Samba question...

[LeDam]

Hello all!
I recently install samba in one AIX. We can access directory with win2000 with or without password. But account must be local for AIX and the ip specified in "host allowed". Is it possible to verify that a user is connected to our PDC, and if he is, he hasn't to enter a valid password?
We have user that have to have a connection with this AIX. So when they log in in Win2000, we will put a "bat" that automaticly make a share with this samba station. His Ip will be specify in "host allow". But if somebody log in with the same ip, but not in our domain, he could have the same access on this samba station!! How can verify that this user is a domain user??

 

[tcorum]

I am not sure that I totally understand your question but here goes. You can set a password server in the smb.conf file. I am not sure how you have yours configured but you might try something like this.

[global]
workgroup = DOMAINNAME
netbios name = SAMBASERVER
server string = My Samba Server
interfaces = 10.10.10.1
security = DOMAIN
encrypt passwords = Yes
password server = NTPDC NTBDC
log file = /var/samba/log/log.%m
max log size = 50
name resolve order = wins host lmhosts bcast
socket options = TCP_NODELAY IPTOS_LOWDELAY
os level = 0
dns proxy = No
wins server = 10.10.10.2
local master = no
guest account = nobody
create mask = 0777

Just set your password server to the PDC of your domain. You will still need to add the user accounts to the AIX box but it should ignore the password and use the PDC for access. Tell me if this works out for you. I am currently running Samba with this configuration and it works fine.

Hope this helps,

TCorum

 

[LeDam]

What i am trying to do, is win2000 user account with a share on AIX. I'm trying that the user haven't to enter his password. When he log in in his win2000 profile, a share to the AIX station is automaticly make.

 

[LeDam]

It work fine thanks... but we have to add AIX user...
isn't another solution without adding AIX user?

 

[tcorum]

Not that I have found but I would be interested in hearing of something if someone else has an idea. However, here is a suggestion. I made a simple script that adds the user and prompts me for the username. The script adds a difficult password and in the user information prints Samba User just so I can identify the accounts. This is about as simple as I have been able to do it. Please post if you find a better solution.

Thanks,

TCorum