Samba

SMB.CONF · 05-26-2009, 06:18 PM

Please advise.. I have setup samba on CentOS but having a few problem with the network logons. The home and shared directory works fine once manually logged in.

I cant get windows authentication working with samba. In windows how to I setup the domain? Is the domain just the workgroup name ("DELLNETWORK")? If this is right the windows returns the error can not find it. What have I missed?

I have added the server IP into the windows host file so I can connect using \\Serv.Local\.

Code:

[global]
workgroup = DELLNETWORK
netbios name = DELL
server string = Dell Server Network
security = user
encrypt passwords = Yes
map to guest = Bad Password
passwd program = /usr/bin/passwd
unix password sync = Yes
max log size = 50
time server = Yes
add user script = /usr/sbin/useradd -d /dev/null -g 100 -s /bin/false -M %u
logon script = %a.bat
domain logons = Yes
os level = 64
lm announce = True
preferred master = True
domain master = True
dns proxy = No
printing = lprng

[home]
comment = Home Directories
path = /home/%u
read only = No

[shared]
comment = Public Folder
path = /home/shared
public = yes
writable = yes

[printers]
comment = All Printers
path = /var/spool/samba
printable = Yes
browseable = No
available = No

[profile]
comment = User Profiles
path = /home/samba/profiles
create mode = 0600
directory mode = 0700
browsable = no
writeable = yes

[netlogon]
comment = Network Login
path = /home/samba/netlogon
guest ok = yes
browsable = no
writeable = no

billymayday · 05-26-2009, 07:06 PM

Yes, the domain is the workgroup name.

What version of Windows are you using?

jschiwal · 05-26-2009, 07:16 PM

If you want to configure the samba server as a domain controller, I would recommend resorting to the "Samba 3 by Example" and "Using Samba" books. The "Using Samba" documentation comes with the samba package. The "Samba 3 by Example" book is supplied by the samba-doc package or from the Samba website.

There are things to be done on the server and on the windows clients as well. A network admin group member needs to log in and add the windows hosts to the domain before a user can log in. The password database needs to be populated with the user information. You can do this part using NT grade windows admin tools, from a windows machine. The Using Samba documentation (html based version of Using Samba comes with the samba package) has a url for them (from the Windows site) that works the best with Samba.

Check your [profile] service. I'm not home right where I can check, but it doesn't look quite right at first glance.
Also what password backend will you be using?

How many hosts are in your network? What versions of windows are you dealing with? For example, windows XP home edition can not join a domain. You need "XP Pro".

----
If this is for a home network, with only a few computers, you can do much the same thing with the "security = user" model, adding Linux uses for each Windows user, and using "smbpasswd" to enter the username/passwords to the smbpasswd database file.

billymayday · 05-26-2009, 07:22 PM

Actually, I would suggest that you will have SELinux issues with having your profile directory under /home.

Read the SELinux notes in the CentOS smb.conf

SMB.CONF · 05-26-2009, 08:01 PM

Its for a small office network of 4 PCs, maybe more if we add laptops.

Should the security = domain, user, or ads?

I am using XP Pro to test the samba is working.

billymayday · 05-26-2009, 08:02 PM

Then I'd look at fireall settings. See http://us3.samba.org/samba/docs/man/...#firewallports