Hi

I just set up an OpenBSD machine to serve as a file server for backups of my Windows boxes.

Here's the basic configuration:


OpenBSD 3.6
Samba 2.212 (last release on ports-stable)
IP: 192.168.0.2
Hostname: thor


smb.conf
It's hand-written because at the end, I found it easier to deal with it in vi than in Swat

I get a window in which i have to enter the password for the acount 'thor\Guest'. When I try the password for the nobody account on the Samba box, it doesn't work.
When I set security = share, I get the message that the supplied password is invalid (not that I had the chance to enter one).

So, what I need is to have read/write access to the Data-share either when I am logged in on the Windows box with a user name present on the Samba box and in the mod group, or to be able to enter username and password for an account on the samba box when trying to access it.



I think this would be easier if Samba would serve as a Domain Controller, but this is no alternative as the Samba machine isn't supposed to run 24/7

I'm going to assume you want everyone to have read only access to the data share except for users in the group named mod, who will have read/write access. This is how you would set it up on Linux, I can only assume it would be the same on BSD.

Assuming user thorax is one of the users you want to have write access to the share, make sure thorax is a member of the group mod.
On the /data directory, you need to give the group named mod rwx access to it and all others only r-x access to it.

You need to use security = user in your smb.conf file. You need to create a Samba user named thorax with this command:

smbpasswd -a thorax

It will prompt you for a password. Make it the same as user thorax's password on the Windows machine.

Make the share portion of your smb.conf look like this:

[Data]
path = /data
read only = Yes
browseable = Yes
write list = @mod

In that situation, anyone who has a BSD/Samba username and password on the machine would have read access to the share, those who are a member of mod would have read/write and everyone else would be denied access.

If you wanted to give group mod read/write access and everyone else read access to the share without creating additional user accounts, add the line guest ok = yes to the share definition.

It even got worse


Ok, I've issued the following commands to set the permissions as you told me:

sudo chown :mod /data
sudo chmod u+rwx /data
sudo chmod g+rwx /data
sudo chmod o+rx /data

then I changed my smb.conf

Now I get the message that I can't login from this computer with this user account. When trying this on a Windows 2000 machine, I even can't get into the workgroup, same error message.

YOU NEED TO CREATE SAMBA USER!!!

read the post by cowanrl
smbpasswd -a user_name

I've done this, I just didn't post it

I've managed to get read/write access for anyone by setting security=share and public=yes. That's at least a basis on that I can work out the rest