RE: [expert] empty smb passwords?

2000-05-01 Thread Bill Shirley

Pardon me for being confused.  I have two smb servers and I was using the
Slackware one to try out the commands I was giving you.

If you still have this commented out in smb.conf:

# Uncomment this if you want a guest account, you must add this to
/etc/passwd
# otherwise the user "nobody" is used
;  guest account = pcguest

then add a line to /etc/smbpasswd:
nobody:99:NO PASSWORDX:NO
PASSWORDX:[NU ]:LCT-38E16D9D:

Now try: smbclient //i7500/xfer -U nobody -N

This works for me ( 'cept I use //bugsbunny/Apps). If it works for you, then
change schellenberger:503 to look like nobody.

Hope this solves it,

Bill


-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]]On Behalf Of Brian T.
Schellenberger
Sent: Monday, May 01, 2000 12:53 AM
To: [EMAIL PROTECTED]
Subject: Re: [expert] empty smb passwords?


Bill Shirley wrote:

 Are you running the smbclient command from root or schellenberger?

 From any account try: smbclient //elmo/apps -U schellenberger -N

 Of course use a valid //server/share.

 A null password account from my smbpasswd files looks like:


michael:506:AAD3B435B51404EEAAD3B435B51404EE:31D6CFE0D16AE931B73C59D7E0C089C
 0:[U  ]:LCT-38EA8C42:

Ok, I'm nulling the pasword like this (just hitting return for the
passwords here):

[bts@i7500 ~]# smbpasswd schellenberger
New SMB password:
Retype new SMB password:
Password changed for user schellenberger.

Which produces an entry like this:
schellenberger:503:AAD3B435B51404EEAAD3B435B51404EE:31D6CFE0D16AE931B73C59D7
E0C089C0:[U
]:LCT-390D0C41:The Family Samba Account

This is hashing just like yours is above, which seems hopeful.

But it fails like this:

[bts@i7500 ~]# smbclient //i7500/xfer -U schellenberger -N
added interface ip=192.168.147.4 bcast=192.168.147.255
nmask=255.255.255.0
added interface ip=192.168.242.2 bcast=192.168.242.255
nmask=255.255.255.0
Got a positive name query response from 192.168.242.2,( 192.168.242.2 )
session setup failed: ERRSRV - ERRbadpw (Bad password - name/password
pair in a Tree Connect or Session Setup are invalid.)
[bts@i7500 ~]#

The Windows machine doesn't have a password on that account, and the
"xfer" share is a wide-open "temp space" share that has universal
privileges:

[bts@i7500 ~]# ls -ld /usr/local/xfer
drwxrwxrwx   2 root root 1024 Apr 28 11:51 /usr/local/xfer/

This also fails from the Windows machine so I don't think the problem is
on the smbclient side . . .

Anybody here have a clue why this fails?



 and works.

 The NO PASSWORDXX only works with the old smbpasswd file entry type.
 Try:

 michael:505:NO

PASSWORDX::Michael:/home
 /michael:/bin/bash

 Of course, change the account id, and numeric id.  Make SURE there are 32
 positions for the password!

 And it won't work from Windows if the smb account is null password but the
 Windows account has a password.

 Hope this helps,

 Bill

 -Original Message-
 From: [EMAIL PROTECTED]
 [mailto:[EMAIL PROTECTED]]On Behalf Of Brian T.
 Schellenberger
 Sent: Saturday, April 29, 2000 2:17 AM
 To: [EMAIL PROTECTED]
 Subject: Re: [expert] empty smb passwords?

 Bill Shirley wrote:
 
  Yes.

 Yes, I have that, I've tried both hand-editing the /etc/smbpasswd file
 to have the strange
 "NO PASSWORDXXX" form, and using "smbpasswd schellenberger" (as
 root) and just hitting enter for the password.  Either way, it fails to
 authenticate.

 But if I set the password to, say "s" (the single letter) and I use
 that, then it works fine.

 What am I missing here?

 
  Do you have these set in your global section?
 
null passwords = yes
  # You may wish to use password encryption. Please read
  # ENCRYPTION.txt, Win95.txt and WinNT.txt in the Samba documentation.
  # Do not enable this option unless you have read those documents
encrypt passwords = yes
smb passwd file = /etc/smbpasswd
 
  With smbclient use:
 
  smbclient //elmo/apps -U xx -N
  where xx is the username.
  Just type smbclient for it's syntax.
 
