Ouch!!! Sorry man. Got side tracked this week. Thanks for
reminding me.
OK: My /etc/smbusers has a line like this in it:
nobody = guest pcguest smbguest
With comments removed, my /etc/smb.conf looks like this:
[global]
workgroup = SILVER
server string = Minerva over SMB
hosts allow = 192.168.254. 157.184.8. 127.
printcap name = /etc/printcap
load printers = yes
; printing = bsd
; guest account = pcguest
log file = /var/log/samba/log.%m
max log size = 50
security = user
; password server = <NT-Server-Name>
; password level = 8
; username level = 8
encrypt passwords = yes
smb passwd file = /etc/smbpasswd
; unix password sync = Yes
; passwd program = /usr/bin/passwd %u
; passwd chat = *New*UNIX*password* %n\n *ReType*new*UNIX*password* %n\n
*passwd:*all*authentication*tokens*updated*successfully*
username map = /etc/smbusers
; include = /etc/smb.conf.%m
socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
interfaces = 192.168.254.1/24 157.184.8.77/24
; remote browse sync = 192.168.3.25 192.168.5.255
; remote announce = 192.168.1.255 192.168.2.44
local master = no
os level = 30
; domain master = yes
; preferred master = yes
; domain controller = <NT-Domain-Controller-SMBName>
; domain logons = yes
; logon script = %m.bat
; logon script = %U.bat
; logon path = \\%L\Profiles\%U
; name resolve order = wins lmhosts bcast
wins support = yes
; wins server = w.x.y.z
; wins proxy = yes
dns proxy = no
; preserve case = no
; short preserve case = no
; default case = lower
; case sensitive = no
[homes]
comment = Home Directories
browseable = no
writable = yes
[printers]
comment = All Printers
path = /var/spool/samba
browseable = no
guest ok = no
writable = no
printable = yes
[archives]
comment = Archives of many things.
path = /mnt/archives
browseable = yes
writable = no
printable = no
public = yes
user = guest
Now, I used smbpasswd to make the passwd for user guest, "guest".
If their machine prompts for userid and passwd, they can just use
guest/guest. This does not give them a home directory, no printer
access, but they can all browse the archvies share to download files
which is the intention. If they have a valid user account on the
Linux host, then they get access to the printers and their home
directory as well. This server is on two subnets, hence some of the
dual addresses at the top of the config. You'll note that the
"os level" flag was also dropped from the default of 33 to 30. The
reason being that (in the past at least), the Linux box has gotten
into "arguments" with the NT domain controller as to who the master
browser is and they repeatedly go into forced elections to settle
it, which causes unnecessary broadcast traffic. Therefore I've gotten
into the habit of changeing that the past couple of years. I have
no idea if it's still necessary or not, but cannot hurt. Notice
also that I have the encrypted passwords turned on to make the
Win98 boxes happy.
On Thu, Mar 02, 2000 at 03:29:20PM -0500, Mike Green wrote:
> I was hoping to see your response on the list -- but did not (sorry if I just
> overlooked it). I was hoping it would help me figure out my problems, also...
>
> On Sat, 26 Feb 2000, J. Scott Kasten wrote:
> > You're right. There's more to this. I just banged
> > something out to you while I was multi-tasking. On
> > Mon when I get back to work, I'll cut out all the good
> > stuff from my server config files and send it to you.
> >
> >
> > > > # Archives directory.
> > > > [archives]
> > > > comment = Archives of many things.
> > > > path = /mnt/archives
> > > > browseable = yes
> > > > writable = no
> > > > printable = no
> > > > public = yes
> > > > user = guest
--
J. Scott Kasten
jsk AT tetracon-eng DOT net
"That wasn't an attack. It was preemptive retaliation!"
----- End forwarded message -----
--
J. Scott Kasten
jsk AT tetracon-eng DOT net
"That wasn't an attack. It was preemptive retaliation!"
--
To unsubscribe: mail [EMAIL PROTECTED] with "unsubscribe"
as the Subject.