LinuxQuestions.org
Did you know LQ has a Linux Hardware Compatibility List?
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Software
User Name
Password
Linux - Software This forum is for Software issues.
Having a problem installing a new program? Want to know which application is best for the job? Post your question in this forum.

Notices



Reply
 
Search this Thread
Old 03-03-2005, 08:29 AM   #1
Goma_2
LQ Newbie
 
Registered: Sep 2003
Posts: 24

Rep: Reputation: 15
samba network share access


When a windows user clicks on a samba network share in windows explorer he will be prompted to type in alternate user and password credentials if his current user doesnt have access right for that share. How can i avoid this?

I dont a user to be able to log onto a samba share with any credentials different from the ones he used to start his windows session. Ive looked for parameters in smb.conf but there doesnt seem to be any.

In some cases, this can be a security risk.

Can anyone help, please?
 
Old 03-03-2005, 09:38 AM   #2
Matir
Moderator
 
Registered: Nov 2004
Location: San Jose, CA
Distribution: Ubuntu
Posts: 8,507

Rep: Reputation: 118Reputation: 118
There is no way (that I am aware of) to block this from the samba side. Perhaps, though I'm not sure, under windows there is a policy that can be set to only try the logged in info.
 
Old 03-03-2005, 09:42 AM   #3
houdelou
Member
 
Registered: Nov 2004
Location: Canada
Distribution: Ubuntu
Posts: 44

Rep: Reputation: 15
-Create a linux account wich has the same name as the windows account. The account should have a blank password and you should put /dev/null as shell for the account.

-After, create a samba account with pdbedit wich also have a blank password.

-Create the network drive map on your windows machine.

Thats'it you should be able to log in with your windows account without supplying any password.
 
Old 03-03-2005, 10:26 AM   #4
Goma_2
LQ Newbie
 
Registered: Sep 2003
Posts: 24

Original Poster
Rep: Reputation: 15
Matir.
I've searched for group policies in windows but all i find for "windows explorer" as far as alternate credentials are concerned, has to do with not asking for credentials when installing new software locally or over a network share. There is nothing about validating a user logging onto a share.

Actually, i don't think windows xp in a domain asks for alternate credentials when a user clicks on a windows share, it only does so if its a samba share. Thats why i think it has to do with samba and thats why there are no windows group policies for this matter. Does it make sense?

Do u know of any specialized samba forums apart from the insufferable samba mailing lists where i can ask about this matter?

thanks!
 
Old 03-03-2005, 10:54 AM   #5
Darin
Senior Member
 
Registered: Jan 2003
Location: Portland, OR USA
Distribution: Slackware, SLAX, Gentoo, RH/Fedora
Posts: 1,024

Rep: Reputation: 45
to get technical, when you double click a computer in network neighborhood, Windows makes a connection to the IPC$ share with no username to get the list of shares. This is a weird implimentation, and works in windows because unauthenticated users get treated differently under Linux.

I couldn't find a single good document on the web for how to get this working, but it is possible in Samba. Try man smb.conf or man smbclient and look for guest account information, as you will have to enable the guest account in samba and map it to a Linux user account, I use the ftp account.
 
Old 03-04-2005, 07:07 AM   #6
Goma_2
LQ Newbie
 
Registered: Sep 2003
Posts: 24

Original Poster
Rep: Reputation: 15
darin.

thanks for your post, however, i fail to see what the guest account has to do with all this. For all my samba shares, the option "guest ok" is set to "NO".
Its not that i want users to access my shares without the need of a password. its that I dont want them to access a share if their windows user and passwd are rejected by the share/samba. furthermore, if this is the case, i dont want the popup window allowing for alternative credentials to appear.

imagine you, as windows user "darin" click on a samba share to which u have no access rights. a popup window allowing to to enter an alternate user and password appears. here u type Goma_2 and my passwd, click enter and u access the share.
what i want is to keep this window from appearing. no alternate credentials. if "darin" doesnt have access to a share thats the end of it.

any ideas?
 
Old 03-06-2005, 01:10 PM   #7
Darin
Senior Member
 
Registered: Jan 2003
Location: Portland, OR USA
Distribution: Slackware, SLAX, Gentoo, RH/Fedora
Posts: 1,024

Rep: Reputation: 45
Sorry, I misread your original question. Unfortunatly, I belive the prompt for a new user/pass is an implimentation of Windows, it's done by the client computer, not the [samba] server. It may be possible to work around this with settings in Samba though, I'm just not aware of how.

As a source of information, I find all the online guides on the Samba homepage to be the most useful. These would be everything in the "learn samba" section of links, although you may have to wade through a lot of other information to find anything of relevance.
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
Samba Share access Spadge67 Fedora 3 11-19-2005 07:57 PM
Samba: can't access share thorax Linux - Software 4 02-13-2005 01:39 PM
samba user and share access? Moebius Linux - Software 3 08-30-2004 03:09 PM
Samba share - network name no longer available when browsing samba from win2k dorango Linux - Software 0 03-02-2004 02:02 PM
winxp can't access my samba share?? andrewlkho Linux - Software 2 08-29-2003 06:00 PM


All times are GMT -5. The time now is 12:22 AM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
identi.ca: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration