[mdk-re] samba authorization - HELP plz ;-(

["Peter V. Saveliev" <peet@infosite.ru>]

[-- Warning: decoded text below may be mangled, UTF-8 assumed --]
[-- Attachment #1: Type: text/plain, Size: 2555 bytes --]

Hello all.
ôÒÅÔØÉ ÓÕÔËÉ ÐÙÔÁÀÓØ ÚÁÓÔÁ×ÉÔØ ÓÁÍÂÕ ÒÁÂÏÔÁÔØ, Á ÏÎÁ ËÁË ÉÚÄÅ×ÁÅÔÓÑ.
åÓÔØ:

 ÍÁÛÉÎÁ - Mdk Spring, + samba 2.2.1a Ó ÓÁÊÔÁ ÓÁÍÂÙ (ËÁÞÁÌ,
   ËÏÇÄÁ ÅÝÅ × ÓÉÚÉÆÅ ÎÅ ÂÙÌÏ), ÓÏÂÒÁÎÁ × rpm Ó ÐÏÍÏÝØÀ ÎÁÔÉ×ÎÏÇÏ
   spec, Ó ÐÏÄÄÅÒÖËÏÊ pam + vmware ÄÒÅ×ÎÅÊ ×ÅÒÓÉÉ, ÎÏ ÒÁÂÏÔÁÅÔ -
   ËÁË ÞÁÓÙ, É ×ÉÎ98 ÎÁ ÎÅÊ.

 ÍÁÛÉÎÁ - ×ÉÒÔÕÁÌØÎÁÑ, ×ÉÎ98 ÎÁ ×ÁÒÉ (ÓÍ. ×ÙÛÅ).

ëÏÎÆÉÇÕÒÁÃÉÑ ×ÉÒÔÕÁÌØÎÏÊ ÓÅÔÉ ÎÅ ÓÔÏÌØ ÉÎÔÅÒÅÓÎÁ, Ô.Ë. ÒÁÂÏÔÁÅÔ,
ÎÏ ×ÏÔ ÏÔÒÙ×ËÉ:

×ÓÅ policies - ACCEPT, Õ ÍÅÎÑ ÎÅÔ ×ÙÈÏÄÁ × ÒÅÁÌØÎÕÀ ÓÅÔØ.
vmnet1 - 192.168.1.1/24, ×ÉÎÄÙ - 192.168.1.2/24, ÐÒÉÞÅÍ ×ÓÅ ÜÔÉ
ÎÁÓÔÒÏÊËÉ ÌÅÇËÏ ÍÅÎÑÀÔÓÑ ÂÅÚ ÕÝÅÒÂÁ ÄÌÑ ÒÁÂÏÔÙ, Ñ ÉÍÅÀ × ×ÉÄÕ
ÁÄÒÅÓÁ.

smbd, nmbd ÚÁÐÕÓËÁÀÔÓÑ, ÒÁÂÏÔÁÀÔ, ÓÁÍÂÁ ÎÁÓÔÒÏÅÎÁ ÐÏÄ PDC6
ÏÔÓÔÁ×ÉÔØ, PDC:

security = user
os level = 255
preferred master = yes
local master = yes
domain master = yes
lanman auth = yes

ðÒÏÛÕ ÏÂÒÁÔÉÔØ ×ÎÉÍÁÎÉÅ ÎÁ ÐÏÓÌÅÄÎÀÀ ÓÔÒÏÞËÕ, Ï ÜÔÏÍ ÒÅÞØ ÐÏÚÖÅ.
éÔÁË, ÐÒÏ×ÅÒËÁ: ÎÁ ÌÉÎÕÈÏ×ÏÊ ÍÁÛÉÎÅ
$ smbclient -L hamster -U peet
ÐÏËÁÚÙ×ÁÅÔ ÏÔÛÁÒÅÎÎÙÅ public É ÈÏÍÕ - peet (hamster - ÌÉÎÕÈÏ×ÁÑ
ÍÁÛÉÎÁ). îÁ ×ÉÎÄÁÈ (ÍÁÛÉÎÁ billy, ÒÁÂÏÞÁÑ ÇÒÕÐÐÁ willy) - 
"ÎÅ×ÅÒÎÙÊ ÐÁÒÏÌØ ÄÌÑ ÐÏÄËÌÀÞÅÎÉÑ Ë $IPC". ÷ ÌÏÇÁÈ - authentification
failed for user "peet". á ÐÅÒÅÄ ÜÔÉÍ - defaulting auth to lanman.
ïÔËÌÀÞÁÀ ÎÁÈÒÅÎ lanman auth - ÷óå ÐÅÒÅÓÔÁÅÔ ÒÁÂÏÔÁÔØ. ÷ÓÅ ÏÂÒÁÔÎÏ.

