[svlug] Samba question

[Richard Sharpe]

On Mon, 3 Jun 2002, Rafael Skodlar wrote:

> You are giving Samba pretty low OS level of 2. That puts Samba bellow low
> life windoze (Win95, Win98). I have it set at 31 or so at work which is
> definately above W95 or W98. We only have W2000 lusers so I don't know if
> that setup would work with W95 or such but it's worth a try.

The OS Level is a series of bits. 1 is for Win9X and WfWg. 16 is for 
WinNT/2K Workstation, while 32 is for WinNT/2K server.

These days, the default in Samba is 20, which puts it above Workstations 
of any sort, but below servers. A value of 33 or above ensures that Samba 
will win all elections, as long as things like local master is yes.
 
> I'm not Samba or "poor mind OS" expert to come up with better suggestion
> away from office. I't been a long time since I configured the thing over a
> year ago, it just works. I would also look into log files to possibly get
> a clue about the problem. There is a file for each workstation in log
> directory.

Only as long as you set it up correctly.

> O'Reilly's book on Samba is very good as well as other Samba books to get
> things working. After installing webmin on Linux servers, I found that it
> was easier to get things in order. Even windows admins were able to make
> changes when I was not around from any web browser on the net.

All books have their mistakes. The O'Reilly book has more than its fair 
share.

> Perhaps you need to setup a PDC to create order on the network. All 
> machines will authenticate against PDC for login, printing, and file 
> sharing.
> 
> Windows machines constantly broadcast messages trying to figure out who's
> the master. It's like a bunch of chicken without the rooster.  Here and
> there one lays an infertile egg.
> 
> I had to do some exchange maintenance recently because the other guy who
> takes care of that was on vacation. Exchange is unbelieveable joke. A
> bloody clicking nightmare, try to avoid at all cost.
> 
> On Mon, Jun 03, 2002 at 09:11:18PM -0700, Reginald Charney wrote:
> > I have a mixed network of Win95, Win98, Win2000, and Linux SuSE 7.3
> > machines in a workgroup, CDI-WORKGROUP. The printer is mounted on my VA
> > server and made available to the network using Samba. I can print to the
> > Samba printer from my Win2000 boxes, but not from my Win95 or Win98
> > boxes. When I try to print from either my Win95 or Win98 boxes, it askes
> > for a password. The message is "You must supply a password to make this
> > connection. Resource: \\CDI-VA\VA_LP-RAW". I have no idea what password
> > it needs. I have tried them all.

The password problem can be an issue. It depends on how things are set up. 
But you need to be aware that Windows 9X caches the username and password 
used to log onto the workstation, and then uses these when trying to 
access network resources. If the logon attempt fails, it asks you for the 
correct password, and the username it uses is the one it has cached.

For that reason, you are probably better of to have the Win9X workstations 
log on to the domain. This is not the same as joining the domain. Win9X 
workstations cannot do that. For more details see the FAQs or check out 
Special Edition, Using Samba.

> > smbclient -L CDI-WORKGROUP
> > added interface ip=192.168.1.1 bcast=192.168.1.255 nmask=255.255.255.0
> > Password:
> > Domain=[CDI-WORKGROUP] OS=[Unix] Server=[Samba 2.2.4]
> > 
> >         Sharename      Type      Comment
> >         ---------      ----      -------
> >         IPC$           IPC       IPC Service (Samba 2.2.4)
> >         ADMIN$         Disk      IPC Service (Samba 2.2.4)
> >         abit_lp-ascii  Printer   y2prn_abit_lp.upp--ascii-abit_lp
> >         abit_lp        Printer   y2prn_abit_lp.upp--auto-abit_lp
> >         abit_lp-raw    Printer   y2prn_abit_lp.upp--raw-abit_lp
> >         va_lp-ascii    Printer   y2prn_va_lp.upp--ascii-va_lp
> >         va_lp          Printer   y2prn_va_lp.upp--auto-va_lp
> >         va_lp-raw      Printer   y2prn_va_lp.upp--raw-va_lp
> >         reg            Disk      Home Directories
> > 
> >         Server               Comment
> >         ---------            -------
> >         CDI-ICUE
> >         CDI-VA               Samba 2.2.4
> > 
> >         Workgroup            Master
> >         ---------            -------
> >         CDI-WORKGROUP        CDI-ICUE (this is a Win2000 machine)
> > 
> > 
> > There is one anomoly with this listing: cdi-icue is not supposed to be a
> > master.
 
If the appropriate NetBIOS name is already registered (<WORKGROUP><1B>, I 
think), Samba will not try to become the domain master browser.
 
