asked on

Access windows 2003 share from Solaris with samba

Hi solaris gurus.
I'm having trouble trying to access a windows 2003 share from my Solaris Box. I can access another windows XP, but I don't know why I can't access the win 2003 machine.
Here's an example of what I'm doing:
danno is the XP box and trucu is the win 2003.

I am getting NT_STATUS_ACCESS_DENIED with the windows 2003.

Lower you will find me smb.conf I've tried with security user, share and (domain with encrypted passwords)

# smbclient //danno/d -U administrator
added interface ip=10.0.0.71 bcast=10.0.0.255 nmask=255.255.255.0
Password:
Domain=[TRULALA] OS=[Windows 5.1] Server=[Windows 2000 LAN Manager]
smb: \> exit
# smbclient //trucu/htdocs -U administrator
added interface ip=10.0.0.71 bcast=10.0.0.255 nmask=255.255.255.0
Password:
Domain=[TRULALA] OS=[Windows Server 2003 3790] Server=[Windows Server 2003 5.2]
tree connect failed: NT_STATUS_ACCESS_DENIED
#

# cat smb.conf
# Samba config file created using SWAT
# from danno.trulala.w3.com.ar (10.0.0.25)
# Date: 2004/03/19 10:19:21
# Global parameters
[global]
workgroup = TRULALA
netbios name = W3SUN
security = SHARE
[homes]
valid users = %S
read only = No
[share]
path = /tmp
read only = No
guest ok = Yes

If some helps me out with this I'll give him/her extra points.
I have searched google, read a lot of samba how2s but I can't manage to do this.

pepitoH

ASKER

I enable the guest account and I can access the win 2003 share.
But how can I access it without enabling the guest account.

pepitoH

ASKER

I've also tried modifying the registry with:

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\lanmanworkstation\parameters\enableplaintextpassword value= 0x00000001

And still nothing.

I'm getting very irritated with this.
For now I'm using the guest account to access the shares but I have confidential information that I need to access with a windows account.

Thanks.

ahoffmann

it's a pain that M$ changes the challenge/response with every version.
Best you have a look at the docs supplied by Samba itself, they explain much better how a [BP]DC works than M4 itself ;-)

Probably your Solaris needs to be a member of the domain

ASKER CERTIFIED SOLUTION

Alf666

membership

This solution is only available to members.

To access this solution, you must be a member of Experts Exchange.

Start Free Trial

Gns

The latest Samba (3.xxxx:-) should support this. Have seen at least smbclient access success.

-- Glenn

pepitoH

ASKER

Alf666 you are the man!

Thanks a lot.
This stuff gave me a lot of headaches.

You can collect some extra points here:
https://www.experts-exchange.com/questions/20937850/Access-windows-2003-share-from-Samba.html

pepitoH

ASKER

Hey.. Alf666
after I edited in regedit that key, I can't manage to logon my PDC with remote desktop.

Do you know what could do this?
Do I have to edit any other registry key?
Does enablesecuritysignature have to be the same as requiresecuritysignature.?

Thanks.

Alf666

Which one is your PDC ?

Is the one you changed the registry key on the remote desktop client or the server ?

pepitoH

ASKER

I fixed restarting the machine.

I think that the commands:
net stop srv
net start srv
.. didn't work quite well.

I also read here: https://www.experts-exchange.com/questions/20753133/Mounting-Windows-2003-network-share-on-Linux-Box-using-SAMBA.html
that windows 2003 after 4-8 hours changes the registry value again to 1. And you can solve that issue with this link. May be helpful for somene else.

pepitoH

ASKER

Sorry Alf666...
but I think this registry change affected my IIS directory security.

I'll explain: I have some virtual directories in IIS that have Authentication Methods / Integrated Windows authenticaction. And I can't access these directories with the registry hack.

Do you know if there's a solution for this problem.
Thanks again.