Syncronizing user id on the PC with UNIX logon id

Syncronizing user id on the PC with UNIX logon id

Post by Eunice Santori » Tue, 23 Jul 2002 15:58:52



***********************************************************************
Any advice for a UNIX user to log on from a Win95/Win2K PC via Samba?
***********************************************************************
1. When on either my Win95 box or my Win2K, and I type:
    Start->Run->net use * \\myUnixHostName\MyUnixShareName
   I get:
    Error 3787: You must log on before performing this operation.

2. Obviously Windows SMB wants a USER (e.g., user=eunice) on the PC to
   match a USER (e.g., user=eunice) on the UNIX workstation.

   How do I connect from the PC and FORCE a particular UNIX user
   (which isn't the PC user)???

3. That is:
   User = eunice exists on the UNIX workstation.
   But, there is no such user on the PC (never will be).
    - On the Win95 PC, I'm just the default user (whoever that is).
      The workgroup is again, just the default workgroup (whatever that is).

   - On the Win2K PC, the user is 'administrator' (as it's a single-user
     PC and I didn't see any reason to have both an 'administrator' and
     a 'eunice' cluttering up the directory tree); and the workgroup is
     "myworkgroup".

   - So how do I FORCE the user on the PC side, to be a particular user?

     If I could run a command from the PC to specify the user, that would
     solve the problem. Sort of the command below:

     Start->Run->
       net use * \\myUnixHostName\MyUnixShareName /USER=eunice

Any ideas?
Eunice

Oh, the smb.conf file on the UNIX (Sun Solaris 8) box is
(not very well understood by me) as shown below:

[global]
   security             = user
   guest account        = nobody
   domain logons        = yes
   os level             = 65
   local master         = no
   domain master        = no
   prefered master      = yes
   workgroup            = myworkgroup
   interfaces           = 111.111.111.111 ;actually set to my unix hostid
   smbrun               = /usr/local/samba/bin/smbrun
   wins support         = yes
   wins proxy           = now
   login script         = %u.bat
   socket options       = TCP_NODELAY
   server string        = My Samba server
   wins server          = localhost
   password level       = 4
;  username map         = /path/to/username/map  ; what is the file syntax?
   os level             = 0
   browse list          = No
   browseable           = yes
   log file             = /usr/local/samba/log/log.%m
   printing             = bsd
   print command        = /usr/ucb/lpr -r -s -P%p %s
   lpq command          = /usr/ucb/lpq -P%p
   lprm command         = /usr/ucb/lprm -P%p %j
   printcap name        = /etc/printcap

[Netlogon]
   ;login script directory
   path                 = /usr/local/samba/login
   writable             = no
   public               = no
   printable            = no
   browsable            = yes

[home]
   comment              = Home Directories on UNIX
   read only            = no
   create mode          = 0750

[tmp]
   comment = Temporary directory on UNIX
   path                 = /tmp
   public               = yes
   browseable           = yes
   writable             = yes

 
 
 

Syncronizing user id on the PC with UNIX logon id

Post by Shaun Marol » Tue, 23 Jul 2002 18:30:47


This is a unix security scheme issue more than a windows problem. Samba
requires that you have the user in Unix before it will allow you to create
the user in smbpasswd. In other words if the user does not have a valid Unix
and Samba account they will not be allowed to login. Since you have security
= user this is the scheme you must deal with. If you change to security =
share you can do what you are attempting since Samba will only look to see
if a proper share access password was given at that point and will share the
resources with anybody who can give it. However this will be a serious
compromise in security. I suggest you just create the user accounts and use
them.

--Shaun


Quote:> ***********************************************************************
> Any advice for a UNIX user to log on from a Win95/Win2K PC via Samba?
> ***********************************************************************
> 1. When on either my Win95 box or my Win2K, and I type:
>     Start->Run->net use * \\myUnixHostName\MyUnixShareName
>    I get:
>     Error 3787: You must log on before performing this operation.

> 2. Obviously Windows SMB wants a USER (e.g., user=eunice) on the PC to
>    match a USER (e.g., user=eunice) on the UNIX workstation.

>    How do I connect from the PC and FORCE a particular UNIX user
>    (which isn't the PC user)???

> 3. That is:
>    User = eunice exists on the UNIX workstation.
>    But, there is no such user on the PC (never will be).
>     - On the Win95 PC, I'm just the default user (whoever that is).
>       The workgroup is again, just the default workgroup (whatever that
is).

>    - On the Win2K PC, the user is 'administrator' (as it's a single-user
>      PC and I didn't see any reason to have both an 'administrator' and
>      a 'eunice' cluttering up the directory tree); and the workgroup is
>      "myworkgroup".

>    - So how do I FORCE the user on the PC side, to be a particular user?

>      If I could run a command from the PC to specify the user, that would
>      solve the problem. Sort of the command below:

>      Start->Run->
>        net use * \\myUnixHostName\MyUnixShareName /USER=eunice

> Any ideas?
> Eunice

> Oh, the smb.conf file on the UNIX (Sun Solaris 8) box is
> (not very well understood by me) as shown below:

> [global]
>    security             = user
>    guest account        = nobody
>    domain logons        = yes
>    os level             = 65
>    local master         = no
>    domain master        = no
>    prefered master      = yes
>    workgroup            = myworkgroup
>    interfaces           = 111.111.111.111 ;actually set to my unix hostid
>    smbrun               = /usr/local/samba/bin/smbrun
>    wins support         = yes
>    wins proxy           = now
>    login script         = %u.bat
>    socket options       = TCP_NODELAY
>    server string        = My Samba server
>    wins server          = localhost
>    password level       = 4
> ;  username map         = /path/to/username/map  ; what is the file
syntax?
>    os level             = 0
>    browse list          = No
>    browseable           = yes
>    log file             = /usr/local/samba/log/log.%m
>    printing             = bsd
>    print command        = /usr/ucb/lpr -r -s -P%p %s
>    lpq command          = /usr/ucb/lpq -P%p
>    lprm command         = /usr/ucb/lprm -P%p %j
>    printcap name        = /etc/printcap

