Guess what I'm really trying to do is make my share available to systems within our domain *and* to stand alone workstations (ie *not* in the domain). Unless I'm missing something obvious, it seems that you can do one or the other, but not both at the same time (although, i can't believe there's not a way of doing this)!
The Domain and workstations also sit on different networks, hence the 2 NIC's.
I've looked into smb.conf settings using both "security = user" and "security = share" (from the documentation, it would also appear that "security = domain" will essentially provide the same type of authentication as "security = user").
If I use "share" I get to the share from the workstations, without authenticating, but cannot map the share from the domain.
If I use "users" I can get to the shares from our domain, with a valid account, but get asked to authenticate from the stand alone machines.
This situation has arisen, as we need to backup systems within our domain and some stand alone workstations. I want to be able to provide a share that is available without authentication to either group of systems.
Do you or any one in the samba community have any suggestions? Is this possible with samba?
Thanks,
Richard.
Your problem is not samba but domain controller on eth2 subnet. W2k users on this net is joined to domain and samba not. Try create acount for samba on machine control panel W2k PDC as standalone NT server. Or simply join samba to domain from samba by smbpasswd -j ...
Bye.
----- Original Message ----- From: "Richard Booth" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Tuesday, July 29, 2003 4:28 PM
Subject: [Samba] Access to shares via two NIC
Hi,
I have the following problem with samba:
The set up: Redhat 9.0 system, with two NIC's (eth1/2) for two networks.
Shares available: <eth1># smbclient -L \\\\TEST28 -U% <eth2># smbclient -L \\\\TEST25 -U% Both give - added interface ip=192.21.28.10 bcast=192.21.28.255 nmask=255.255.255.0 added interface ip=129.21.25.3 bcast=192.21.25.255 nmask=255.255.255.0 Domain=[WINS-BU] OS=[Unix] Server=[Samba 2.2.7-security-rollup-fix] Sharename Type Comment --------- ---- ------- data1 Disk Data Share IPC$ IPC IPC Service (Windows servers bachup shares) ADMIN$ Disk IPC Service (Windows servers bachup shares)
Server Comment --------- ------- TEST
smb.conf: [global] <snip> encrypt passwords = yes smb passwd file = /etc/samba/smbpasswd guest account = nobody allow hosts = x y z etc <snip> [Data] comment = Test Group Share path = /data browseable = yes writable = yes guest ok = yes
Cleints connecting to smb server: All W2K server or W2K professional on both networks.
The problem: Share /data1 can be seen and accessed using the guest account, by all system on interface eth1, but -
Share /data1 can *not* be accessed using the guest account, by any system, on interface eth2. I get the classic error message "The account is not authorized to log in from this station"
The only difference between the networks is that eth1 tends to have stand alone systems, whilst the systems on eth2 belong to a domain.
This is driving me nuts! Any help would be much appreciated.
Cheers,
--
To unsubscribe from this list go to the following URL and read the
instructions: http://lists.samba.org/mailman/listinfo/samba
-- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
