sambahelper credentials 10.04 [solved]

[jamo]

Related to my post here:

http://forum.linuxmce.org/index.php/topic,12721.msg91271.html#msg91271

I haven't fiddled with Samba previously because I don't have windows machines on my network officially.... but now I'm having to understand it because it may be at the bottom of my media drive being marked offline (see above post).

My question is-

The credentials that can be found in the file:

/usr/pluto/var/sambaCredentials.secret

Which appear to be used to mount smb shares across the various MDs and the core, in my system, appear to differ at least between the core and one of my MDs. Is this normal? Is the password randomly generated at install time and differs for each MD or should these all be the same password?

I'm just wondering if the differences mean I have a problem with my installation or if they're to be expected.

[cfernandes]

on my is different to  from windows  a can access  my core  , but  when try to access  a disk installed on a MD  ask  for password  .

[jamo]

Woohoo.... seem to have solved my samba problem. Will update wiki(s) as well in a moment.

A few tips....

1. I'm assuming that sambacredentials -
/usr/pluto/var/sambaCredentials.secret
should be the same across all MDs. I have made sure mine are and so far so good.

2. The SAMBA (SMBD) that is installed and setup on 10.04 appears to not use /etc/samba/smbpasswd file for its users and passwords despite the fact that this file is created. It appears to use a newer authentication scheme. To add/remove/delete/list SAMBA users you need to use the pdbedit command.

Code:

dcerouter#> sudo pdbedit -L -v
lists all samba users

dcerouter#> sudo pdbedit -a -u sambahelper
Enter password:

Allows you to set the password for sambahelper.

I did this on dcerouter and set it to the password listed in the credentials file(s) for sambahelper and since my video list is now showing despite reboots and restarts of all mds, I presume the statusradar script (see related post) is now able to query the samba shares. Yay.

Edit: Stupid idiot, sorry guys-> not "pbedit", "pdbedit'. Thanks for picking that up, bushtech.

[cfernandes]

not work for me ,

i can see disk on MD on network ,  but  from windows  i do  \\dcerouter\public\videos\IC35L180AVV207-1 (sda1) o [121]

i can see all videos , if i try do copy more videos to disk share  a receive a message

you need permission to execute this action.

on MD i do a  pdbedit -L -v  and only list  no list my users

Unix username:        nobody
NT username:
Account Flags:        [U          ]
User SID:             S-1-5-21-4187324362-3718267127-856834158-501
Primary Group SID:    S-1-5-21-4187324362-3718267127-856834158-513
Full Name:            nobody
Home Directory:
HomeDir Drive:        (null)
Logon Script:
Profile Path:
Domain:               MOON105
Account desc:
Workstations:
Munged dial:
Logon time:           0
Logoff time:          never
Kickoff time:         never
Password last set:    0
Password can change:  0
Password must change: 0
Last bad password   : 0
Bad password count  : 0
Logon hours         : FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF
---------------
Unix username:        sambahelper
NT username:
Account Flags:        [U          ]
User SID:             S-1-5-21-4187324362-3718267127-856834158-1000
Primary Group SID:    S-1-5-21-4187324362-3718267127-856834158-513
Full Name:            Pluto Samba Share Helper
Home Directory:       \\moon105\sambahelper
HomeDir Drive:
Logon Script:
Profile Path:         \\moon105\sambahelper\profile
Domain:               MOON105
Account desc:
Workstations:
Munged dial:
Logon time:           0
Logoff time:          never
Kickoff time:         never
Password last set:    Sat, 11 Aug 2012 11:44:05 BRT
Password can change:  Sat, 11 Aug 2012 11:44:05 BRT
Password must change: never
Last bad password   : 0
Bad password count  : 0
Logon hours         : FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF


