I have just completed my first file server (Samba 2.2.8 on FreeBSD) for a client (meaning it's gotta work). I'm feeling pretty darned good about that. Then, I get into the client's office to show them how to map to the shares and it won't authenticate against their NT PDC.

I can see the server. I can see the share. I can open the share up to the world (everyone in the office) and all works well. BUT they want to limit access to Staff only.

I have a 'staff' share defined, along with the directory in the right place. I can see it, it just won't let me in.

At this point, I believe my issue lies either with my "security =" or my "write list =" lines. They are as follows:

security = DOMAIN
and
write list = @DOM+"Grp Staff"

Are one of these wrong or is there something else I should be looking at? I need help -- FAST.

thank you.

well i have this samba how-to opened, and here is something i noticed which may help you

Using MS Windows NT as an Authentication Server
This method involves the additions of the following parameters in the smb.conf file:
encrypt passwords = Yes
security = server
password server = ”NetBIOS name of a DC”

There are two ways of identifying whether or not a username and password pair is valid.

One uses the reply information provided as part of the authentication messaging process,

the other uses just an error code.

The downside of this mode of configuration is the fact that for security reasons Samba will send the password server a bogus username and a bogus password and if the remote server fails to reject the username and password pair then an alternative mode of identification of validation is used. Where a site uses password lock out after a certain number of failed
authentication attempts this will result in user lockouts.
Use of this mode of authentication requires a standard UNIX account for the user. This account can be blocked to prevent logons by non-SMB/CIFS clients.


{ Since you wanted a fast reply, I am not reading anything...i'll take a closer look at your issue after I finish this reply...in case it dosent help, pls wait for someone experienced, who can solve ur query on the fly.. }

Regards,

amit

Ok...instead of pasting cut-outs of the tutorial, why dont u take a look at it urself and download it ?

http://us1.samba.org/samba/docs/man/...ollection.html

The above file in PDF format

http://us1.samba.org/samba/docs/Samb...Collection.pdf

Hope that helps

Regards,

amit

I just wanted to come back and say thanks for the help. I don't know if this will solve my challenges, but it is a start and something I haven't been able to find thus far.

Now, I'm off to look at the html pages and see if there's anything I did/didn't do wrong/right.

8)