Linux apps like Quicken are badly needed 3372

Long smb.conf file at end of post.

Configure Samba for annonymous access from Windows machines.

Hey Ryan,

Below is myetc-samba-smb.conf file. I'm going to step you through this. One reason is that I'm not sure how familiar you are with this sort of thing and the other reason is that someone may be Googling looking to do the same thing and the extra details may come in handy. If you could, post back here and let us know how this worked for you and anything you needed to do differently. My setup is working but it may help someone else out. There's probably more than one way of doing this but this is what worked for me. (Note: The name of my Ubunutu server is 'ubu' in case you happen to see it in the file.)

+++++++++++++++++++++++++++++++++++++++++++ Step #1 - Create a "dummy" user account. +++++++++++++++++++++++++++++++++++++++++++

You'll need to create a dummy account. The reason is that you may not want people accessing this via the network to have the same permissions a your normal account. The name that I used for the account is "smbuser" but you can use whatever you like.

Create a user (I named mine smbuser) Select the "Set pbuttword by hand" option and leave it empty. Under the "Advanced" tab set the Main-Group to be "users" - Home directoryhome-smbuser Under the "User privileges" tab I have nothing selected.

Click OK and you're done with step #1.

+++++++++++++++++++++++++++++++++++++++++++ Step #2 - Edit theetc-samba-smb.conf file +++++++++++++++++++++++++++++++++++++++++++

My entire file is below. Search for smbuser to see what needs to be changed. Most of the "interesting" stuff is towards the end of the file. I'll give a quick explanation of what I'm doing.

I have two shares... "Foobar" which is athome-larry-foobar and "Backup" which is used by my domain controller to dump (and receive) backups from. The difference between these is as follows:

The 'comment' field is the comment that shows up when browsing with IE or Konqueror. Backup is set to be non-browseable so that it doesn't visibly show up (It's a hidden share). Anyone can access it perfectly fine but I prefer that users don't go looking in there, not that it's a big deal if they do.

(I use the Backup share to exchange backups twice a week. My domain controller (Bubba) backups it's data to this directory. My Ubuntu server (Ubu) backs up it's data here and the domain controller copies it to it's drive. Each server stores a backup of the other ones data.)

The IP address of my domain controller is 192.168.1.99 and that is the *only* host that is allowed access to the backup share.

For 'FooBar' the hosts allow is set to 192.168.1. which basically allows anyone on the 192.168.1.* subnet to access it.

The last entry in the FooBar share has a list of "valid users" which is commented out. This allows anyone to access this share. If I were to remove the comment then only 'larry' would be allowed access to this share.

+++++++++++++++++++++++++++++++++++++++++++ Step #3 - Other notes. +++++++++++++++++++++++++++++++++++++++++++

Search for the string 'workgroup' and change that to the name of your workgroup. I set mine to 'family' which matches the name of the domain in my house. Most Windows installations have a workgroup name of 'WORKGROUP' or 'MSHOME'

Also take a look at the 'security' settings. You want 'share' level and not user level security. Also make sure the 'guest account' is set to smbuser.

# # Sample configuration file for the Samba suite for Debian GNU-Linux. # # # This is the main Samba configuration file. You should read the # smb.conf(5) manual page in order to understand the options listed # here. Samba has a huge number of configurable options most of which # are not shown in this example # # Any line which starts with a ; (semi-colon) or a # (hash) # is a comment and is ignored. In this example we will use a # # for commentary and a ; for parts of the config file that you # may wish to enable # # NOTE: Whenever you modify this file you should run the command # "testparm" to check that you have not many any basic syntactic # errors. #

#======================= Global Settings =======================

global

## Browsing-Identification ###

# Change this to the workgroup-NT-domain name your Samba server will part of workgroup = family

# server string is the equivalent of the NT Description field server string = Ubuntu

# Windows Internet Name Serving Support Section: # WINS Support - Tells the NMBD component of Samba to enable its WINS Server ; wins support = no

# WINS Server - Tells the NMBD components of Samba to be a WINS Client # Note: Samba can be either a WINS Server, or a WINS Client, but NOT both ; wins server = w.x.y.z

# This will prevent nmbd to search for NetBIOS names through DNS. dns proxy = no

# What naming service and in what order should we use to resolve host names # to IP addresses ; name resolve order = lmhosts host wins bcast

#### Debugging-Accounting ####

# This tells Samba to use a separate log file for each machine # that connects log file =var-log-samba-log.%m

# Put a capping on the size of the log files (in Kb). max log size = 1000

# If you want Samba to only log through syslog then set the following # parameter to 'yes'. ; syslog only = no

# We want Samba to log a minimum amount of information to syslog. Everything # should go tovar-log-samba-log.{smbd,nmbd} instead. If you want to log # through syslog you should set the following parameter to something higher. syslog = 0

# Do something sensible when Samba crashes: mail the admin a backtrace panic action =usr-share-samba-panic-action %d

####### Authentication #######

# "security = user" is always a good idea. This will require a Unix account # in this server for every user accessing the server. See #usr-share-doc-samba-doc-htmldocs-ServerType.html in the samba-doc # package for details. ; security = user security = share