  Bill
 
  -Original Message-
  From: [EMAIL PROTECTED]
  [mailto:[EMAIL PROTECTED]]On Behalf Of Brian T.
  Schellenberger
  Sent: Thursday, April 27, 2000 1:29 AM
  To: [EMAIL PROTECTED]
  Subject: [expert] empty smb passwords?
 
  Has anybody had success getting Samba set up so that (some) ids can get
  in without passwords?
 
  Even when using local smbclient such accounts seem to always be
  rejected.
 
  --
  "Brian, the man from babble-on"  [EMAIL PROTECTED]
  Brian T. Schellenberger  http://www.babbleon.org
  Support http://www.eff.org.  Support decss defendents.
  Support http://www.programming-freedom.org.  Boycott amazon.com.

 --
 "Brian, the man from babble-on"  [EMAIL PROTECTED]
 Brian T. Schellenberger  htt

RE: [expert] empty smb passwords?

2000-04-30 Thread Bill Shirley

Are you running the smbclient command from root or schellenberger?

From any account try: smbclient //elmo/apps -U schellenberger -N

Of course use a valid //server/share.


A null password account from my smbpasswd files looks like:

michael:506:AAD3B435B51404EEAAD3B435B51404EE:31D6CFE0D16AE931B73C59D7E0C089C
0:[U  ]:LCT-38EA8C42:

and works.

The NO PASSWORDXX only works with the old smbpasswd file entry type.
Try:

michael:505:NO
PASSWORDX::Michael:/home
/michael:/bin/bash

Of course, change the account id, and numeric id.  Make SURE there are 32
positions for the password!

And it won't work from Windows if the smb account is null password but the
Windows account has a password.

Hope this helps,

Bill

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]]On Behalf Of Brian T.
Schellenberger
Sent: Saturday, April 29, 2000 2:17 AM
To: [EMAIL PROTECTED]
Subject: Re: [expert] empty smb passwords?


Bill Shirley wrote:

 Yes.

Yes, I have that, I've tried both hand-editing the /etc/smbpasswd file
to have the strange
"NO PASSWORDXXX" form, and using "smbpasswd schellenberger" (as
root) and just hitting enter for the password.  Either way, it fails to
authenticate.

But if I set the password to, say "s" (the single letter) and I use
that, then it works fine.

What am I missing here?



 Do you have these set in your global section?

   null passwords = yes
 # You may wish to use password encryption. Please read
 # ENCRYPTION.txt, Win95.txt and WinNT.txt in the Samba documentation.
 # Do not enable this option unless you have read those documents
   encrypt passwords = yes
   smb passwd file = /etc/smbpasswd

 With smbclient use:

 smbclient //elmo/apps -U xx -N
 where xx is the username.
 Just type smbclient for it's syntax.

 Bill

 -Original Message-
 From: [EMAIL PROTECTED]
 [mailto:[EMAIL PROTECTED]]On Behalf Of Brian T.
 Schellenberger
 Sent: Thursday, April 27, 2000 1:29 AM
 To: [EMAIL PROTECTED]
 Subject: [expert] empty smb passwords?

 Has anybody had success getting Samba set up so that (some) ids can get
 in without passwords?

 Even when using local smbclient such accounts seem to always be
 rejected.

 --
 "Brian, the man from babble-on"  [EMAIL PROTECTED]
 Brian T. Schellenberger  http://www.babbleon.org
 Support http://www.eff.org.  Support decss defendents.
 Support http://www.programming-freedom.org.  Boycott amazon.com.

--
"Brian, the man from babble-on"  [EMAIL PROTECTED]
Brian T. Schellenberger  http://www.babbleon.org
Support http://www.eff.org.  Support decss defendents.
Support http://www.programming-freedom.org.  Boycott amazon.com.




Re: [expert] empty smb passwords?

2000-04-30 Thread Brian T. Schellenberger

Bill Shirley wrote:
 
 Are you running the smbclient command from root or schellenberger?
 
 From any account try: smbclient //elmo/apps -U schellenberger -N
 
 Of course use a valid //server/share.
 
 A null password account from my smbpasswd files looks like:
 
 michael:506:AAD3B435B51404EEAAD3B435B51404EE:31D6CFE0D16AE931B73C59D7E0C089C
 0:[U  ]:LCT-38EA8C42:

Ok, I'm nulling the pasword like this (just hitting return for the
passwords here):

[bts@i7500 ~]# smbpasswd schellenberger
New SMB password:
Retype new SMB password:
Password changed for user schellenberger.

