Mailing Lists: Apple Mailing Lists

Image of Mac OS face in stamp
 
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: Problems w/ SMB authentication



I gave up and went and spoke w/ one of our sun admins here at work regarding this problem and he took a look at the smb.conf file and found that under the share in question the "allow guest" was set to 0 (zero) - we changed it to yes and I'm able to access that share without any further problems.

So I just wanted to follow this up to let anyone else who might run into this where the problem ultimately was at. I'm off to go look for a good smb book. :)

Thanks for reading!  :D

Brian

On Jan 28, 2005, at 1:16 PM, Brian Garrett wrote:

O.k. - here's the setup (a second time - my subject header was lame last time and probably got overlooked).

I've got a 10.3.5 xserve with the Windows services turned on and authenticated into our domain. It's also registered with WINS and I can "Search for Computers" and find the system (px4) and double-click on it, or use the start-run \\px4\volume to get to the volume folder - however I am prompted for the user name and password with each different method of getting to px4. Now our Windows domain system is still the old NT architecture - not AD. So does this impact the ability to allow people to sign into px4 using the NT logins even if the guest access is turned on for the specific directories on px4?

What I don't want to do is setup a general account for everyone to use - I'd rather they use their NT login or guest login as I've got the guest access turned on for that share on SMB.

If I use a login on the OD system to authenticate into px4 I get in every time (probably because I'm using the OD system to authenticate) - so that's why I'm suspect of the NT domain system giving me problems w/ the guest access into px4. I've also included the smb settings as I have them configured right now.

What am I missing? I've read the CLI section on the SMB, but apparently I'm still missing something.

Thanks in advance for the assistance.  :)

Brian

px4:~ root# serveradmin set smb
smb:workgroup = "drdm01"
smb:display charset = "UTF-8-MAC"
smb:print command = "/usr/sbin/PrintServiceAccess printps %p %s"
smb:lprm command = "/usr/sbin/PrintServiceAccess remove %p %j"
smb:security = "domain"
smb:guest account = "unknown"
smb:encrypt passwords = yes
smb:printing = "BSD"
smb:allow trusted domains = yes
smb:preferred master = no
smb:adminCommands:homes = no
smb:adminCommands:ldapRole = "4 - advanced\n"
smb:adminCommands:serverRole = "domainmember"
smb:lppause command = "/usr/sbin/PrintServiceAccess hold %p %j"
smb:netbios name = "px4"
smb:max smbd processes = 0
smb:wins support = no
smb:state = "start"
smb:printcap = " "
smb:server string = "px4"
smb:lpresume command = "/usr/sbin/PrintServiceAccess release %p %j"
smb:client ntlmv2 auth = "no"
smb:domain logons = no
smb:lpq command = "/usr/sbin/PrintServiceAccess jobs %p"
smb:passdb backend = "opendirectorysam guest"
smb:dos charset = "CP437"
smb:unix charset = "UTF-8-MAC"
smb:auth methods = "guest ntdomain opendirectory"
smb:local master = no
smb:domain master = no
smb:map to guest = "Bad User"
smb:use spnego = no
smb:printer admin = "@admin, @staff"
smb:log level = 2
	

_______________________________________________
Do not post admin requests to the list. They will be ignored.
Macos-x-server mailing list (email@hidden)
Help/Unsubscribe/Update your Subscription:
http://lists.apple.com/mailman/options/macos-x-server/ email@hidden


This email sent to email@hidden


_______________________________________________ Do not post admin requests to the list. They will be ignored. Macos-x-server mailing list (email@hidden) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/macos-x-server/email@hidden

This email sent to email@hidden
References: 
 >Problems w/ SMB authentication (From: Brian Garrett <email@hidden>)



Visit the Apple Store online or at retail locations.
1-800-MY-APPLE

Contact Apple | Terms of Use | Privacy Policy

Copyright © 2007 Apple Inc. All rights reserved.