Click to See Complete Forum and Search --> : Connecting to Samba share from Windows2000 domain


dgaither
04-10-2003, 07:58 PM
I have been struggling for several days to give access to users in a Windows2000 domain to files on a new Linux server. I tried using the sample smb.conf file that came with the distribution (Debian 3.0), I tried an example of a "bare bones" smb.conf from an article on the linuxhelpnetwork, and I'm currently using one based on a sample from the book Running Linux. My current smb.conf looks like this:
[global]
workgroup = AUTOCHLOR (this matches the Win2000 domain)
server string = LinuxBlue
security = USER (have also tried with SHARE)
encrypt passwords = Yes (have also tried with No)
smb passwd file = /etc/samba/smbpasswd
name resolve order = hostbcast
local master = NO
lock dir = /tmp/samba
guest account = /guest
[homes]
comment = Home Directory
browseable = yes
read only = no
create mode = 0750
[share]
comment = /share
browseable = yes
read only = no
create mode = 0750
directory = /share
I can see LinuxBlue from any of the Windows desktops or servers in the domain, but when I try to connect to it, I get prompted for a password (no userid) for the resource \\LinuxBlue\IPC$. No password that has been defined on the linux server works (including the root password). I even tried creating user ids on the Linux server that were identical with the Windows userids, with identical passwords.
What is the IPC$ resource?
Do I have to configure something to give access to it to the windows users?
If I can't pass a userid in the connection dialog, what userid does Samba use to look up a password?
Do I have to use encrypted passwords with Windows2000 or is there a way to configure it to use plain text passwords?
There is a good article on this website explaining how to make Windows clients work with a Linux server, but its first suggestion is to turn off the Log on to an NT domain option on the client. Since I'm trying to integrate this server with my Win2000 domain, that didn't do me much good.
Any suggestions about what to try next would be greatly appreciated.

bgunn
04-14-2003, 01:49 AM
Have you added usernames and passwords to SAMBA? You can do this using SWAT. For a good article on SAmba check out 'Dancing the Samba' on devshed.com.

Ben

gping
04-14-2003, 03:32 AM
I always setup this easy way:

cat smb.conf
workgroup = Your_Domain
server string = Test Samba Server
wins server = Your_Wins_server (for example, my small business win2k sv -domain controller)
encrypt passwords = yes
security = server
password server = sbserver (my small buz win2k sv - domain controller)

[root]
comment = Root
path = /
writeable = yes

Then everybody has their access to their own home dirs. suppose you have useradd all users in your linux, and you don't have to setup any passwd. because smb verify the psw with win2k.

dgaither
04-17-2003, 01:57 PM
Thanks for the suggestions, I tried them both and learned some more in the process, but neither fixed my problem. I finally got it to work by changing 3 things.
I had to set the NETBIOS name to the same as the server name in smb.conf.
I had to manually add a computer record to the Active Directory on Windows2000 for the Linux server.
I had to issue the command smbpasswd -j {Domain Name} -r {domain controller name}
This had the same effect as "joining" the domain from a Windows server.
I'm now relying completely on the Windows authentication. I do still have to add a user to Linux for each W2000 user who wants to access its shares, but the Linux password is ignored.