# You may wish to use pbuttword encryption. See the section on # 'encrypt pbuttwords' in the smb.conf(5) manpage before enabling. encrypt pbuttwords = true

# If you are using encrypted pbuttwords, Samba will need to know what # pbuttword database type you are using. pbuttdb backend = tdbsam smbuser

; obey pam restrictions = yes

guest account = smbuser ; invalid users = root ; invalid users = nobody

# This boolean parameter controls whether Samba attempts to sync the Unix # pbuttword with the SMB pbuttword when the encrypted SMB pbuttword in the # pbuttdb is changed. ; unix pbuttword sync = no

# For Unix pbuttword sync to work on a Debian GNU-Linux system, the following # parameters must be set (thanks to Augustin Luton # sending the correct chat script for the pbuttwd program in Debian Potato). pbuttwd program =usr-bin-pbuttwd %u pbuttwd chat = *Enter-snew-sUNIX-spbuttword:* %n-n *Retype-snew-sUNIX-spbuttword:* %n-n .

# This boolean controls whether PAM will be used for pbuttword changes # when requested by an SMB client instead of the program listed in # 'pbuttwd program'. The default is 'no'. ; pam pbuttword change = no

########## Printing ##########

# If you want to automatically load your printer list rather # than setting them up individually then you'll need this ; load printers = yes

# lpr(ng) printing. You may wish to override the location of the # printcap file ; printing = bsd ; printcap name =etc-printcap

# CUPS printing. See also the cupsaddsmb(8) manpage in the # cupsys-client package. ; printing = cups ; printcap name = cups

# When using print$, root is implicitly a 'printer admin', but you can # also give this right to other users to add drivers and set printer # properties

######## File sharing ########

# Name mangling options ; preserve case = yes ; short preserve case = yes

############ Misc ############

# Using the following line enables you to customise your configuration # on a per machine basis. The %m gets replaced with the netbios name # of the machine that is connecting ; include =home-samba-etc-smb.conf.%m

# Most people will find that this option gives better performance. # See smb.conf(5) andusr-share-doc-samba-doc-htmldocs-speed.html # for details # You may want to add the following on a Linux system: # SORCVBUF=8192 SOSNDBUF=8192 socket options = TCPNODELAY

# The following parameter is useful only if you have the linpopup package # installed. The samba maintainer and the linpopup maintainer are # working to ease installation and configuration of linpopup and samba. ; message command =bin-sh -c '-usr-bin-linpopup "%f" "%m" %s; rm %s' &

# Domain Master specifies Samba to be the Domain Master Browser. If this # machine will be configured as a BDC (a secondary logon server), you # must set this to 'no'; otherwise, the default behavior is recommended. ; domain master = auto

# Some defaults for winbind (make sure you're not using the ranges # for something else.) ; idmap uid = 10000-20000 ; idmap gid = 10000-20000 ; template shell =bin-bash

#======================= Share Definitions =======================

wins support = no homes comment = Home Directories browseable = no

# By default, the home directories are exported read-only. Change next # parameter to 'yes' if you want to be able to write to them. writable = no

# File creation mask is set to 0700 for security reasons. If you want to # create files with group=rw permissions, set next parameter to 0775. create mask = 0700

# Directory creation mask is set to 0700 for security reasons. If you want to # create dirs. with group=rw permissions, set next parameter to 0775. directory mask = 0700

# Un-comment the following and create the netlogon directory for Domain Logons # (you need to configure Samba to act as a domain controller too.) ;netlogon ; comment = Network Logon Service ; path =home-samba-netlogon ; guest ok = yes ; writable = no ; share modes = no

printers comment = All Printers browseable = no path =tmp printable = yes public = no writable = no create mode = 0700

# Windows clients look for this share name as a source of downloadable # printer drivers print$ comment = Printer Drivers path =var-lib-samba-printers browseable = yes read only = yes guest ok = no # Uncomment to allow remote administration of Windows print drivers. # Replace 'ntadmin' with the name of the group your admin users are # members of.

# A sample share for sharing your CD-ROM with others. ;cdrom ; comment = Samba server's CD-ROM ; writable = no ; locking = no ; path =cdrom ; public = yes

# The next two parameters show how to auto-mount a CD-ROM when the # cdrom share is accesed. For this to worketc-fstab must contain # an entry like this: # # dev-scd0 cdrom iso9660 defaults,noauto,ro,user 0 0 # # The CD-ROM gets unmounted automatically after the connection to the # # If you don't want to use auto-mounting-unmounting make sure the CD # is mounted oncdrom # ; preexec =bin-mountcdrom ; postexec =bin-umountcdrom

FooBar path =home-larry-foobar comment = The shared folder on UBU available = yes browseable = yes public = yes read only = no writable = yes guest ok = yes hosts allow = 192.168.1. force user = smbuser nt acl support = no

# Uncomment the line below to restrict access to certain users. # valid users = larry

Backup path =mnt-data-backup comment = For bubba backups available = yes browseable = no public = yes writable = yes read only = no guest ok = yes force user = smbuser nt acl support = no hosts allow = 192.168.1.99