Windows and Samba, Re: bluecurve

['The Buddha' Doug McLean]

Drawbacks aside, I like the idea of encrypted passwords much more than the
unencrypted ones.  Especially if you are going to be mounting people's
home directories....

Doug McLean
Department of Microbiology
http://faculty.washington.edu/dougmc
PGP Public Key ID# 0xF96E92D8

Meanwhile, in Gotham, Cliff wrote:

> Yes, you can use encrypted passwords with a windows client and samba
> server (and vice versa).  Each windows username must have a
> corresponding entry in the smbpasswd file along with the encrypted
> windows password for that user.
>
> The challenge has been that samba can not use *nix passwds so you must
> maintain two separate password files.  One for *nix and one for samba.
>  There are some tricks to automatically create and update the smbpasswd
> file, but they have drawbacks as well.
>
> Hope this helps,
> Cliff
>
> Dan Sanderson wrote:
>
> >On disabling encrypted passwords in Windows (9x, NT, 2k):
> > http://wwwx.cs.unc.edu/help/network/problems/samba_passwords.html
> > http://enterprise.iet.auc.dk/Computer_ressources/Samba/plain_password.html
> >
> >I can't find any information on getting both a Windows client and a Samba
> >server to use encrypted passwords; last time I had to do this, I was left
> >to conclude that this isn't possible.  (Is the issue that Samba uses a
> >different encryption method with "encrypt passwords = yes" and an
> >/etc/smbpasswd file?)
> >
> >-- Dan
> >
> >On Mon, 6 Jan 2003, 'The Buddha' Doug McLean wrote:
> >
> >
> >
> >>Speaking from experience, the Oreilly Samba book helped me quite a bit.  I
> >>was in a similar situation (trying to get users to authenticate to a
> >>certain linux server at the time), and got it to work A-ok.
> >>
> >>Also, one little thing I found (which should be mentioned in the book) is
> >>that some versions of Windows can't do encrypted passwords by default.  I
> >>think there's a way to change it in the Registry, depending on the version
> >>of Windows.  So either you have adjust the Registry, or disable encrypted
> >>passwords on Samba.  I prefer the former option where possible.  :)
> >>
> >>Anyhow, Samba rules!
> >>
> >>Doug McLean
> >>Department of Microbiology
> >>http://faculty.washington.edu/dougmc
> >>PGP Public Key ID# 0xF96E92D8
> >>
> >>Meanwhile, in Gotham, jeremiah jester wrote:
> >>
> >>
> >>
> >>>Ah samba! the friend i love to hate. I have had no luck running samba when
> >>>trying to auth based on a particular user. the pcguest account or 'guest ok
> >>>= yes' works fine for share level access but cant seem to get user level to
> >>>work. I bought the orielly samba book so hopefully with have time to figure
> >>>out my ill ways soon.
> >>>JJ
> >>>
> >>>----- Original Message -----
> >>>From: "Jeff Silverman" <jeffs at duet.cfr.washington.edu>
> >>>To: "UW Linux Group" <linux at u.washington.edu>
> >>>Sent: Monday, January 06, 2003 11:17 AM
> >>>Subject: Re: bluecurve
> >>>
> >>>
> >>>
> >>>
> >>>>On Mon, 6 Jan 2003, Greg Stark wrote:
> >>>>
> >>>>
> >>>>
> >>>>>My next step is to actually dualboot this OS at work...  I'v got no
> >>>>>clue how to join my linux computer onto a windows domain...  Ugh.
> >>>>>
> >>>>>Greg
> >>>>>
> >>>>>
> >>>>Use Samba.  I've done it, it works fairly well despite Microsoft's best
> >>>>efforts to stop it.
> >>>>
> >>>>
> >>>>Jeff
> >>>>
> >>>>
> >>>>--
> >>>>Jeff Silverman,
> >>>>Senior Computing Specialist 3, Fire and Environmental Research
> >>>>
> >>>>
> >>>Applications (FERA) team.
> >>>
> >>>
> >>>>jeffs at duet.cfr.washington.edu   (206) 732-7815
> >>>>http://duet.cfr.washington.edu
> >>>>
> >>>>
> >>>>
> >>>>
> >>>
> >>>
> >>>
> >>>
> >>
> >>
> >
> >
> >
> >
>
>