> > My /etc/samba/lmhosts file is:
> > 
> > 127.0.0.1       localhost
> > 192.168.1.*     cdi-workgroup
> > 
> > My smb.conf file is follows. TIA.
> > 
> > Reg.
> > 
> > 
> 
> > #
> > # /etc/samba/smb.conf ist the main samba configuration file. Cf. the
> > # manual page of smb.conf and the included documantation in
> > # /usr/share/doc/packages/samba in order to understand the options
> > # listed here and many more features.
> > #
> > # Lines in this example which starts with ; and # are ignored comment
> > # ones. # indicates a comment and ; a deactivated example line.
> > #
> > # We suggest to use the command 'testparm' after any changes you made.
> > #
> > # Copyright (c) 1999 - 2001 SuSE GmbH Nuernberg, Germany.
> > #
> > # Please send bugfixes or comments to feedback at suse.de.
> > #
> > [global]
> > 	workgroup = CDI-WORKGROUP
> > 	os level = 2
> > 	kernel oplocks = No
> > 
> > 	security = user
> > 	encrypt passwords = Yes
> > 	guest account = Nobody
> > 	map to guest = Bad User
> > # This tells samba to use the file smbusers for user mapping.
> > ;	username map = /etc/samba/smbusers
> > 
> > # This tells samba to write log files per machine.
> > ;	log file = /var/log/samba/%m
> > # This sets an alternate log level. Default is 2.
> > ;	log level = 3
> > 
> > # Uncomment the following, if you want to use an existing NT-Server to
> > # authenticate users, but don't forget that you also have to create them
> > # locally!
> > ;	security = server
> > ;	password server = 192.168.1.10
> > 
> > 	printing = LPRNG
> > 	printcap name = /etc/printcap
> > 	load printers = Yes
> > 
> > # These settings are a suggestion for a local network. Cf. section
> > # 'socket options' in the man page of smb.conf and socket(7).
> > 	socket options = SO_KEEPALIVE IPTOS_LOWDELAY TCP_NODELAY 
> > 
> > # Uncomment this, if you want to integrate your server
> > # into an existing net e.g. with NT-WS to prevent nettraffic
> > 	local master = No   
> > 
> > # Please uncomment the following entry and replace the ip number and
> > # netmask with the correct numbers for your ethernet interface.
> > 	interfaces = 192.168.1.1/255.255.255.0
> >    
> > # If you want Samba to act as a wins server, please set
> > # 'wins support' to yes.
> > 	wins support = No
> > 
> > # If you want Samba to use an existing wins server, please uncomment the
> > # following line and replace the dummy with the wins server's ip number.
> > ;	wins server = 192.168.1.1
> > 
> > # Do you wan't samba to act as a logon-server for your windows 95/98
> > # clients, so uncomment the following:
> > 	domain logons = Yes
> > 	domain master = Yes
> > # For a specific logon script per user
> > ;	logon script = %U.bat
> > # For a specific logon script per machine
> > ;	logon script = %m.bat
> > 
> > # Where to store the logon scripts.
> > ;[netlogon]
> > ;	comment = Network Logon Service
> > ;	path = /var/lib/samba/netlogon
> > 
> > # Where profiles of Windows 9x systems are stored.
> > # First example for a centralized place.
> > ;	logon home = \\%L\profiles\%U
> > # Second example for a subdirectory of the users home.
> > ;	logon home = \\%L\%U\profile
> > # Where profiles of Windows NT systems are stored.
> > ;	logon path = \\%L\profiles\%U
> > 
> > # Extra share for profiles. Default is the home of the user.
> > ;[profiles]
> > ;	comment = Network Profiles Service
> > ;	path = /var/lib/samba/profiles
> > ;	browseable = No
> > 
> > # Set these two parameters to your DOS code page and appropriate UNIX
> > # character set. These values are for west European languages (Latin-9)
> > # UNIX character and MS-DOS Latin 1 code page.
> > 	character set = ISO8859-15
> > 	client code page = 850
> > 			
> > [homes]
> > 	comment = Home Directories
> > 	read only = No
> > 	create mask = 0640
> > 	directory mask = 0750
> > 	browseable = No
> > 
> > # The following share gives all users access to the Server's CD drive,
> > # assuming it is mounted under /media/cdrom. To enable this share,
> > # please remove the semicolons before the lines
> > ;[cdrom]
> > ;	comment = Linux CD-ROM
> > ;	path = /media/cdrom
> > ;	locking = No
> > 
> > [printers]
> > 	comment = All Printers
> > 	path = /var/tmp
> > 	create mask = 0600
> > 	printable = Yes
> > 	browseable = No

Regards
-----
Richard Sharpe, rsharpe at ns.aus.com, rsharpe at samba.org, 
sharpe at ethereal.com