[Samba] Samba4.2.3 Authentication

[Nitin Pande]

Hello,

Need your guidance in setting up SAMBA 4.2.3 on CentOS7 with proper authentication.

Below are the details of my smb.conf file.

Problem: incorrect authentication when accessing share from windows machine

a) "worm" share is guest only and can be accessed by any person without authentication
b) "secure_worm" is share which require authentication from the user

when I have only one share(worm or secure_worm) configured in samba, everything works fine, however problem starts when I have both these configuration and user tries to access both share

i) I use \\10.0.0.21 which shows me two share named "worm" & "secure_worm", when I click on secure_worm it asks me for user name and password, with correct credentials I can access and work with share, now if I close and open the explorer and try to access these share, I am get into "secure_worm" folder without authentication and I am asked for authentication for the "worm" folder which is incorrect.

If I restart the samba service or restart the workstation service in windows everything works fine for first connection and once I authenticate secure_worm folder, above mentioned problem starts coming up again.

Server role: ROLE_STANDALONE
Press enter to see a dump of your service definitions

[global]
workgroup = IDEALSTOR
server string = Samba Server Version %v
map to guest = Bad User
log file = /var/log/samba/log.%m
max log size = 50
idmap config * : backend = tdb

[worm]
comment = WORM functionality on the client side
path = /idealstor/worm_data
read only = No
guest ok = Yes
vfs objects = worm
worm:grace_period = 30 # 30 seconds

[secure_worm]
comment = WORM functionality on the client side
path = /idealstor/secure_worm_data
valid users = @iGroup
read only = No
vfs objects = worm
worm:grace_period = 30 # 30 seconds


Regards
Nitin



--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/options/samba

[L.P.H. van Belle]

On the "guest share" try it with :

map to guest = Bad Password


Greetz,

Louis

> -----Oorspronkelijk bericht-----
> Van: samba [mailto:samba-...@lists.samba.org] Namens Nitin Pande
> Verzonden: woensdag 2 september 2015 9:57
> Aan: sa...@lists.samba.org
> Onderwerp: [Samba] Samba4.2.3 Authentication

[Nitin Pande]

Hi,

Tried your suggestion, however the problem persists. Once the authentication is done for folder with non guest account, the shared folder with guest account starts asking for user name and password.

Regards
Nitin
________________________________________
From: samba [samba-...@lists.samba.org] on behalf of L.P.H. van Belle [be...@bazuin.nl]
Sent: Wednesday, September 02, 2015 4:12 AM
To: sa...@lists.samba.org
Subject: Re: [Samba] Samba4.2.3 Authentication

[L.P.H. van Belle]

You did also run in default windows behavior.

If you klik on a like \\ip\share as guest, your connected as guest.
If you then go to a share which requires user auth, its not possible, since your guest, and same other way around.

Do the following this should work.

Make a drive mapping from the pc, and make user you map First the drive with user authentication, and select the "use other referencials" and set the correct domain\user

Then make try to make the mapping to the guest share.

This should work.

And when tested, put it in a script.
Like :

net use P: \\servername(.domain)\share /user:DOMAIN\%username%

greetz,

Louis

> -----Oorspronkelijk bericht-----
> Van: Nitin Pande [mailto:NPa...@idealstor.com]
> Verzonden: woensdag 2 september 2015 11:00
> Aan: L.P.H. van Belle
> Onderwerp: RE: [Samba] Samba4.2.3 Authentication
>
> Hi,
>
> I tried your suggestion, but the problem is not solved. Once the proper
> authentication is done, not sure why samba is asking for authentication
> for guest account.

>
> Regards
> Nitin
> ________________________________________
> From: samba [samba-...@lists.samba.org] on behalf of L.P.H. van Belle
> [be...@bazuin.nl]
> Sent: Wednesday, September 02, 2015 4:12 AM
> To: sa...@lists.samba.org
> Subject: Re: [Samba] Samba4.2.3 Authentication
>