December 2000 - openSUSE Edu - openSUSE Mailing Lists

Re: [suse-linux-uk-schools] Re: SAMBA setup
by Bill Antonia 05 Dec '00

05 Dec '00

Your /etc/smb.conf file contains no information on what type of security is required. If the samba server is to authenticate it's own users in it's own domain, set security = user domain master = yes domain logons = yes encrypt passwords = no This allows Win 95 clients before second release and NT4 clients before service pack 4 to connect to the domain of your linux box. This is because by default, clear text passwords were sent over the network. Since then, Win95SE, Win98, NT service pack 4 onwards and Win2000 all use encrypted passwords by default. In which case you would have to set encrypt passwords = yes This also means you have to have a separate /etc/smbpasswd file to hold the encrypted passwords, whereas using encrypt passwords = no, the normal Linux passwords would be used. If however you wish to authenticate using an existing NT domain, set security = server # The following is just an example, #you put in your own IP address of your own domain server password server = 192.168.7.1 domain master = no encrypt passwords = yes In this case no /etc/smbpasswd file is required however the users of the NT domain still need to be created locally on the Linux box for it to work. As an added thing, I usually edit the /etc/shadow file and place a * where the encrypted password would be. This stops users telnetting to the Linux box. I am assuming you have put on a recent NT service pack 4 to 6a to your server so the need for encrypt passwords to be yes. Regards Bill >Which all brings me to the final problem...connecting to the LINUX box from a >remote station. (smbclient //localhost/test -U% works fine) > > >My test samba config file is: > >[global] >log level=1 >max log size = 1000 >socket options = TCP_NODELAY IPTOS_LOWDELAY >guest ok = no >workgroup=BHEADS (my NT Domain name so that it appears in the right browse list) >[homes] >browseable = no >map archive = yes >[printers] >path = /usr/tmp >guest ok = yes >printable = yes >min print space = 2000 >[test] >browseable = yes >read only = no >guest ok = yes >public = yes >path = /test > > >Entering the share from the brwose list on the NT server brings up a >logon/password box (which surprises me - as I thought guest logon was ok). > >Using a LINUX username and password The subsequent error message on the NT box reads >'The account is not authorised to login from this station' > >Is this a problem with encrypted passwords? I add the line 'encrypt passwords= yes' >to my smb/conf file (as per page 73, Reilly) and ....testparm doesn't like it. > >Later in Reilly it states 'encrypted passwords = yes' which it also doesn't like. > >What should it be? Perhaps I should ask NT to do password authenication.. > >The hosts.deny file only contains a http-rman: all line. > >-- >Alan Davies >Head of Computing >Birkenhead School > >

