Hi all,

I currently have 2 systems (Redhat Linux Enterprise AS4 and Fedora Core 5) both have Samba enabled. The big difference between these 2 system is that the Linux Samba is authenticated through ADS whereas the Fedora system is done through Share level security.

My issue right now is that we have a few Symbol MC50 scanners which runs Windows Mobile 2003 OS. And it cannot access the shares on Linux. It can only access the share on Fedora system.

Now the 2 Sambas can both be accessible from a windows machine. After a few searches on Google, my primary suspicion is that the Windows Mobile 2003 device cannot transmit secure login information hence the ADS security for the Linux system cannot authenticate and grant access. Whereas the Fedora system uses plain text security.

Is there a patch for the Windows Mobile system where this can be remedied? Or is there a more in depth configuration on the Linux to allow the mobile device to connect?

Thanks for reading.

Can you post both samba configs?

This first one is from Linux:

[global]
log file = /var/log/samba/%m.log
printer = w7p01
idmap gid = 15000-20000
preserve case = No
socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
default case = upper
wins server = 10.177.220.3
interfaces = 10.177.220.16/24
encrypt passwords = yes
realm = ALLSTATEFLORAL.COM
public = yes
template shell = /bin/bash
dns proxy = No
cups options = raw
writeable = yes
server string = Samba Server
idmap uid = 15000-20000
password server = 10.177.220.3
path = /usr/packer
template homedir = /u/idol
workgroup = AFACI
printcap name = /etc/printcap
security = ADS
short preserve case = No
winbind separator = +
max log size = 50
log level = 3

[public]
guest account = root
comment = Public Folder
create mode = 0777
path = /afaci/public
default case = upper
directory mode = 666



*******************************************************
This second one is from the Fedora:

[global]

workgroup = afaci
server string = Samba Server
netbios name = ALLTEST
hosts allow = 10.177.220.0/255.255.255.0 10.177.200.0/255.255.255.248 10.177.
221.0/255.255.255.0 10.177.222.0/255.255.255.0 10.177.119.0/255.255.255.252 10.1
77.223.0/255.255.255.0 10.177.224.0/255.255.255.0 10.177.225.0/255.255.255.0 10.
177.228.0/255.255.255.0
printcap name = /etc/printcap
load printers = yes
cups options = raw
log file = /var/log/samba/%m.log
max log size = 50
security = share
socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
interfaces = 10.177.220.9/255.255.255.0
local master = no
dns proxy = no

[public]
comment = Public Folder
path = /afaci/public
only guest = no
public = yes
writable = yes
printable = no
create mask = 0777

Please post the other conf and the /etc/krb5.conf as well as the /etc/ldap/slapd.conf

krb5.conf

[logging]
default = FILE:/var/log/krb5libs.log
kdc = FILE:/var/log/krb5kdc.log
admin_server = FILE:/var/log/kadmind.log

[libdefaults]
default_realm = ALLSTATEFLORAL.COM
dns_lookup_realm = false
dns_lookup_kdc = false

[realms]
ALLSTATEFLORAL.COM = {
kdc = alldc.allstatefloral.com
admin_server = alldc.allstatefloral.com
default_domain = allstatefloral.com
}

[domain_realm]
.allstatefloral.com = ALLSTATEFLORAL.COM
allstatefloral.com = ALLSTATEFLORAL.COM

[kdc]
profile = /var/kerberos/krb5kdc/kdc.conf

[appdefaults]
pam = {
debug = false
ticket_lifetime = 36000
renew_lifetime = 36000
forwardable = true
krb4_convert = false
}


And I don't have a directory /etc/ldap, and not sure where the slapd.conf is.

Since the setup is not working you should read this article because if you are missing that directory and file then you will not be able to authenticate.

http://www.linux-mag.com/id/4738