Forum Home
Press F1
 
Thread ID: 66468 2006-02-24 03:08:00 smb.conf file anyone? hamstar (4) Press F1
Post ID Timestamp Content User
433644 2006-02-24 03:08:00 Hey guys,

Trying to get windows -> linux sharing going on but having real trouble wrestling with the smb.conf file and don't really have time to test, change, test, change etc etc.

Anyone got one that works fine towards nt OSs? Like encrypted passwords on and stuff?

Cheers,
hamstar 		hamstar (4)
433645 2006-02-24 08:05:00 Hamstar
About a week ago I posted a link to a sample smb.conf file for debain
try doing a forum search (advanced) 		beama (111)
433646 2006-02-25 08:29:00 Hey guys,

Trying to get windows -> linux sharing going on but having real trouble wrestling with the smb.conf file and don't really have time to test, change, test, change etc etc.

Anyone got one that works fine towards nt OSs? Like encrypted passwords on and stuff?

Cheers,
hamstar

Here is one I use with some extra instructions at the end:
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
# The domain you want to be a PDC for
workgroup = PutYourGroupHere

# Tell Samba to use domain logons
domain logons = yes

#Section added by JSD on 5 May 2005 to solve admin rights over domain users
#Have created a group called sysadmin and added administrator to it.
domain admin group = @sysadmin
admin users = @sysadmin

# User-level security. Users must
# authenticate themselves with
# valid username and password
security = user

# Set to yes so that nmbd participates
# in local master browser
# elections
local master = yes

# Set Os level value to make sure nmbd
# wins local browse master
# elections. 65 should beat everyone
# according to the man page
os level = 65

# Give nmbd an advantage in local
# master browser elections
preferred master = yes

# Set so that nmbd claims a unique
# NetBIOS name identifying it as
# a domain master
domain master = yes

# The following share is required to support
# domain logons. The directory may be
# created anywhere on your system. Make
# sure the share is non-writeable and also
# not a public share.
[netlogon]
comment = The domain logon service
path = /usr/local/samba/netlogon
public = no
writeable = no
# Path to Samba password file
# Make sure only root has read/write access
smb passwd file = /usr/local/samba/smbpasswd
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~


That will be enough for Samba to start authenticating Windows 9X clients. For NT workstations, some more work is to be done. You have to create a machine account for each NT client that will logon. A machine account is simply a regular /etc/passwd entry, with a $ appended to the name of the NT machine.

useradd -g smbuser -d /dev/null -s /dev/null netbiosname$

[replace with your PC's netbiosname]

Now add it to the password database

smbpasswd -a -m netbiosname (the $ at the end is not required)

XP seems to require a registry entry to login to the domain. Use regedt32 to change the following:

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Servic es\netlogon\parameters"RequireSignOrSeal"=dword:0

Then make sure that there is a SAMBA entry for root, login as Adminstrator to XP and join the domain for the first time (only) as root.

You may of couse need to add some shares, etc. 		johnd (85)
1