3 2

Re: [suse-linux-uk-schools] Re: SAMBA setup
by Azrael Angel Of Death 05 Dec '00

05 Dec '00

>From: "Alan Davies" <staff.asd(a)birkenhead.wirral.sch.uk> >To: suse-linux-uk-schools(a)suse.com >Subject: Re: [suse-linux-uk-schools] Re: SAMBA setup >Date: Tue, 5 Dec 2000 10:16:55 +0000 (GMT) > >On Mon 04 Dec, Gary Stainburn wrote: > > > > > > smbmount //server/share /mnt/mountpoint > > > > Sorry. I wrongly assumed that you'd used the normal unix 'mount' >command > > before and understood mountpoints. > >I would like to say - publically - that I am very greatful for the help >received. I realise that thinking down to my level requires considerable >effort! > > > In keeping with this idiom, everything starts from a root (/) partition. > > Other partitions are connected (mounted) at specific points on this root > > partition. The boot partition (/dev/hda5 on my system) is mounted on > > /boot, thus once mounted, you access that partition by 'cd'ing into > > /boot. > >Getting it to do this was my problem. > > > > > Mount -t smb and smbmount work similarly, but allow you to do the same > > with a remote Win9x share. It mounts the remote service as part of the > > local system's directory tree structure. For example, I have a >directory > > on my local system called /mnt/smb. If I mount a remote SMB service, I > > put it there so I always know what I've done with it (although running > > mount without arguments would tell me that anyway). > > > > Hope this makes things a little clearer for you. > >So - creating a 'mountpoint' is effiectively creating a link to an already >exisiting directory entry (it doesn't produce that direcotry entry for >you?) > >I had mistakenly assumed that smbd and nmbd were running be default - as >smbclient >worked fine. I know understand that smbclient works independently and in >the >opposite direction to those daemons. (I know know about the extra options >for >ps command...) > >So I now hvae swat running, smbd, nmbd running and my LINUX box appears in >the >browse list of by NT domain. smbmount now works and I can connect to my NT >share >and/or home directory on NT system. > >Which all brings me to the final problem...connecting to the LINUX box from >a >remote station. (smbclient //localhost/test -U% works fine) > > >My test samba config file is: > >[global] >log level=1 >max log size = 1000 >socket options = TCP_NODELAY IPTOS_LOWDELAY >guest ok = no >workgroup=BHEADS (my NT Domain name so that it appears in the right browse >list) >[homes] >browseable = no >map archive = yes >[printers] >path = /usr/tmp >guest ok = yes >printable = yes >min print space = 2000 >[test] >browseable = yes >read only = no >guest ok = yes >public = yes >path = /test > > >Entering the share from the brwose list on the NT server brings up a >logon/password box (which surprises me - as I thought guest logon was ok). > >Using a LINUX username and password The subsequent error message on the NT >box reads >'The account is not authorised to login from this station' > >Is this a problem with encrypted passwords? I add the line 'encrypt >passwords= yes' >to my smb/conf file (as per page 73, Reilly) and ....testparm doesn't like >it. > >Later in Reilly it states 'encrypted passwords = yes' which it also doesn't >like. > >What should it be? Perhaps I should ask NT to do password authenication.. > >The hosts.deny file only contains a http-rman: all line. > >-- >Alan Davies >Head of Computing >Birkenhead School > I might not be understanding your problem correctly, however problems I had with getting into a share samba was offering were solved by: At linux prompt adding a user with the same name as the user I was logged into windows as. # useradd <windows-user-name> Then in swat I would goto the 'passwords' section and put that username in, with password equal to my windows password and then 'add new user' and 'Enable User' the user. Then a 'reload' of the daemons.. however you do this.. even a physical machine restart *shudder* .. but then I can access the linux share via a windows machine. Hope this helps. --Azrael _____________________________________________________________________________________ Get more from the Web. FREE MSN Explorer download : http://explorer.msn.com

3 3

SAMBA setup
by Alan Davies 05 Dec '00

05 Dec '00

Trying to get LINUX to 'mount' a PC share. smbd appears to be running as I can use smbclient fine. Reilly book says smbmount is deprecated - and not supported so I try smbsh - which in SUSE6.4 does not appear to be recognised. Does that mean that smbwrappers is not part of the kernel. So I try typing smbmount - t smbfs //myserver/share (Reilly) and it quotes the smbmount syntax implying I got it wrong. What does a 'service' mean in this context? What should I use? - or perhaps smbfs is not part of kernel? Cant do it the other way either. Using simple smb.conf from Reilly and putting Linux host in host file in the PC, it (the PC) will still not connect to the share. Tried accessing swat - doesn't appear to the running. Tried to get it to run with swat 901/tcp & (as per Reilly) and it appears in ps list - but still can't connect. -- Alan Davies Head of Computing Birkenhead School

4 8

KDE2
by ptaylor 05 Dec '00

05 Dec '00

Hi All: I have installed all of the KDE2 files onto my server and it shows up in YAST in the types of window menu available and I set it as the default wm but when I log onto the machine there is no KDE2 available. Any suggestions? Paul

1 0

IRQ problem
by Dave York 04 Dec '00

04 Dec '00

Hi All I have an two 3 pieces of hardware trying to use the same IRQ according to the system manager in SuSE 7 KDE2. It does not give me the option to change the IRQ manually. How do I do it? Dowdales School, Cumbria

3 2

Re: [suse-linux-uk-schools] SAMBA setup
by Bill Antonia 04 Dec '00

04 Dec '00

Edit yout /etc/inetd.conf file. You will find the service swat commented out with a #. Delete the # and save the file back. Do a ps x|more to find the pid of inetd do kill <pid> -s HUP where <pid> is the value supplied by ps above. Connect through a browser using http://servername:901/ Regards Bill -----Original Message----- From: Alan Davies <staff.asd(a)birkenhead.wirral.sch.uk> To: suse-linux-uk-schools(a)suse.com <suse-linux-uk-schools(a)suse.com> Date: 04 December 2000 10:52 Subject: [suse-linux-uk-schools] SAMBA setup >Trying to get LINUX to 'mount' a PC share. > >smbd appears to be running as I can use smbclient fine. > >Reilly book says smbmount is deprecated - and not supported >so I try smbsh - which in SUSE6.4 does not appear to be recognised. > >Does that mean that smbwrappers is not part of the kernel. > >So I try typing smbmount - t smbfs //myserver/share (Reilly) and it >quotes the smbmount syntax implying I got it wrong. What does >a 'service' mean in this context? > >What should I use? - or perhaps smbfs is not part of kernel? > >Cant do it the other way either. Using simple smb.conf from Reilly >and putting Linux host in host file in the PC, it (the PC) will >still not connect to the share. > >Tried accessing swat - doesn't appear to the running. Tried to get it >to run with swat 901/tcp & (as per Reilly) and it appears in ps list - >but still can't connect. > > >-- >Alan Davies >Head of Computing >Birkenhead School > >

