На главную | Поиск
Вы находитесь в Хранилище файлов Белорусской цифровой библиотеки
Samba Web page
Самба 2.0: опция 'unix password sync'
From: "Eugene V. Demidov"
Опция 'unix password sync' была введена специально для
возможности плавного перехода на криптованную передачу
паролей без того, чобы заставлять каждого юзера, имеющего
accont на unix-тачке еще раз вводить свой пароль в smbpasswd.
Работает эта опция при отключенном 'encrypt passwords',
и Самба, после проверки на корректность пароля пользователя
по /etc/passwd (/etc/master.passwd) сама генерит smbpasswd.
Так что спустя разумное время, за который каждый хотя бы раз
залогинился, можно безболезненно включать 'encrypt passwords',
не подводя юзеров (коих может быть сотни) поочередно к консоли.
"Синхронизация" же путем "перетаскивания" паролей из /etc/passwd
(/etc/master.passwd) в smbpasswd, как уже говорил Andrey Zakharchenko,
требует изрядного машинного времени... :)
Samba and WinNT
All versions of Windows NT prior to 4.0 Service Pack 3 could negotiate
plain text (clear text) passwords. Windows NT 4.0 Service Pack 3 changed
this default behaviour so it now will only handle encrypted passwords.
The following registry entry change will re-enable clear text password
handling:
Run regedt32.exe and locate the hive key entry:
HKEY_LOCAL_MACHINE\system\CurrentControlSet\Services\Rdr\Parameters\
Add the following value:
EnablePlainTextPassword:REG_DWORD=1
При этом все равно на Linux придется проводить дополнительную
перерегистрацию пользователей - не только командой passwd, но и smbpasswd -
генерящую самбовские пароли.
у Самбы с настройками по умолчанию скрость записи была в 3 раза
больше чем чтения: Лечим: socket options = IPTOS_LOWDELAY TCP_NODELAY
Параметр logon path ИЗ smb.conf
Linux samba for WinNT
When Samba is configured with the 'security = server' option and the
'password server = Your_Windows_NT_Server_Name' option, then it will
redirect all access authentication to that server. This way you can
use Windows NT to act as your password server with full support for
Microsoft encrypted passwords.
Note also, that since release of samba-1.9.18 we now support native encrypted
passwords too. To enable encrypted password handling several things need to be
done:
1) In smb.conf [globals]:
encrypt passwords = yes
smbpasswd file = /path/smbpasswd
the standard path is /usr/local/samba/private/smbpasswd but this may be
platform specific.
2) Use "smbpasswd -a" to add all users to the smbpasswd file.
Original of this documernt
#lake.canberra.edu.au/pub/samba/
All samba servers have security hole. Fixed version is avalable since 27.9.97
ftp://samba.anu.edu.au/pub/samba/samba-1.9.17p2.tar.gz
Welcome to the SAMBA Web Pages. If you are wondering what Samba is, check
out the FAQ answer to What is Samba?
Please feel free to drop me a line if there is something you would like to see included.
Check out the now with 1350+ entries!
And people thought it didn't exist
At last check, the latest version (besides the alphas) was 1.9.16p11.
Check the change log if you want to be sure.
Documentation
|
SAMBA Man Pages 1.9.16p10 Hypertext conversion by
rman.pl and
RosettaMan
|
|
|
|
Digest Archive |
Newsgroup |
|
You can find a lot of discussion on SAMBA in the
newsgroup comp.protocols.smb.
|
Sources
For information on where to find SAMBA, see the Where can I get it? section of the FAQ, or just grab the latest release via FTP:samba-latest.tar.gz or WWW:samba-latest.tar.gz (at last check, version 1.9.16p11. See the change log to be sure - Note: the WWW copy may not be as up to date as the FTP copy).
Mirror Sites
Source Only |
Source & Binaries |
|
|
There are more sites than those listed here, check Archie. If you have a site to add, let me know.
|
SMB/CIFS Clients
Dave (Macintosh) SCO (VisionFS) QNX (Samba Server/Client)
Microsoft
Microsoft's various clients, including WFWG3.11, LanMan, MSClient 3.0 for
DOS, can be found at ftp://ftp.microsoft.com/bussys/Clients/.
Check the ReadMe file for details at ftp://ftp.microsoft.com/bussys/Clients/README.NOW.
Please Note, WinNT and Win95 don't need any extra client software in order to run Samba. These OS's come standard with TCP/IP which is all you need.
Security
Users of Windows 95 and WFWG should also check out the Security Patches
|
Search Index
|
|
SAMBA Web Pages maintained by
Paul Blackman, ictinus@lake.canberra.edu.au
SAMBA created by Andrew Tridgell, samba-bugs@anu.edu.au
Microsoft, MS, and Windows are either registered trademarks or trademarks of Microsoft Corporation. Microsoft Corporation in
no way endorses or is affiliated with the SAMBA Web Pages. All other trademarks are the sole property of their respective owners.