Windows 10 no solicita contraseña para las acciones de Ubuntu Samba -- etworking campo con samba campo con file-sharing camp askubuntu Relacionados El problema

Windows 10 NOT asking for password for Ubuntu samba shares


0
vote

problema

Español

Recientemente he hecho una instalación limpia de 16.04.3lts en una computadora portátil nueva. Estoy tratando de compartir archivos de mi computadora portátil de Ubuntu en mi red doméstica. Solo quiero que los usuarios específicos puedan acceder a las acciones de Samba, y requieren la autenticación de contraseña. Actualmente, Windows 10 tiene acceso completo sin la contraseña requerida ???? ¿Qué está mal con mi samba config?

  #======================= Global Settings =======================  [global]  ## Browsing/Identification ###  # Change this to the workgroup/NT-domain name your Samba server will part of     workgroup = home  # server string is the equivalent of the NT Description field     server string = %h server (Samba, Ubuntu)  # Windows Internet Name Serving Support Section: # WINS Support - Tells the NMBD component of Samba to enable its WINS Server #   wins support = no  # WINS Server - Tells the NMBD components of Samba to be a WINS Client # Note: Samba can be either a WINS Server, or a WINS Client, but NOT both ;   wins server = w.x.y.z  # This will prevent nmbd to search for NetBIOS names through DNS.     dns proxy = no  #### Networking ####  # The specific set of interfaces / networks to bind to # This can be either the interface name or an IP address/netmask; # interface names are normally preferred ;   interfaces = 127.0.0.0/8 eth0  # Only bind to the named interfaces and/or networks; you must use the # 'interfaces' option above to use this. # It is recommended that you enable this feature if your Samba machine is # not protected by a firewall or is a firewall itself.  However, this # option cannot handle dynamic or non-broadcast interfaces correctly. ;   bind interfaces only = yes  ####### Authentication #######  # Server role. Defines in which mode Samba will operate. Possible # values are "standalone server", "member server", "classic primary # domain controller", "classic backup domain controller", "active # directory domain controller".  # # Most people will want "standalone sever" or "member server". # Running as "active directory domain controller" will require first # running "samba-tool domain provision" to wipe databases and create a # new domain.     server role = standalone server  # If you are using encrypted passwords, Samba will need to know what # password database type you are using.   ;   passdb backend = tdbsam      obey pam restrictions = yes  # This boolean parameter controls whether Samba attempts to sync the Unix # password with the SMB password when the encrypted SMB password in the # passdb is changed.     unix password sync = yes  # For Unix password sync to work on a Debian GNU/Linux system, the following # parameters must be set (thanks to Ian Kahan <<kahan@informatik.tu-muenchen.de> for # sending the correct chat script for the passwd program in Debian Sarge).     passwd program = /usr/bin/passwd %u     passwd chat = *Entersnews*spassword:* %n  *Retypesnews*spassword:* %n  *passwordsupdatedssuccessfully* .  # This boolean controls whether PAM will be used for password changes # when requested by an SMB client instead of the program listed in # 'passwd program'. The default is 'no'.     pam password change = yes  # This option controls how unsuccessful authentication attempts are mapped # to anonymous connections     map to guest = bad user ############ Misc ############  # Using the following line enables you to customise your configuration # on a per machine basis. The %m gets replaced with the netbios name # of the machine that is connecting ;   include = /home/samba/etc/smb.conf.%m  # Some defaults for winbind (make sure you're not using the ranges # for something else.) ;   idmap uid = 10000-20000 ;   idmap gid = 10000-20000 ;   template shell = /bin/bash  # Setup usershare options to enable non-root users to share folders # with the net usershare command.  # Maximum number of usershare. 0 (default) means that usershare is disabled. ;   usershare max shares = 100  # Allow users who've been granted usershare privileges to create # public shares, not just authenticated ones     usershare allow guests = yes     username map = /etc/samba/smbusers     security = user ;   encrypt passwords = yes ;   guest ok = no ;   guest account = nobody  #======================= Share Definitions =======================  # Un-comment the following (and tweak the other settings below to suit) # to enable the default home directory shares. This will share each # user's home directory as \serverusername ;[homes] ;   comment = Home Directories ;   browseable = no  # By default, the home directories are exported read-only. Change the # next parameter to 'no' if you want to be able to write to them. ;   read only = yes  # File creation mask is set to 0700 for security reasons. If you want to # create files with group=rw permissions, set next parameter to 0775. ;   create mask = 0700  # Directory creation mask is set to 0700 for security reasons. If you want to # create dirs. with group=rw permissions, set next parameter to 0775. ;   directory mask = 0700  # By default, \serverusername shares can be connected to by anyone # with access to the samba server. # Un-comment the following parameter to make sure that only "username" # can connect to \serverusername # This might need tweaking when using external authentication schemes ;   valid users = %S  # Un-comment the following and create the netlogon directory for Domain Logons # (you need to configure Samba to act as a domain controller too.) ;[netlogon] ;   comment = Network Logon Service ;   path = /home/samba/netlogon ;   guest ok = yes ;   read only = yes  # Un-comment the following and create the profiles directory to store # users profiles (see the "logon path" option above) # (you need to configure Samba to act as a domain controller too.) # The path below should be writable by all users so that their # profile directory may be created the first time they log on ;[profiles] ;   comment = Users profiles ;   path = /home/samba/profiles ;   guest ok = no ;   browseable = no ;   create mask = 0600 ;   directory mask = 0700  [printers]     comment = All Printers     browseable = no     path = /var/spool/samba     printable = yes ;   guest ok = no ;   read only = yes     create mask = 0700  # Windows clients look for this share name as a source of downloadable # printer drivers [print$]     comment = Printer Drivers     path = /var/lib/samba/printers ;   browseable = yes ;   read only = yes ;   guest ok = no # Uncomment to allow remote administration of Windows print drivers. # You may need to replace 'lpadmin' with the name of the group your # admin users are members of. # Please note that you also need to set appropriate Unix permissions # to the drivers directory for these users to have write rights in it ;   write list = root, @lpadmin  [Music]     path = /home/chad/Music     writeable = yes ;   browseable = yes ;   valid users = chad     guest ok = no     security = user   [Downloads]     path = /home/chad/Downloads     writeable = yes ;   browseable = yes     valid users = chad  [Videos]     path = /home/chad/Videos     writeable = yes     valid users = chad   

