Samba Shares Authentication
Hi Guys, I have a small linux/windows network running very well.i have samba running on openSuSE 11.1 in one machine and Windows XP computers can access the non protected samba shares/sections.I have one problem that I am struggling with.I have read some howto's, and searched lists, but can not find an easy solution for this.I would like to implement [homes] or [usershares] for user directories and file storage: When accessing the /users or /homes directory, users would be prompted for a username and password. The user would not need to be login to the Windows OS. That is, I just want a prompt for both username and password when the share is accessed. This should work from Windows XP.How can i implement this? Aliata David Thanks guys!
Hi, On Mon, Oct 5, 2009 at 12:33 PM, david aliata <aliatadavid@gmail.com> wrote:
I have a small linux/windows network running very well.
Good! so we don't need exotic things like ldap for user storage.. local
users :)
solution for this.I would like to implement [homes] or [usershares] for user directories and file storage:from Windows XP.How can i implement this?
The drill usually goes like this - Create a user account for each user (useradd -m user1 ) - Set a strong passwd (pwgen) if they shouldn't ssh set their shell to '/bin/false' (user passwd to adjust the password and edit /etc/passwd to set the shell. Alt, you can give an argument to useradd to set the shell ... man is your friend) - Add the user to samba store and key in the passwd the user should key in from windows world (smbpasswd -a user1 ) - Set the shares by reviewing /etc/samba/smb.conf (it's dead simple) - Restart samba - try ( net use or \\server\share to connect to your share) - if fail :Check logs :verify you don't have a restrictive MAC setup ...selinux/apparmor :Increase verbosity in the samba configuration and follow your logs
Hello David, You also have to confirm directory settings and permissions for your shares this is mostly with the the *security* option. Cheers Themburu On Mon, Oct 5, 2009 at 5:34 PM, Lmwangi <lmwangi@gmail.com> wrote:
Hi,
On Mon, Oct 5, 2009 at 12:33 PM, david aliata <aliatadavid@gmail.com>wrote:
I have a small linux/windows network running very well.
Good! so we don't need exotic things like ldap for user storage.. local
users :)
solution for this.I would like to implement [homes] or [usershares] for user directories and file storage:from Windows XP.How can i implement this?
The drill usually goes like this - Create a user account for each user (useradd -m user1 ) - Set a strong passwd (pwgen) if they shouldn't ssh set their shell to '/bin/false' (user passwd to adjust the password and edit /etc/passwd to set the shell. Alt, you can give an argument to useradd to set the shell ... man is your friend) - Add the user to samba store and key in the passwd the user should key in from windows world (smbpasswd -a user1 ) - Set the shares by reviewing /etc/samba/smb.conf (it's dead simple) - Restart samba - try ( net use or \\server\share to connect to your share) - if fail :Check logs :verify you don't have a restrictive MAC setup ...selinux/apparmor :Increase verbosity in the samba configuration and follow your logs
_______________________________________________ Skunkworks mailing list Skunkworks@lists.my.co.ke http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks Other services @ http://my.co.ke Other lists ------------- Announce: http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks-announce Science: http://lists.my.co.ke/cgi-bin/mailman/listinfo/science kazi: http://lists.my.co.ke/cgi-bin/mailman/admin/kazi/general
-- Conservatism is the adherence to the old tried against the new untried.
try editing the samba config file to specify the users. e.g. assuming i want to protect a folder /home/shares add the following lines in your config file and reload samba [shares] comment = protected samba share path = /home/shares valid users = user1, user2, user3 public = no writable = yes printable = no please note that the 'valid users' allows the specified users only to access the share i.e. only user1 user2 and user3 will be able to access the share. The users also need to be valid users on your linux box chris On Mon, Oct 5, 2009 at 11:09 PM, George Njoroge <themburu@gmail.com> wrote:
Hello David, You also have to confirm directory settings and permissions for your shares this is mostly with the the *security* option. Cheers Themburu
On Mon, Oct 5, 2009 at 5:34 PM, Lmwangi <lmwangi@gmail.com> wrote:
Hi,
On Mon, Oct 5, 2009 at 12:33 PM, david aliata <aliatadavid@gmail.com>wrote:
I have a small linux/windows network running very well.
Good! so we don't need exotic things like ldap for user storage.. local
users :)
solution for this.I would like to implement [homes] or [usershares] for user directories and file storage:from Windows XP.How can i implement this?
The drill usually goes like this - Create a user account for each user (useradd -m user1 ) - Set a strong passwd (pwgen) if they shouldn't ssh set their shell to '/bin/false' (user passwd to adjust the password and edit /etc/passwd to set the shell. Alt, you can give an argument to useradd to set the shell ... man is your friend) - Add the user to samba store and key in the passwd the user should key in from windows world (smbpasswd -a user1 ) - Set the shares by reviewing /etc/samba/smb.conf (it's dead simple) - Restart samba - try ( net use or \\server\share to connect to your share) - if fail :Check logs :verify you don't have a restrictive MAC setup ...selinux/apparmor :Increase verbosity in the samba configuration and follow your logs
_______________________________________________ Skunkworks mailing list Skunkworks@lists.my.co.ke http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks Other services @ http://my.co.ke Other lists ------------- Announce: http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks-announce Science: http://lists.my.co.ke/cgi-bin/mailman/listinfo/science kazi: http://lists.my.co.ke/cgi-bin/mailman/admin/kazi/general
-- Conservatism is the adherence to the old tried against the new untried.
_______________________________________________ Skunkworks mailing list Skunkworks@lists.my.co.ke http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks Other services @ http://my.co.ke Other lists ------------- Announce: http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks-announce Science: http://lists.my.co.ke/cgi-bin/mailman/listinfo/science kazi: http://lists.my.co.ke/cgi-bin/mailman/admin/kazi/general
participants (4)
-
Chris Mwirigi -
david aliata -
George Njoroge -
Lmwangi