äÁÌÅÅ - domain logons = yes, logon drive =, logon home =, logon path =.
÷ ×ÉÎÄÁÈ ÄÅÌÁÀ "×ÈÏÄÉÔØ × ÄÏÍÅÎ NT". äÏÍÅÎ, ÑÓÅÎ ÐÅÒÅÃ, willy.
ðÅÒÅÚÁÇÒÕÚËÁ - "ÐÏÌØÚÏ×ÁÔÅÌØ/ÐÁÒÏÌØ ÎÅ ÏÐÏÚÎÁÎÙ ÎÉ ÏÄÎÉÍ ÉÚ ÓÅÒ×ÅÒÏ×
ÄÏÍÅÎÁ". ÷ ÌÏÇÁÈ - auth. failed for user "peet". ÷ÏÔ ÓÒÁÎØ. é ÜÔÏ
ÐÒÉ ÔÏÍ, ÞÔÏ ×ÙÛÅÐÒÉ×ÅÄÅÎÎÁÑ ÏÛÉÂËÁ ×ÉÎÄÏ× ÍÎÅ ÐÏËÁÚÙ×ÁÌÁÓØ ÌÉÛØ
ËÏÇÄÁ _×ÓÅ_ÓÅÒ×ÅÒÁ_ÄÏÍÅÎÁ_ ÂÙÌÉ ÎÅÄÏÓÔÕÐÎÙ (× ÒÅÁÌØÎÏÊ ÓÉÔÕÁÃÉÉ).
á ÔÁË - "ÎÅ×ÅÒÎÏÅ ÉÍÑ/ÐÁÒÏÌØ", ×ÏÔ ÞÔÏ ÄÏÌÖÎÏ ×Ù×ÁÌÉ×ÁÔØÓÑ ÎÁ auth
failed!

äÁÌÅÅ. $ testparm billy 192.168.1.2 == $ testparm hamster 192.168.1.1
ôÏ ÅÓÔØ, × ËÏÎÆÉÇÅ ×ÓÅ × ÐÏÒÑÄËÅ? á ÇÄÅ ÇÒÁÂÌÉ? åÝÅ ÈÕÖÅ. äÅÌÁÀ
security = share, É ÐÏÌÕÞÁÀ × ×ÉÎÄÁÈ ÏÔÛÁÒÅÎÎÙÅ ÒÅÓÕÒÓÙ! ïÎ ÉÈ ×ÉÄÉÔ!
á ÄÏÓÔÕÐÁÔØÓÑ ÎÅ ÈÏÞÅÔ. "îÅ×ÅÒÎÙÊ ÐÁÒÏÌØ ÄÌÑ ÄÏÓÔÕÐÁ Ë public". á
ËÁË ÔÁËÏÅ ÍÏÖÅÔ ÂÙÔØ, ÏÎ Õ ÍÅÎÑ ÎÁÍÅÒÔ×Ï Ó ÐÏÌÎÙÍ ÄÏÓÔÕÐÏÍ ÏÔÛÁÒÅÎ?!

$ smbpasswd -a peet. ðÁÒÏÌØ - odin. ðÁÒÏÌØ ÎÁ ×ÈÏÄ × ÌÉÎÕÈ - dva.
ðÒÅÄÐÏÌÏÖÉÍ. ôÅÐÅÒØ: $ smbclient -L hamster -U peet - ÒÅÁÇÉÒÕÅÔ
ÎÁ ÐÁÒÏÌØ dva. îÅ ÎÁ odin! ÷ smb.conf: smbpasswd path = ÒÅÁÌØÎÙÊ ÐÕÔØ.
äÏÓÔÕÐ Ë smbpasswd ÏÓÕÝÅÓÔ×ÌÅÎ. á ÏÎ ÎÁ ÎÅÇÏ ÐÌÀÅÔ. PAM, ÑÓÅÎ ÐÅÒÅÃ.
ôÁË ËÁËÏÇÏ ÌÅÛÅÇÏ ÏÎ ×ÉÎÄÙ ÎÉ ÎÁ ÏÄÉÎ ÉÚ ÐÁÒÏÌÅÊ ÎÅ ÐÕÓËÁÅÔ? é ÐÏÞÅÍÕ
swat ÐÅÒÅÓÔÁÅÔ ÒÁÂÏÔÁÔØ, ÅÓÌÉ ÓËÏÍÐÉÌÉÔØ ÓÁÍÂÕ ÂÅÚ PAM?

÷ ÏÂÝÅÍ, ÈÅÌÐ. ðÏÇÉÂÁÀ, ÅÝÅ ÈÕÖÅ - ÉÄÉÏÔÏÍ ÐÏÍÒÕ ;-(
ðÅÔÒ.