Hi

I need some help mounting a Linux Samba share to a Windows box. The Linux server is RedHat RHEL5, Samba 3.0. I'm testing on a Windows 7 desktop, but the perl script executing the command runs on a Windows 2003 server. I am able to successfully mount the Linux Samba share to my desktop using the net use command and my Actvice Directory domain account with this syntax.
net use x: \\grape\netusetest /user:ABC\cathysmith

But what I need to do is to use a local Linux account that is not defined in Active Directory. I get prompted for the password, but get "Access is denied" using this syntax:
net use x: \\grape\netusetest /user:grape\cathy

I'm not getting anything useful from the smbd log.

My smb.conf file looks like:

[netusetest]
comment = NetUse TestDirectory
browseable = yes
public = no
path = /apps/netusetest
valid users = cathysmith,cathy
writable = no
force group = apache
force user = root

The /apps/netusetest directory is owned by root:apache with permissions 777.

Thanks for your help.


Cathy Smith
durus123@yahoo.com

Hi there,

have you tried not to specify any domain? The parameter /user:grape\cathy means: Log in as user "cathy" from domain "grape". If cathy is a Samba user that isn't registered in a domain, try /user:cathy and optionally add the password after that.

And is Samba acting as a domain controller?

Not a good idea. Don't be that generous with your access rights.

[X] Doc CPU

In this case, I'm defaulting everything to the Active Directory domain. When I tried the syntax:
net use x: \\grape\netusetest /user:cathy
the Linux server tries to authenticate the account cathy as an AD account via Kerberos. It's not looking
to the local password file. The Linux server is not the domain controller. That's handled on the Windows
side here.

This is the global section from my smb.conf

[global]
workgroup = ABC
server string = Samba Server
security = ADS
encrypt passwords = Yes
password server = dc1 dc2
realm = abc.foor
log level = 0
os level = 0
local master = No
map to guest = Bad User
writeable = no
printing = bsd

idmap uid = 16777216-33554431
idmap gid = 16777216-33554431
template shell = /bin/false
winbind use default domain = no


I'm not an expert with Samba or how Samba is run from the Windows side. I think the last time I ran into a related issue, we solved it by added the
account to the AD. Now that I recall that information, from a year ago, I remember that Samba 3.0 does not failover to the local password file. I
believe the answer I found back then was I was going to have to do someing about configuring windbind, which I know nothing about. I may go back to
the customer and tell them they are going to have to export a Samba share to my Linux server. That I know how to do.

FYI, the permissions were just to get this test going.

Thanks.


Cathy