[11.1] Samba sharing

English Network/Internet
1

I used same samba config on 11.0 and it worked, however now it doesn’t.

[global]
printcap name = cups
cups options = raw
map to guest = Bad User
logon path = \\%L\profiles\.msprofile
logon home = \\%L\%U\.9xprofile
logon drive = P:
netbios name = openSuSE_kriko
usershare max shares = 100
restrict anonymous = no
domain master = yes
os level = 32
max protocol = NT
acl compatibility = winnt
ldap ssl = No
server signing = Auto
log level = 2
vfs objects = full_audit
log file = /var/log/samba/samba.log.%m
include = /etc/samba/dhcp.conf

[jani]
path = /multiMedia/Jani/
guest ok = yes
read only = no
follow symlinks = no
wide links = no
valid users = jani
inherit acls = yes

Problem is next:

[2008/12/08 00:17:49,  2] auth/auth.c:check_ntlm_password(318)
  check_ntlm_password:  Authentication for user [jani] -> [jani] FAILED with error NT_STATUS_NO_SUCH_USER
[2008/12/08 00:17:49,  2] lib/module.c:do_smb_load_module(64)
  Module '/usr/lib/samba/vfs/full_audit.so' loaded
[2008/12/08 00:17:49,  0] modules/vfs_full_audit.c:log_success(725)
  log_success() failed to get vfs_handle->data!
[2008/12/08 00:17:49,  2] smbd/uid.c:change_to_user(192)
  change_to_user: SMB user jani (unix user nobody, vuid 100) not permitted access to share jani.
[2008/12/08 00:17:49,  0] smbd/service.c:make_connection_snum(1078)
  Can't become connected user!

Seems like samba tries to map a user to local account, but fails.
I’m not sure if config changed in any way, but it is possible to authenticate with local unix accounts?
So, without registering users again with smbpasswd.

2

Did you add jani to the samba server using smbpasswd, smbpasswd -a jani? What does your smbusers file look like?

3

Yeah, I’m pretty sure that if you use the “valid users” option, it has to be with a valid samba account, so if you haven’t added jani as a samba user, just do what clayb226 said

smbpasswd -a jani
. Another way is using pdbedit.

4

Also, you might like to enter a definition in [global] like this:

workgroup = something_consistent

Because the default name for a domain or workgroup if you don’t specify one is the old favourite of microsoft (i.e. “WORKGROUP”), and that might not be what you want.

However as the others said, the main problem probably is smbpasswd.

5

I forgot to add user via smbpasswd, is it possible to use local unix accounts for authentication instead?

6

On Mon December 8 2008 01:46 am, atomixkriko wrote:

>
> I forgot to add user via smbpasswd, is it possible to use local unix
> accounts for authentication instead?
>
>
atomixkriko;

Unless you setup all authentication on LDAP the short answer is no. However,
Samba authentication is actually a combination of the users in the smbpasswd
(or tdb)and local nix users You can only give Samba permissions to users
with a valid nix account.

P. V.
Is this on the test?