Bill Shirley wrote:
> 
> Are you running the smbclient command from root or schellenberger?
> 
> >From any account try: smbclient //elmo/apps -U schellenberger -N
> 
> Of course use a valid //server/share.
> 
> A null password account from my smbpasswd files looks like:
> 
> michael:506:AAD3B435B51404EEAAD3B435B51404EE:31D6CFE0D16AE931B73C59D7E0C089C
> 0:[U          ]:LCT-38EA8C42:

Ok, I'm nulling the pasword like this (just hitting return for the
passwords here):

[bts@i7500 ~]# smbpasswd schellenberger
New SMB password:
Retype new SMB password:
Password changed for user schellenberger.

Which produces an entry like this:
schellenberger:503:AAD3B435B51404EEAAD3B435B51404EE:31D6CFE0D16AE931B73C59D7E0C089C0:[U
         
]:LCT-390D0C41:The Family Samba Account

This is hashing just like yours is above, which seems hopeful.

But it fails like this:

[bts@i7500 ~]# smbclient //i7500/xfer -U schellenberger -N
added interface ip=192.168.147.4 bcast=192.168.147.255
nmask=255.255.255.0
added interface ip=192.168.242.2 bcast=192.168.242.255
nmask=255.255.255.0
Got a positive name query response from 192.168.242.2,( 192.168.242.2 )
session setup failed: ERRSRV - ERRbadpw (Bad password - name/password
pair in a Tree Connect or Session Setup are invalid.)
[bts@i7500 ~]# 

The Windows machine doesn't have a password on that account, and the
"xfer" share is a wide-open "temp space" share that has universal
privileges:

[bts@i7500 ~]# ls -ld /usr/local/xfer
drwxrwxrwx   2 root     root         1024 Apr 28 11:51 /usr/local/xfer/

This also fails from the Windows machine so I don't think the problem is
on the smbclient side . . .

Anybody here have a clue why this fails?


> 
> and works.
> 
> The NO PASSWORDXXXXXX only works with the old smbpasswd file entry type.
> Try:
> 
> michael:505:NO
> PASSWORDXXXXXXXXXXXXXXXXXXXXX:XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX:Michael:/home
> /michael:/bin/bash
> 
> Of course, change the account id, and numeric id.  Make SURE there are 32
> positions for the password!
> 
> And it won't work from Windows if the smb account is null password but the
> Windows account has a password.
> 
> Hope this helps,
> 
> Bill
> 
> -----Original Message-----
> From: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED]]On Behalf Of Brian T.
> Schellenberger
> Sent: Saturday, April 29, 2000 2:17 AM
> To: [EMAIL PROTECTED]
> Subject: Re: [expert] empty smb passwords?
> 
> Bill Shirley wrote:
> >
> > Yes.
> 
> Yes, I have that, I've tried both hand-editing the /etc/smbpasswd file
> to have the strange
> "NO PASSWORDXXXXXXX" form, and using "smbpasswd schellenberger" (as
> root) and just hitting enter for the password.  Either way, it fails to
> authenticate.
> 
> But if I set the password to, say "s" (the single letter) and I use
> that, then it works fine.
> 
> What am I missing here?
> 
> >
> > Do you have these set in your global section?
> >
> >   null passwords = yes
> > # You may wish to use password encryption. Please read
> > # ENCRYPTION.txt, Win95.txt and WinNT.txt in the Samba documentation.
> > # Do not enable this option unless you have read those documents
> >   encrypt passwords = yes
> >   smb passwd file = /etc/smbpasswd
> >
> > With smbclient use:
> >
> > smbclient //elmo/apps -U xxxxxx -N
> > where xxxxxx is the username.
> > Just type smbclient for it's syntax.
> >
> > Bill
> >
> > -----Original Message-----
> > From: [EMAIL PROTECTED]
> > [mailto:[EMAIL PROTECTED]]On Behalf Of Brian T.
> > Schellenberger
> > Sent: Thursday, April 27, 2000 1:29 AM
> > To: [EMAIL PROTECTED]
> > Subject: [expert] empty smb passwords?
> >
> > Has anybody had success getting Samba set up so that (some) ids can get
> > in without passwords?
> >
> > Even when using local smbclient such accounts seem to always be
> > rejected.
> >
> > --
> > "Brian, the man from babble-on"              [EMAIL PROTECTED]
> > Brian T. Schellenberger                      http://www.babbleon.org
> > Support http://www.eff.org.                  Support decss defendents.
> > Support http://www.programming-freedom.org.  Boycott amazon.com.
> 
> --
> "Brian, the man from babble-on"              [EMAIL PROTECTED]
> Brian T. Schellenberger                      http://www.babbleon.org
> Support http://www.eff.org.                  Support decss defendents.
> Support http://www.programming-freedom.org.  Boycott amazon.com.

-- 
"Brian, the man from babble-on"              [EMAIL PROTECTED]
Brian T. Schellenberger                      http://www.babbleon.org
Support http://www.eff.org.                  Support decss defendents.
Support http://www.programming-freedom.org.  Boycott amazon.com.

Reply via email to