Which produces an entry like this:
schellenberger:503:AAD3B435B51404EEAAD3B435B51404EE:31D6CFE0D16AE931B73C59D7E0C089C0:[U
 
]:LCT-390D0C41:The Family Samba Account

This is hashing just like yours is above, which seems hopeful.

But it fails like this:

[bts@i7500 ~]# smbclient //i7500/xfer -U schellenberger -N
added interface ip=192.168.147.4 bcast=192.168.147.255
nmask=255.255.255.0
added interface ip=192.168.242.2 bcast=192.168.242.255
nmask=255.255.255.0
Got a positive name query response from 192.168.242.2,( 192.168.242.2 )
session setup failed: ERRSRV - ERRbadpw (Bad password - name/password
pair in a Tree Connect or Session Setup are invalid.)
[bts@i7500 ~]# 

The Windows machine doesn't have a password on that account, and the
"xfer" share is a wide-open "temp space" share that has universal
privileges:

[bts@i7500 ~]# ls -ld /usr/local/xfer
drwxrwxrwx   2 root root 1024 Apr 28 11:51 /usr/local/xfer/

This also fails from the Windows machine so I don't think the problem is
on the smbclient side . . .

Anybody here have a clue why this fails?


 
 and works.
 
 The NO PASSWORDXX only works with the old smbpasswd file entry type.
 Try:
 
 michael:505:NO
 PASSWORDX::Michael:/home
 /michael:/bin/bash
 
 Of course, change the account id, and numeric id.  Make SURE there are 32
 positions for the password!
 
 And it won't work from Windows if the smb account is null password but the
 Windows account has a password.
 
 Hope this helps,
 
 Bill
 
 -Original Message-
 From: [EMAIL PROTECTED]
 [mailto:[EMAIL PROTECTED]]On Behalf Of Brian T.
 Schellenberger
 Sent: Saturday, April 29, 2000 2:17 AM
 To: [EMAIL PROTECTED]
 Subject: Re: [expert] empty smb passwords?
 
 Bill Shirley wrote:
 
  Yes.
 
 Yes, I have that, I've tried both hand-editing the /etc/smbpasswd file
 to have the strange
 "NO PASSWORDXXX" form, and using "smbpasswd schellenberger" (as
 root) and just hitting enter for the password.  Either way, it fails to
 authenticate.
 
 But if I set the password to, say "s" (the single letter) and I use
 that, then it works fine.
 
 What am I missing here?
 
 
  Do you have these set in your global section?
 
null passwords = yes
  # You may wish to use password encryption. Please read
  # ENCRYPTION.txt, Win95.txt and WinNT.txt in the Samba documentation.
  # Do not enable this option unless you have read those documents
encrypt passwords = yes
smb passwd file = /etc/smbpasswd
 
  With smbclient use:
 
  smbclient //elmo/apps -U xx -N
  where xx is the username.
  Just type smbclient for it's syntax.
 
  Bill
 
  -Original Message-
  From: [EMAIL PROTECTED]
  [mailto:[EMAIL PROTECTED]]On Behalf Of Brian T.
  Schellenberger
  Sent: Thursday, April 27, 2000 1:29 AM
  To: [EMAIL PROTECTED]
  Subject: [expert] empty smb passwords?
 
  Has anybody had success getting Samba set up so that (some) ids can get
  in without passwords?
 
  Even when using local smbclient such accounts seem to always be
  rejected.
 
  --
  "Brian, the man from babble-on"  [EMAIL PROTECTED]
  Brian T. Schellenberger  http://www.babbleon.org
  Support http://www.eff.org.  Support decss defendents.
  Support http://www.programming-freedom.org.  Boycott amazon.com.
 
 --
 "Brian, the man from babble-on"  [EMAIL PROTECTED]
 Brian T. Schellenberger  http://www.babbleon.org
 Support http://www.eff.org.  Support decss defendents.
 Support http://www.programming-freedom.org.  Boycott amazon.com.

-- 
"Brian, the man from babble-on"  [EMAIL PROTECTED]
Brian T. Schellenberger  http://www.babbleon.org
Support http://www.eff.org.  Support decss defendents.
Support http://www.programming-freedom.org.  Boycott amazon.com.



Re: [expert] empty smb passwords?

2000-04-29 Thread Brian T. Schellenberger

Bill Shirley wrote:
 
 Yes.

Yes, I have that, I've tried both hand-editing the /etc/smbpasswd file
to have the strange 
"NO PASSWORDXXX" form, and using "smbpasswd schellenberger" (as
root) and just hitting enter for the password.  Either way, it fails to
authenticate.

