Koozali.org: home of the SME Server
Legacy Forums => Experienced User Forum => Topic started by: Saleem khan on March 05, 2002, 06:06:16 PM
-
Hi,
I am currently using e-smith 5.0 and have sucessfully got a samba domain running with NT 4 workstation, millenium and win98 clients successfully logging in.
However I need to allow users to log in without a password. I have read and implemented the instructions in
http://www.samba.org/samba/docs/ENCRYPTION.html
Currently I have encyption turned on in samba and also get it to use the smbpasswd file. This file was already created.
In order to try and get users to login without a password I have tried to following.
Added "null passwords = yes" to the global section of smb.conf
restarted the smb deamon.
Added a new account via the e-smith manager console.
I have reset the password n the e-smith manager console
edited passwd and blanked the account for test
from
test:x:5007 to test::5007
Edited smbpassword and added "NO PASSWORD" in the first XXX section as follows
test:5077:NO PASSWORDXXXXXXXXXXXXXXXXXXXXX:XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX:[U }
Basically I have replaced the 21 character hash values with Xs and added "NO PASSWORD".
I have tried to log in with the test account without a password but I get the following in the samba log file
[2002/03/05 14:28:04, 1] smbd/reply.c:reply_sesssetup_and_X(937)
Rejecting user 'test': bad password
[2002/03/05 14:29:16, 1] smbd/service.c:make_connection(550)
pc-00072 (192.168.1.72) connect to service netlogon as user test (uid=5007, gid=5007) (pid 1350)
[2002/03/05 14:29:19, 1] smbd/service.c:close_cnum(581)
pc-00072 (192.168.1.72) closed connection to service netlogon
[2002/03/05 14:29:19, 1] smbd/service.c:make_connection(550)
pc-00072 (192.168.1.72) connect to service netlogon as user test (uid=5007, gid=5007) (pid 1352)
[2002/03/05 14:32:04, 1] smbd/service.c:close_cnum(581)
pc-00072 (192.168.1.72) closed connection to service netlogon
However I can log in with the password I set via the esmith web manager.
This suggest to me that the password is set and kept somewhere else maybe.
I do know that the accounts are kept in an accounts folder in the e-smith folder.
I have also set the account flag to N (signifying no password) in smbpassword as per instructions in
http://www.samba.org/samba/docs/man/smbpasswd.5.html
but samba is ignoring the command.
Can anyone help please.
After two days of searching and changing smbpasswd settings I cannot get a user to login without a password. I would like to do this as some users are children and they are used to not entering a password. I am replacing an NT solution with a brilliant linux solution and this is the last hurdle.
Any help provided really appreciated.
-
If you they dont have to log into the network, then this blurb describes using the unix guest account to access resources, from http://de.samba.org/samba/ftp/docs/htmldocs/smb.conf.5.html.
Other Wise TWEAKUI or "powertools" will let you set a autologin preference so it becomes transparent.
Sections may be designated guest services, in which case no password is required to access them. A specified UNIX guest account is used to define access privileges in this case.
Sections other than guest services will require a password to access them. The client provides the username. As older clients only provide passwords and not usernames, you may specify a list of usernames to check against the password using the "user =" option in the share definition. For modern clients such as Windows 95/98/ME/NT/2000, this should not be necessary.
Note that the access rights granted by the server are masked by the access rights granted to the specified or guest UNIX user by the host system. The server does not grant more access than the host system grants.
The following sample section defines a file space share. The user has write access to the path /home/bar. The share is accessed via the share name "foo":
[foo]
path = /home/bar
writeable = true
The following sample section defines a printable share. The share is readonly, but printable. That is, the only write access permitted is via calls to open, write to and close a spool file. The guest ok parameter means access will be permitted as the default guest user (specified elsewhere):
[aprinter]
path = /usr/spool/public
writeable = false
printable = true
guest ok = true
-
I'm trying to Help Saleem with this problem and unfortunatly each user has their own HOME directory so they must login to the domain.
The only problem is getting the e-smith box to allow the user to login without using a password ;-(
The logs in the first post seem to show that Samba is still trying to match passwords even though its been told not to?!
Amir
-
found the solution..
FYI: incase you need to do the same
1) Make account in e-smith admin
2) Set any password to unlock account
3) use smbpasswd -n to set null passwrd
also remember to add in global section of smb.conf
null passwords = yes
Regards
amir