> [Netlogon]
>    ;login script directory
>    path                 = /usr/local/samba/login
>    writable             = no
>    public               = no
>    printable            = no
>    browsable            = yes

> [home]
>    comment              = Home Directories on UNIX
>    read only            = no
>    create mode          = 0750

> [tmp]
>    comment = Temporary directory on UNIX
>    path                 = /tmp
>    public               = yes
>    browseable           = yes
>    writable             = yes


 
 
 

Syncronizing user id on the PC with UNIX logon id

Post by Andreas Gru » Tue, 23 Jul 2002 23:55:06


I suggest you just create the user accounts and use

Quote:> them.

scriptable with ldap! (what else should CPUs do?)
 
 
 

Syncronizing user id on the PC with UNIX logon id

Post by Scott Lawso » Thu, 25 Jul 2002 17:40:37


I would suggest you had a look at www.samba.org. There are some really good
faqs there which will help you understand how samba works for account
synchronisation.


Quote:> ***********************************************************************
> Any advice for a UNIX user to log on from a Win95/Win2K PC via Samba?
> ***********************************************************************
> 1. When on either my Win95 box or my Win2K, and I type:
>     Start->Run->net use * \\myUnixHostName\MyUnixShareName
>    I get:
>     Error 3787: You must log on before performing this operation.

> 2. Obviously Windows SMB wants a USER (e.g., user=eunice) on the PC to
>    match a USER (e.g., user=eunice) on the UNIX workstation.

>    How do I connect from the PC and FORCE a particular UNIX user
>    (which isn't the PC user)???

> 3. That is:
>    User = eunice exists on the UNIX workstation.
>    But, there is no such user on the PC (never will be).
>     - On the Win95 PC, I'm just the default user (whoever that is).
>       The workgroup is again, just the default workgroup (whatever that
is).

>    - On the Win2K PC, the user is 'administrator' (as it's a single-user
>      PC and I didn't see any reason to have both an 'administrator' and
>      a 'eunice' cluttering up the directory tree); and the workgroup is
>      "myworkgroup".

>    - So how do I FORCE the user on the PC side, to be a particular user?

>      If I could run a command from the PC to specify the user, that would
>      solve the problem. Sort of the command below:

>      Start->Run->
>        net use * \\myUnixHostName\MyUnixShareName /USER=eunice

> Any ideas?
> Eunice

> Oh, the smb.conf file on the UNIX (Sun Solaris 8) box is
> (not very well understood by me) as shown below:

> [global]
>    security             = user
>    guest account        = nobody
>    domain logons        = yes
>    os level             = 65
>    local master         = no
>    domain master        = no
>    prefered master      = yes
>    workgroup            = myworkgroup
>    interfaces           = 111.111.111.111 ;actually set to my unix hostid
>    smbrun               = /usr/local/samba/bin/smbrun
>    wins support         = yes
>    wins proxy           = now
>    login script         = %u.bat
>    socket options       = TCP_NODELAY
>    server string        = My Samba server
>    wins server          = localhost
>    password level       = 4
> ;  username map         = /path/to/username/map  ; what is the file
syntax?
>    os level             = 0
>    browse list          = No
>    browseable           = yes
>    log file             = /usr/local/samba/log/log.%m
>    printing             = bsd
>    print command        = /usr/ucb/lpr -r -s -P%p %s
>    lpq command          = /usr/ucb/lpq -P%p
>    lprm command         = /usr/ucb/lprm -P%p %j
>    printcap name        = /etc/printcap

> [Netlogon]
>    ;login script directory
>    path                 = /usr/local/samba/login
>    writable             = no
>    public               = no
>    printable            = no
>    browsable            = yes

> [home]
>    comment              = Home Directories on UNIX
>    read only            = no
>    create mode          = 0750

> [tmp]
>    comment = Temporary directory on UNIX
>    path                 = /tmp
>    public               = yes
>    browseable           = yes
>    writable             = yes

 
 
 

1. VFS 3 mapping window's user-ids to unix-ids

After setting up VisonFS 3.0 on OS5.05 and selecting Vision password
database as the authentication method, and importing the unix user-ids(also
using the unix user-ids as their initial Vision passwords), I was unable to
use root(default) to sign on as the Vision administrator.

I selected myself as the VFS admin, and using my unix-id/password, I logged
onto to windows and was able to connect to the profile editor.
But when I map any window user to their different unix user-id, the password
authentication fails when trying to connect to the server in network
neighborhood.  I did the mapping in profile editor and even tried different
changing passwords.

Does anyone else have problems with mapping users?  Also the is a nt server
in the picture.

2. ALPS Printer with Linux

3. user id vs effective user id

4. http_client_ip

5. SuperProbe and X problems

6. (Review ID: 166600) Unexpected Signal : 11 occurred at PC=0x4A03734D Error ID : 4F530E43505002D

7. Don't see my lastlog & wtmp files in /var/log. Am I under attack?

8. set user id and set group id bits

9. Finding out User Id given Process id

10. (Historical) User ID and Group ID

11. Is it possible to get vendor ID and device ID in user mode not kernel mod?

12. Finding out User Id given Process id