Re: [SLE] SMB passwd sync

28 Jan 2001

      Here is the extensive fix. Samba server had to be set up as PDC.

[global]
        workgroup = SHADOWWARRIOR
        server string = Samba %v on %L
        domain logons = yes

        wins support = yes
        name resolve order = wins lmhosts hosts bcast

        security = user

        os level = 34
        local master = yes
        preferred master = yes
        domain master = yes
        socket options = TCP_NODELAY

        time server = yes
        logon script = %U.bat

        keep alive = 30
        guest account = nobody
        kernel oplocks = false

        log file = /var/log/samba-log.%m
        lock directory = /var/lock/samba
        hosts allow = 192.168.1.
        interfaces = 192.168.1.1/255.255.255.0
        load printers = yes

        encrypt passwords = yes
        smb passwd file = /etc/smbpasswd
        unix password sync = True
        passwd program = /usr/bin/passwd %u
        passwd chat = *new*password* %n\n *new*password* %n\n *changed*
        passwd chat debug = True
        update encrypted = yes

        browseable = no
        config file = /etc/smb.conf.%U

[netlogon]
        comment = The domain logon service
        path = /etc/samba/logon
        public = no
        writeable = no
        browseable = no

[network-drive]
        path = /winmount
        comment = Network Drive
        create mode = 644
        writeable = yes
        guest ok = yes

[testsite]
        comment = Testsite For Website
        writeable = yes
        valid users = @webartist
        path = /usr/local/httpd/htdocs/testsite
        create mode = 0664
        directory mode = 0775

[homes]
        browseable = no
        map archive = yes
        veto files = /.*/
        writeable = yes

[printers]
        path = /var/spool/samba
        print ok = yes
        printing = lprng
        printable = yes
        printcap name = /etc/printcap
        guest ok = yes
        public = yes

[smurf]
        path = /var/spool/samba
        print ok = yes
        printing = lprng
        printable = yes
        guest ok = yes
        public = yes
        print command =      /usr/bin/lpr  -P%p -r %s
        lpq command   =      /usr/bin/lpq  -P%p
        lprm command  =      /usr/bin/lprm -P%p %j
        lppause command =    /usr/sbin/lpc hold %p %j
        lpresume command =   /usr/sbin/lpc release %p %j
        queuepause command = /usr/sbin/lpc  -P%p stop
        queueresume command = /usr/sbin/lpc -P%p start

Script file for normal user /etc/samba/logon/<user>.bat:

#  Reset the current time to that shown by the server.
#  We must have the "time server = yes" option in the
#  smb.conf for this to work.

echo Setting Current Time...
net time \\mail /set /yes

#  Here we map network drives to shares on the Samba
#  server
echo Mapping Network Drives to Samba Server Mail...
net use h: \\mail\homes
net use i: \\mail\network-drive
net use j: \\mail\testsite

script file must have DOS carriage returns!!!

