LinuxQuestions.org
Latest LQ Deal: Latest LQ Deals
Home Forums Tutorials Articles Register
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Software
User Name
Password
Linux - Software This forum is for Software issues.
Having a problem installing a new program? Want to know which application is best for the job? Post your question in this forum.

Notices


Reply
  Search this Thread
Old 07-09-2002, 12:08 PM   #1
fowlerlfc
LQ Newbie
 
Registered: Jul 2002
Posts: 13

Rep: Reputation: 0
hosts allow problem?


I've just configured a samba 2.5 on a box running redhat 7.1. The box's name is linuxweb.

My problem is this when I click on linuxweb (or access it from run on the start menu) I get a enter network password dialog box. When I enter the username of amiller (which is listed as a valid user) I get the following message:

\\linuxweb is not accessible
the account is not authorized to login from this station.

My hosts allow = 127.0.0.1 10.186.32.44 10.186.32.

I am attempting to access linuxweb from an NT4 box addressed as 10.186.32.44.

Does anyone know what the problem is?
 
Old 07-09-2002, 01:24 PM   #2
tarballedtux
Member
 
Registered: Aug 2001
Location: Off the coast of Madadascar
Posts: 498

Rep: Reputation: 30
Make sure the user is both a local user(i.e. in /etc/passwd and also a Samba user ( smbpasswd -a amiller ). Then try to log in to the share.
 
Old 07-09-2002, 01:41 PM   #3
fowlerlfc
LQ Newbie
 
Registered: Jul 2002
Posts: 13

Original Poster
Rep: Reputation: 0
tarballedtux,

thanks for the response, but unfortunately, your solution didn't help. any other ideas?
 
Old 07-09-2002, 04:19 PM   #4
fizban64
LQ Newbie
 
Registered: Dec 2001
Location: England
Distribution: RH 9,MS 2000 pro
Posts: 7

Rep: Reputation: 0
try putting in the name of the machine, I remember that Unix sees 127.0.0.1 and machine name as different things. Can you login as root from that machine ?, can you ping the Linux box from your NT 4 machine ?, if yes to both then in your samba settings allow all users, login as your user account, if it works then it's something to do with users. If not then your problem lies else where. Make sure your firewall allows connections, can you administer the Samba Linux off the NT 4 machine using the browser ? (Web config).. Anyhow's good luck.
 
Old 07-09-2002, 04:32 PM   #5
pickledbeans
Member
 
Registered: Jun 2002
Location: Bailey, CO
Distribution: Slackware
Posts: 483

Rep: Reputation: 32
Quoting from the portmapper man page:

Access control
By default, host access control is enabled. However, the host that runs
the portmapper is always considered authorized. The host access control
tables are never consulted with requests from the local system itself;
they are always consulted with requests from other hosts.

In order to avoid deadlocks, the portmap program does not attempt to look
up the remote host name or user name, nor will it try to match NIS net-
groups. The upshot of all this is that only network number patterns will
work for portmap access control.

Sample entries for the host access-control files are:

/etc/hosts.allow:
portmap: your.sub.net.number/your.sub.net.mask
portmap: 255.255.255.255 0.0.0.0

/etc/hosts.deny
portmap: ALL

The syntax of the access-control files is described in the
hosts_access(5) and hosts_options(5) manual page that comes with the tcp
wrapper (log_tcp) sources. The safe_finger command comes with later wrapper releases.

The first line in the hosts.allow file permits access from all systems within your own subnet. Some rpc services rely on broadcasts and will contact your portmapper anyway; and once an intruder has access to your local network segment you're already in deep trouble.

The second line in the hosts.allow file may be needed if there are any
PC-NFS systems on your network segment.

Last edited by pickledbeans; 07-09-2002 at 04:35 PM.
 
Old 07-09-2002, 04:38 PM   #6
pickledbeans
Member
 
Registered: Jun 2002
Location: Bailey, CO
Distribution: Slackware
Posts: 483

Rep: Reputation: 32
And quoting from the hosts_access manpage:

ACCESS CONTROL
allow

deny Grant (deny) service. These options must appear at the end of a rule.

The allow and deny keywords make it possible to keep all access control rules
within a single file, for example in the hosts.allow file.

To permit access from specific hosts only:

ALL: .friendly.domain: ALLOW
ALL: ALL: DENY

To permit access from all hosts except a few trouble makers:

ALL: .bad.domain: DENY
ALL: ALL: ALLOW

Notice the leading dot on the domain name patterns.

Last edited by pickledbeans; 07-09-2002 at 04:43 PM.
 
Old 07-10-2002, 11:10 AM   #7
fowlerlfc
LQ Newbie
 
Registered: Jul 2002
Posts: 13

Original Poster
Rep: Reputation: 0
you're not going to believe this!

i changed encrypted = no to yes, and now i have connectivity!

thanks for all your help!
 
Old 07-10-2002, 11:26 AM   #8
pickledbeans
Member
 
Registered: Jun 2002
Location: Bailey, CO
Distribution: Slackware
Posts: 483

Rep: Reputation: 32
Quote:
Originally posted by fowlerlfc
you're not going to believe this!

i changed encrypted = no to yes, and now i have connectivity!

thanks for all your help!
If your all talking about samba, sure it believe it
In order for samba to acccept windows password that has
to be set in smb.conf.

Keep in mind you also have to use smbpasswd
to create smb login for each user, and keep password
synced betwen win and samba.
 
  


Reply



Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
External Hosts Resolve but Local Hosts Do Not kjm9 Linux - Networking 7 11-19-2005 03:51 PM
etc/hosts problem Justbill Linux - Software 8 08-12-2005 05:12 PM
/etc/hosts problem SlipAway172 Ubuntu 3 06-07-2005 05:19 PM
hosts.allow & hosts.deny question... jonc Linux - Security 9 03-05-2005 09:41 PM
Adding shell commands to hosts.deny and hosts.allow ridertech Linux - Security 3 12-29-2003 03:52 PM

LinuxQuestions.org > Forums > Linux Forums > Linux - Software

All times are GMT -5. The time now is 02:00 AM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration