[ILUG] Network/IP Problem

[John Kelly]

On Thu, 23 Mar 2000, Kenn Humborg wrote:

> > I've gone through the trouble shooting section of O' Reilly's 
> > Samba book and 
> > the linux side checks out. However when I go to map a dirve in NT 
> > I am told 
> > that "The account is not authorized to login from this station". 
> > How can I 
> > resolve this problem.
> 
> If you have setup Samba with "security = server", then logon 
> requests from client machines (which happens the first
> time you try to map a drive or browse down via network
> neighbourhood) will be forwarded to your NT domain
> controllers.  To the domain controllers, the log-on 
> request looks like it's coming from the Samba server,
> not your client machine.
> 
> It's possible in the NT user manager to limit the workstations
> that a user is allowed to log into.  If that's set up for
> you, and the Samba server isn't listed, then it's going to
> get tricky.
> 
> Best solution one is to add your Samba server to the NT
> domain (if your domain admins let you).  Connections to
> Samba work faster this way as well.
> 
> The alternative is to try using security=user.  You'll then
> have to make sure that the passwords in smbpasswd are kept
> up to date.

If none of these suggestions work, one thing that has worked for me when I
get this error message is to make sure that the samba server is expecting
encrypted passwords.  (I can't remember specifics, but I think win98 and
NT SP3(?) send encrypted passwords by default, and the samba server needs
to be set up for this (encrypt passwords = yes).
Alternatively, (and less securely), you could tell these machines to send
plain-text passwords by default, by changing a value in the registry, or
downloading the relevant .reg files from
ftp.eunet.ie/mirrors/ftp.samba.com in the docs dir.  Like I said, it's
less secure, but can sometimes be easier to handle if your network is
made up of various versions of windows.

- John