Topic: user account login without password

[Saleem khan]

Hi,

I am currently using e-smith  5.0 and have sucessfully got a samba domain running with NT 4 workstation, millenium and win98 clients successfully logging in.

However I need to allow users to log in without a password.  I have read and implemented the instructions in

http://www.samba.org/samba/docs/ENCRYPTION.html

Currently I have encyption turned on in samba and also get it to use the smbpasswd file.   This file was already created.

In order to try and get users to login without a password I have tried to following.

Added "null passwords = yes" to the global section of smb.conf
restarted the smb deamon.
Added a new account via the e-smith manager console.
I have reset the password n the e-smith manager console
edited passwd and blanked the account for test
from

test:x:5007  to  test::5007

Edited smbpassword and added "NO PASSWORD" in the first XXX section as follows

test:5077:NO PASSWORDXXXXXXXXXXXXXXXXXXXXX:XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX:[U         }

Basically I have replaced the 21 character hash values with Xs and added "NO PASSWORD".

I have tried to log in with the test account without a password but I get the following in the samba log file

[2002/03/05 14:28:04, 1] smbd/reply.c:reply_sesssetup_and_X(937)
  Rejecting user 'test': bad password
[2002/03/05 14:29:16, 1] smbd/service.c:make_connection(550)
  pc-00072 (192.168.1.72) connect to service netlogon as user test (uid=5007, gid=5007) (pid 1350)
[2002/03/05 14:29:19, 1] smbd/service.c:close_cnum(581)
  pc-00072 (192.168.1.72) closed connection to service netlogon
[2002/03/05 14:29:19, 1] smbd/service.c:make_connection(550)
  pc-00072 (192.168.1.72) connect to service netlogon as user test (uid=5007, gid=5007) (pid 1352)
[2002/03/05 14:32:04, 1] smbd/service.c:close_cnum(581)
  pc-00072 (192.168.1.72) closed connection to service netlogon

However  I can log in with the password I set via the esmith web manager.

This suggest to me that the password is set and kept somewhere else maybe.
I do know that the accounts are kept in an accounts folder in the e-smith folder.

I have also  set the account flag to N (signifying no password) in smbpassword as per instructions in

http://www.samba.org/samba/docs/man/smbpasswd.5.html

but samba is ignoring the command.

Can anyone help please.

After two days of searching and changing smbpasswd settings I cannot get a user to login without a password.  I would like to do this as some users are children and they are used to not entering a password.  I am replacing an NT solution with a brilliant linux solution and this is the last hurdle.

Any help provided really appreciated.

[Lee Staley]

If you they dont have to log into the network, then this blurb describes using the unix guest account to access resources, from http://de.samba.org/samba/ftp/docs/htmldocs/smb.conf.5.html.

Other Wise TWEAKUI or "powertools" will let you set a autologin preference so it becomes transparent.

Sections may be designated guest services, in which case no password is required to access them. A specified UNIX guest account is used to define access privileges in this case.

Sections other than guest services will require a password to access them. The client provides the username. As older clients only provide passwords and not usernames, you may specify a list of usernames to check against the password using the "user =" option in the share definition. For modern clients such as Windows 95/98/ME/NT/2000, this should not be necessary.

Note that the access rights granted by the server are masked by the access rights granted to the specified or guest UNIX user by the host system. The server does not grant more access than the host system grants.

The following sample section defines a file space share. The user has write access to the path /home/bar. The share is accessed via the share name "foo":

[foo]
       path = /home/bar
       writeable = true
   

The following sample section defines a printable share. The share is readonly, but printable. That is, the only write access permitted is via calls to open, write to and close a spool file. The guest ok parameter means access will be permitted as the default guest user (specified elsewhere):

[aprinter]
       path = /usr/spool/public
       writeable = false
       printable = true
       guest ok = true

[Amir]

I'm trying to Help Saleem with this problem and unfortunatly each user has their own HOME directory so they must login  to the domain.

The only problem is getting the e-smith box to allow the user to login without using a password ;-(

The logs in the first post seem to show that Samba is still trying to match passwords even though its been told not to?!

Amir

[Amir]

found the solution..

FYI: incase you need to do the same

1) Make account in e-smith admin
2) Set any password to unlock account
3) use smbpasswd -n to set null passwrd

also remember to add in global section of smb.conf

null passwords = yes

Regards

amir