mk
...
From: "Purple Shirt" <purpleshirt@hotmail.com>
To: suse-linux-e@suse.com
Subject: [SLE] SMB passwd sync
Date: Tue, 23 Jan 2001 15:28:12
I got a machine meant to have no remote login for root. It still accept 
root
login over ssh though.
Got a SMB problem the samba list couldn't help me solve. Everything works
except smbpasswd change and passwd sync with Linux. I log in as normal user
and I go to "Change Windows Password" It changes it.
It though does not change the /etc/smbpasswd and also doesn't sync the
/etc/passwd. There is no lines in the logs that the user ever requested
action to change passwd's on the server.
I tried the following two passwd chat configurations. (Nobody us a
NOPASSWORD guest.)
;smb.conf
[global]
       workgroup = SHADOWWARRIOR
       guest account = nobody
       keep alive = 30
       os level = 2
       kernel oplocks = false
       security = user
       encrypt passwords = yes
       smb passwd file = /etc/smbpasswd
       log file = /var/log/samba-log.%m
       lock directory = /var/lock/samba
       hosts allow = 192.168.1.
       interfaces = 192.168.1.1/255.255.255.0
       load printers = yes
       unix password sync = yes
       passwd program = /usr/bin/passwd %u
; chat for smb running not as root
       ;passwd chat = *old*password* %o\n *new*password* %n\n \
       ;       *new*password* %n\n *changed*
; chat for running smb as root
       passwd chat = *ew\spassword* %n\n *enter* %n\n *assword\schanged*
; usermap file - empty right now
       username map = /etc/smb.usermap
browseable = no
; if there is a conf file for the user who is connecting, then
; load it...
config file = /etc/smb.conf.%U
[network-drive]
       path = /winmount
       comment = Network Drive
       create mode = 644
       writeable = yes
       guest ok = yes
[testsite]
       comment = Testsite For Website
       writeable = yes
       valid users = @webartist
       path = /usr/local/httpd/htdocs/testsite
       create mode = 0664
       directory mode = 0775
[homes]
       browseable = no
       map archive = yes
       veto files = /.*/
       writeable = yes
[printers]
       path = /var/spool/samba
       print ok = yes
       printing = lprng
       printable = yes
       printcap name = /etc/printcap
       guest ok = yes
       public = yes
[smurf]
       path = /var/spool/samba
       print ok = yes
       printing = lprng
       printable = yes
       guest ok = yes
       public = yes
       print command =      /usr/bin/lpr  -P%p -r %s
       lpq command   =      /usr/bin/lpq  -P%p
       lprm command  =      /usr/bin/lprm -P%p %j
       lppause command =    /usr/sbin/lpc hold %p %j
       lpresume command =   /usr/sbin/lpc release %p %j
       queuepause command = /usr/sbin/lpc  -P%p stop
       queueresume command = /usr/sbin/lpc -P%p start
;smb.conf.nobody
[global]
       workgroup = SHADOWWARRIOR
       guest account = nobody
       keep alive = 30
       os level = 2
       kernel oplocks = false
       security = user
       encrypt passwords = yes
       smb passwd file = /etc/smbpasswd
       log file = /var/log/samba-log.%m
       lock directory = /var/lock/samba
       hosts allow = 192.168.1.
       interfaces = 192.168.1.1/255.255.255.0
       load printers = yes
       ;unix password sync = yes
       passwd program = /usr/bin/passwd %u
; chat for smb running not as root
       ;passwd chat = *old*password* %o\n *new*password* %n\n \
       ;       *new*password* %n\n *changed*
; chat for running smb as root
       passwd chat = *ew\spassword* %n\n *enter* %n\n *assword\schanged*
; usermap file - empty right now
       username map = /etc/smb.usermap
browseable = no
; if there is a conf file for the user who is connecting, then
; load it...
;config file = /etc/smb.conf.%U
[network-drive]
       path = /winmount
       comment = Network Drive
       create mode = 644
       writeable = yes
       guest ok = yes
[testsite]
       comment = Testsite For Website
       writeable = yes
       valid users = @webartist
       path = /usr/local/httpd/htdocs/testsite
       create mode = 0664
       directory mode = 0775
[homes]
       browseable = no
       map archive = yes
       veto files = /.*/
       writeable = yes
[printers]
       path = /var/spool/samba
       print ok = yes
       printing = lprng
       printable = yes
       printcap name = /etc/printcap
       guest ok = yes
       public = yes
[smurf]
       path = /var/spool/samba
       print ok = yes
       printing = lprng
       printable = yes
       guest ok = yes
       public = yes
       print command =      /usr/bin/lpr  -P%p -r %s
       lpq command   =      /usr/bin/lpq  -P%p
       lprm command  =      /usr/bin/lprm -P%p %j
       lppause command =    /usr/sbin/lpc hold %p %j
       lpresume command =   /usr/sbin/lpc release %p %j
       queuepause command = /usr/sbin/lpc  -P%p stop
       queueresume command = /usr/sbin/lpc -P%p start
Help appreciated,
mk
_________________________________________________________________
Get your FREE download of MSN Explorer at http://explorer.msn.com
--
To unsubscribe send e-mail to suse-linux-e-unsubscribe@suse.com
For additional commands send e-mail to suse-linux-e-help@suse.com
Also check the FAQ at http://www.suse.com/support/faq
_________________________________________________________________
Get your FREE download of MSN Explorer at http://explorer.msn.com

Purple Shirt

tags

participants (1)