Allow anonymous access to SAMBA

[withanhdammit]

I followed the HowTo located at http://www.howtoforge.com/debian-len...tdbsam-backend.

I am using a DOS boot disk loaded over PXE to boot a system, connect to a share, launch GHOST and unpack the GHOST file.

But my DOS machine isn't connecting to the SAMBA share, it tells me Error 5: Access has been denied.

My smb.conf contains:

[global]
        workgroup = PMI
        server string = %h server
        obey pam restrictions = no
        passdb backend = tdbsam
        pam password change = Yes
        passwd program = /usr/bin/passwd %u
        passwd chat = *Enter\snew\s*\spassword:* %n\n *Retype\snew\s*\spassword$
        unix password sync = Yes
        syslog = 0
        security = group
        log file = /var/log/samba/log.%m
        max log size = 1000
        dns proxy = No
        wins server = 10.0.0.1
        wins server = 10.0.0.2
        panic action = /usr/share/samba/panic-action %d
        encrypt passwords = no

[ghostshare]
        comment = Ghost share
        path = /usr/share/ghostshare
        valid users = ghost
        force group = users
        create mask = 0555
        directory mask = 0555
        writeable = yes

I've been googling this for a couple of days and can't seem to hit on what the issue is.

Thanks to everyone for taking a look at my problem and for any potential suggestions.

h

[withanhdammit]

The /var/log/samba/log.ghost shows this:

[2010/11/01 14:49:18,  0] auth/pampass.c:smb_pam_passcheck(820)
  smb_pam_passcheck: PAM: smb_pam_auth failed - Rejecting User ghost !
[2010/11/01 14:49:22,  0] auth/pampass.c:smb_pam_passcheck(820)
  smb_pam_passcheck: PAM: smb_pam_auth failed - Rejecting User ghost !
[2010/11/01 14:49:24,  0] auth/pampass.c:smb_pam_passcheck(820)
  smb_pam_passcheck: PAM: smb_pam_auth failed - Rejecting User ghost !

ghost is a valid user on my system

vanc-pxe01:/var/log/samba# cat /etc/passwd | grep ghost
ghost:x:1001:1002::/home/ghost:/bin/sh

[withanhdammit]

And does belong to the group 'users'

vanc-pxe01:/var/log/samba# groups ghost
ghost users

[falko]

Originally Posted by withanhdammit

I am using a DOS boot disk loaded over PXE to boot a system, connect to a share, launch GHOST and unpack the GHOST file.

Does the DOS disk try to connect to the SAMBA server anonymously, or did you configure a username/password somewhere?

[withanhdammit]

Originally Posted by falko

Does the DOS disk try to connect to the SAMBA server anonymously, or did you configure a username/password somewhere?

It has a username/password included. I am using the DOS Network Boot disk from netbootdisk.com.

[falko]

Does the username/password work if you try to connect from another Samba client?

[withanhdammit]

I was finally able to get it to connect via the DOS disk by forcing the user/group. New smb.conf below (red is what I deleted, green is what I added (or changed a value to)

If there's a better way to do this, please let me know.

h

[global]
        workgroup = PMI
        server string = %h server
        obey pam restrictions = no yes
        passdb backend = tdbsam
        pam password change = Yes
        passwd program = /usr/bin/passwd %u
        passwd chat = *Enter\snew\s*\spassword:* %n\n *Retype\snew\s*\spassword$
        unix password sync = Yes
        syslog = 0
        security = group share
        log file = /var/log/samba/log.%m
        max log size = 1000
        dns proxy = No
        wins server = 10.0.0.1
        wins server = 10.0.0.2
        panic action = /usr/share/samba/panic-action %d
        encrypt passwords = no

[ghostshare]
        comment = Ghost share
        path = /usr/share/ghostshare
        valid users = ghost
        force user = ghost
        force group = users
        create mask = 0555 0777
        directory mask = 0555 0777
        writeable = yes
        guest ok = yes
        read only = no