1 0

Re: [suse-linux-uk-schools] SAMBA setup
by Bill Antonia 04 Dec '00

04 Dec '00

>From SuSE 6.4 onwards use: smbmount //servername/sharename /mountpoint -o username=user or smbmount //servername/sharename /mountpoint -o username=user%password Regards Bill -----Original Message----- From: Alan Davies <staff.asd(a)birkenhead.wirral.sch.uk> To: suse-linux-uk-schools(a)suse.com <suse-linux-uk-schools(a)suse.com> Date: 04 December 2000 10:52 Subject: [suse-linux-uk-schools] SAMBA setup >Trying to get LINUX to 'mount' a PC share. > >smbd appears to be running as I can use smbclient fine. > >Reilly book says smbmount is deprecated - and not supported >so I try smbsh - which in SUSE6.4 does not appear to be recognised. > >Does that mean that smbwrappers is not part of the kernel. > >So I try typing smbmount - t smbfs //myserver/share (Reilly) and it >quotes the smbmount syntax implying I got it wrong. What does >a 'service' mean in this context? > >What should I use? - or perhaps smbfs is not part of kernel? > >Cant do it the other way either. Using simple smb.conf from Reilly >and putting Linux host in host file in the PC, it (the PC) will >still not connect to the share. > >Tried accessing swat - doesn't appear to the running. Tried to get it >to run with swat 901/tcp & (as per Reilly) and it appears in ps list - >but still can't connect. > > >-- >Alan Davies >Head of Computing >Birkenhead School > >

1 0

update
by Alan Davies 02 Dec '00

02 Dec '00

just incase anyone is keeping track... I have now got wine to work. I was being misled by stat errors on not finding floppy drives...In fact I had no entries in /mnt at all (is this expected?) - although icons and paths seem to work OK using kde. I created a directory /mnt/fd0 and put a kdelink in there to /dev/fd0 - is this right? In any case the error went away - and I then was able to fix the other path errors - by creating c/windows/system32 - and missing msvcrt.dll (I thought wine was supposed to do away with the need to dlls...) I was a) surprised to find that many things worked....including the clipboard between PC apps. b) then surprised that 'saving' from notepad and wordpad did not work - Do they need further dlls ? Downloaded Netscape 6 - worked and installed flash as well. I must be getting good at all this tar stuff. (Couldn't get kpackage or karchiver to do anything useful!) Sadly netscape6 did not work to PC clients running MIX X server - although netscape 4.72 was fine. star office 5.2 now working in english - but I think I've installed it as a single user rather than for global use. The readme file said something about network install but the files it referred to didn't seem to be there! Still can't get SAMBA to work within windows to produce 'mounts' but the daemons are fine - and I can use smbclient and smb commands to access our PCs. One of my (more expert) pupils had kde working fine to MIX Xserver. Said he did nothing different than I said I had tried. It still won't work for me - usually producing the correct screen - but clicking on applications in the menus does nothing and then screen redraw stops working correctly. I assume his .xsession or .xDefaults file have something different in them. Are there any other configuation files I should look at which are user specific for X/kde With a 'thin client' X solution can you: a) get local sound? b) get access to local floppies/hard drives -- Alan Davies Head of Computing Birkenhead School

3 2

RE: [suse-linux-uk-schools] Restricting access to Internet sites
by Simon Wood 01 Dec '00

01 Dec '00

I use Junkbuster at home and at work to block access to adverts and the like. You have the ability to control the access files so they could be tailored to your needs and best of all it's GPL'ed http://www.junkbuster.com/ijb.html It doesn't come with a block file, but I'm sure that schools or the LEA could work together to produce one (and publish it for others to view/use). The main problem with (most of the) commercial versions is that they have secrete lists, which may other motives such as blocking sites of freedom of speech. You should have good reason to block a site (i.e. against access policies) and therefore you will have nothing to hide. Hope this helps, Simon Wood

1 0

Restricting access to Internet sites
by n.elliott 01 Dec '00

01 Dec '00

Has anyone any information on restricting access to undesirable Internet sites when running Linux? I know various programs are available for use with Microsoft OS's but that defeats to object of running Linux somewhat. tia Norman

3 2