But if I set the password to, say "s" (the single letter) and I use
that, then it works fine.

What am I missing here?


 
 Do you have these set in your global section?
 
   null passwords = yes
 # You may wish to use password encryption. Please read
 # ENCRYPTION.txt, Win95.txt and WinNT.txt in the Samba documentation.
 # Do not enable this option unless you have read those documents 
   encrypt passwords = yes
   smb passwd file = /etc/smbpasswd
 
 With smbclient use:
 
 smbclient //elmo/apps -U xx -N
 where xx is the username.
 Just type smbclient for it's syntax.
 
 Bill
 
 -Original Message-
 From: [EMAIL PROTECTED]
 [mailto:[EMAIL PROTECTED]]On Behalf Of Brian T.
 Schellenberger
 Sent: Thursday, April 27, 2000 1:29 AM
 To: [EMAIL PROTECTED]
 Subject: [expert] empty smb passwords?
 
 Has anybody had success getting Samba set up so that (some) ids can get
 in without passwords?
 
 Even when using local smbclient such accounts seem to always be
 rejected.
 
 --
 "Brian, the man from babble-on"  [EMAIL PROTECTED]
 Brian T. Schellenberger  http://www.babbleon.org
 Support http://www.eff.org.  Support decss defendents.
 Support http://www.programming-freedom.org.  Boycott amazon.com.

-- 
"Brian, the man from babble-on"  [EMAIL PROTECTED]
Brian T. Schellenberger  http://www.babbleon.org
Support http://www.eff.org.  Support decss defendents.
Support http://www.programming-freedom.org.  Boycott amazon.com.



RE: [expert] empty smb passwords?

2000-04-27 Thread Bill Shirley

Yes.

Do you have these set in your global section?

  null passwords = yes
# You may wish to use password encryption. Please read
# ENCRYPTION.txt, Win95.txt and WinNT.txt in the Samba documentation.
# Do not enable this option unless you have read those documents
  encrypt passwords = yes
  smb passwd file = /etc/smbpasswd

With smbclient use:

smbclient //elmo/apps -U xx -N
where xx is the username.
Just type smbclient for it's syntax.

Bill

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]]On Behalf Of Brian T.
Schellenberger
Sent: Thursday, April 27, 2000 1:29 AM
To: [EMAIL PROTECTED]
Subject: [expert] empty smb passwords?



Has anybody had success getting Samba set up so that (some) ids can get
in without passwords?

Even when using local smbclient such accounts seem to always be
rejected.

--
"Brian, the man from babble-on"  [EMAIL PROTECTED]
Brian T. Schellenberger  http://www.babbleon.org
Support http://www.eff.org.  Support decss defendents.
Support http://www.programming-freedom.org.  Boycott amazon.com.




RE: [expert] empty smb passwords?

2000-04-27 Thread Yacketta,Ronald J

I have a question regarding samba

I have a PDC I would like to use to do user/passowrd valaidation to
I have the following in my smb.conf that does not work
security = SERVER
password server = CNGDOM01
name resolve order = wins lmhosts bcast hosts

if I change the password server to its known ip (found with nmblookup -M
CNGDOM01)
it works. why does samba not nmblookup on the name given in the smb.conf?
I should not have to use the ip...

any ideas?

Ron


-Original Message-
From: Bill Shirley [mailto:[EMAIL PROTECTED]]
Sent: Thursday, April 27, 2000 6:12 AM
To: [EMAIL PROTECTED]
Subject: RE: [expert] empty smb passwords?


Yes.

Do you have these set in your global section?

  null passwords = yes
# You may wish to use password encryption. Please read
# ENCRYPTION.txt, Win95.txt and WinNT.txt in the Samba documentation.
# Do not enable this option unless you have read those documents
  encrypt passwords = yes
  smb passwd file = /etc/smbpasswd

With smbclient use:

smbclient //elmo/apps -U xx -N
where xx is the username.
Just type smbclient for it's syntax.

Bill

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]]On Behalf Of Brian T.
Schellenberger
Sent: Thursday, April 27, 2000 1:29 AM
To: [EMAIL PROTECTED]
Subject: [expert] empty smb passwords?



Has anybody had success getting Samba set up so that (some) ids can get
in without passwords?

Even when using local smbclient such accounts seem to always be
rejected.

--
"Brian, the man from babble-on"  [EMAIL PROTECTED]
Brian T. Schellenberger  http://www.babbleon.org
Support http://www.eff.org.  Support decss defendents.
Support http://www.programming-freedom.org.  Boycott amazon.com.