora box. This subsequently showed what 'appeared' to be duplicate users... however, one was a fedora user, and the other an NT4.0 user.

Still a bit confusing to me though, because if I can't assign fedora permissions to the home share using the NT4.0 user accounts, then how do I allow NT4.0 users to write to their home directories? Or..... do I set write access to 'everyone' with the Fedora permissions, and then in Samba, only allow specific NT4.0 user's to write to their own home directories?

Thanks in advance,

Mark

Do you mean let the users write to their home directory on the linux machine?
In each of the config blocks in the smb.conf there should be a line that says:
Or it could be set to no if you don't want to let that directory be writable.

I think there's even a special block in the smb.conf to handle home directories.

Vague memory stirring...

Take a look at how NT handles oplocks. I don't recall the details, but many years ago I had a problem similar to what you describe when I was installing an earlier version of samba on an Amiga. I had to do something non-standard with NT opportunistic locking.

Thanks guys, I'll look at both of your references and see where I go.

Thanks again,

Mark.