Re: [Samba] auth problem

--===============0619499837==
Content-Type: multipart/signed; micalg=pgp-sha1;
protocol="application/pgp-signature";
boundary="=-ZIW5UCK6Om1lYsOxGPpy"


--=-ZIW5UCK6Om1lYsOxGPpy
Content-Type: text/plain
Content-Transfer-Encoding: quoted-printable

On Thu, 2005-09-22 at 09:43 -0600, Ric Tibbetts wrote:
> Okay, I'll keep asking questions, until I word one in a way that=20
> someone will answer. :)
>=20
> i'm trying to get Samba setup. I've done this before, and it has=20
> never given me this much trouble.
> In short, it seems to be insisting that the user be in smbpasswd=20
> (I've not experienced this before).
>=20
> If the user is in smbpasswd, all seems well. If not, even though they=20
> exist on the server (via ldap + kerberos), I get a user not found error.
> On the last set of servers I did this on, even ones who authenticate=20
> via ldap, I never did anything special to samba to get it to work.=20
> But I've not been so lucky this time.
>=20
> The setup:
>=20
> Server: IBM AIX 5.2
> Samba 3.0.14a
>=20
> Authentication: LDAP
> Security: Kerberos
>=20
> The user entry in /etc/security/user:
> <user name>
> SYSTEM =3D "KRB5files"
>=20
> smb.conf (in a simple form)
>=20
> [global]
> workgroup =3D WIN
> log level =3D 5 auth
> log file =3D /var/log/samba/%m.log
> username map =3D /usr/local/samba/lib/smbusers
>=20
> [Homes]
> comment =3D User home directories
> guest ok =3D no
> read only =3D No
>=20
> I need the username map because the user names do not match between=20
> the windows clients & the samba server. So I need to map the translation.
>=20
>=20
> When I try to access the system, I get an unknown user error.
>=20
> The ONLY thing I need samba to do is provide shares (not shown above)=20
> to windows users. Nothing else.
> If, I add a user to samba with smbpasswd ..... then the users can=20
> access the shares. If not, they can't.
> I also, in the past have not had a server prompt me for passwords to=20
> access shares.
> I'm missing something really obvious.
> I'd really appreciate some assistance on this one.

There is a terribly good howto:

http://www.idealx.org/prj/samba/smbldap-howto.en.html

--=20
greg, greg@gregfolkert.net

The technology that is=20
Stronger, Better, Faster: Linux

Use Debian GNU/Linux, its a bazaar thing.


--=-ZIW5UCK6Om1lYsOxGPpy
Content-Type: application/pgp-signature; name=signature.asc
Content-Description: This is a digitally signed message part

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.1 (GNU/Linux)

iD8DBQBDMv+i7WZpcbUkaHwRAnt4AKCjWArO5Dl0M3rIBVZ7Eo jGWDgIiwCfQHxh
zPFpa4qSB5O4CzYNs6L8MFQ=
=uPEG
-----END PGP SIGNATURE-----

--=-ZIW5UCK6Om1lYsOxGPpy--


--===============0619499837==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/listinfo/samba
--===============0619499837==--