on core i see

---------------
Unix username:        pluto_carlos
NT username:
Account Flags:        [U          ]
User SID:             S-1-5-21-3906938493-2100208557-1116698980-21000
Primary Group SID:    S-1-5-21-3906938493-2100208557-1116698980-513
Full Name:
Home Directory:       \\dcerouter\pluto_carlos
HomeDir Drive:
Logon Script:
Profile Path:         \\dcerouter\pluto_carlos\profile
Domain:               DCEROUTER
Account desc:
Workstations:
Munged dial:
Logon time:           0
Logoff time:          never
Kickoff time:         never
Password last set:    Wed, 31 Dec 1969 21:00:01 BRT
Password can change:  Wed, 31 Dec 1969 21:00:01 BRT
Password must change: never
Last bad password   : 0
Bad password count  : 0
Logon hours         : FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF
---------------
Unix username:        pluto_vera
NT username:
Account Flags:        [U          ]
User SID:             S-1-5-21-3906938493-2100208557-1116698980-21002
Primary Group SID:    S-1-5-21-3906938493-2100208557-1116698980-513
Full Name:
Home Directory:       \\dcerouter\pluto_vera
HomeDir Drive:
Logon Script:
Profile Path:         \\dcerouter\pluto_vera\profile
Domain:               DCEROUTER
Account desc:
Workstations:
Munged dial:
Logon time:           0
Logoff time:          never
Kickoff time:         never
Password last set:    Wed, 31 Dec 1969 21:00:01 BRT
Password can change:  Wed, 31 Dec 1969 21:00:01 BRT
Password must change: never
Last bad password   : 0
Bad password count  : 0
Logon hours         : FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF
---------------
Unix username:        pluto_marcela
NT username:
Account Flags:        [U          ]
User SID:             S-1-5-21-3906938493-2100208557-1116698980-21004
Primary Group SID:    S-1-5-21-3906938493-2100208557-1116698980-513
Full Name:
Home Directory:       \\dcerouter\pluto_marcela
HomeDir Drive:
Logon Script:
Profile Path:         \\dcerouter\pluto_marcela\profile
Domain:               DCEROUTER
Account desc:
Workstations:
Munged dial:
Logon time:           0
Logoff time:          never
Kickoff time:         never
Password last set:    Wed, 31 Dec 1969 21:00:01 BRT
Password can change:  Wed, 31 Dec 1969 21:00:01 BRT
Password must change: never
Last bad password   : 0
Bad password count  : 0
Logon hours         : FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF
---------------
Unix username:        pluto_vinicius
NT username:
Account Flags:        [U          ]
User SID:             S-1-5-21-3906938493-2100208557-1116698980-21006
Primary Group SID:    S-1-5-21-3906938493-2100208557-1116698980-513
Full Name:
Home Directory:       \\dcerouter\pluto_vinicius
HomeDir Drive:
Logon Script:
Profile Path:         \\dcerouter\pluto_vinicius\profile
Domain:               DCEROUTER
Account desc:
Workstations:
Munged dial:
Logon time:           0
Logoff time:          never
Kickoff time:         never
Password last set:    Wed, 31 Dec 1969 21:00:01 BRT
Password can change:  Wed, 31 Dec 1969 21:00:01 BRT
Password must change: never
Last bad password   : 0
Bad password count  : 0
Logon hours         : FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF
getsampwsid failed

[Armor Gnome]

build_sam_account: smbpasswd database is corrupt!  username sambahelper with uid 10002 is not in unix passwd database!
Failed to add entry for user sambahelper.

This is the response I get when attempting the command mentioned above.

Code:

dcerouter_1030591:~# pdbedit -a -u sambahelper

Willing to post any logs or command pastebin information after I complete my update upgrades on all my machines.

[tschak909]

Basically, don't fuck with any of this, and ssh to the different media directors from the core, i.e.

as root, ssh moon36

This will use the proper NIS credentials to go to the target media director.

-Thom

[JaseP]

Actually, that made me think about my thing with the terminal, ... thanks... food for thought, ...

[Armor Gnome]

Basically, don't fuck with any of this, and ssh to the different media directors from the core, i.e.

as root, ssh moon36

This will use the proper NIS credentials to go to the target media director.

-Thom

I apologize, I followed related links to this thread as I am trying to troubleshoot the offline drive issue of media not displaying.  I see now that this topic is semi-related as the discussion about offline drives turned to samba credentials.