Antes de que alguien diga que debe ser un problema con las credenciales de Windows 10 ... Ya he intentado eliminar todas las credenciales netas (en realidad no hubo), y aún tiene el mismo problema.

Original en ingles

I have recently made a clean install of 16.04.3LTS on a new laptop. I am trying to share files from my ubuntu laptop on my home network. I want only specific users to be able to access the samba shares, and require password authentication. Currently, either Windows 10 has full access with no password required???? What is wrong with my samba config?

#======================= Global Settings =======================  [global]  ## Browsing/Identification ###  # Change this to the workgroup/NT-domain name your Samba server will part of     workgroup = home  # server string is the equivalent of the NT Description field     server string = %h server (Samba, Ubuntu)  # Windows Internet Name Serving Support Section: # WINS Support - Tells the NMBD component of Samba to enable its WINS Server #   wins support = no  # WINS Server - Tells the NMBD components of Samba to be a WINS Client # Note: Samba can be either a WINS Server, or a WINS Client, but NOT both ;   wins server = w.x.y.z  # This will prevent nmbd to search for NetBIOS names through DNS.     dns proxy = no  #### Networking ####  # The specific set of interfaces / networks to bind to # This can be either the interface name or an IP address/netmask; # interface names are normally preferred ;   interfaces = 127.0.0.0/8 eth0  # Only bind to the named interfaces and/or networks; you must use the # 'interfaces' option above to use this. # It is recommended that you enable this feature if your Samba machine is # not protected by a firewall or is a firewall itself.  However, this # option cannot handle dynamic or non-broadcast interfaces correctly. ;   bind interfaces only = yes  ####### Authentication #######  # Server role. Defines in which mode Samba will operate. Possible # values are "standalone server", "member server", "classic primary # domain controller", "classic backup domain controller", "active # directory domain controller".  # # Most people will want "standalone sever" or "member server". # Running as "active directory domain controller" will require first # running "samba-tool domain provision" to wipe databases and create a # new domain.     server role = standalone server  # If you are using encrypted passwords, Samba will need to know what # password database type you are using.   ;   passdb backend = tdbsam      obey pam restrictions = yes  # This boolean parameter controls whether Samba attempts to sync the Unix # password with the SMB password when the encrypted SMB password in the # passdb is changed.     unix password sync = yes  # For Unix password sync to work on a Debian GNU/Linux system, the following # parameters must be set (thanks to Ian Kahan <<kahan@informatik.tu-muenchen.de> for # sending the correct chat script for the passwd program in Debian Sarge).     passwd program = /usr/bin/passwd %u     passwd chat = *Enter\snew\s*\spassword:* %n\n *Retype\snew\s*\spassword:* %n\n *password\supdated\ssuccessfully* .  # This boolean controls whether PAM will be used for password changes # when requested by an SMB client instead of the program listed in # 'passwd program'. The default is 'no'.     pam password change = yes  # This option controls how unsuccessful authentication attempts are mapped # to anonymous connections     map to guest = bad user ############ Misc ############  # Using the following line enables you to customise your configuration # on a per machine basis. The %m gets replaced with the netbios name # of the machine that is connecting ;   include = /home/samba/etc/smb.conf.%m  # Some defaults for winbind (make sure you're not using the ranges # for something else.) ;   idmap uid = 10000-20000 ;   idmap gid = 10000-20000 ;   template shell = /bin/bash  # Setup usershare options to enable non-root users to share folders # with the net usershare command.  # Maximum number of usershare. 0 (default) means that usershare is disabled. ;   usershare max shares = 100  # Allow users who've been granted usershare privileges to create # public shares, not just authenticated ones     usershare allow guests = yes     username map = /etc/samba/smbusers     security = user ;   encrypt passwords = yes ;   guest ok = no ;   guest account = nobody  #======================= Share Definitions =======================  # Un-comment the following (and tweak the other settings below to suit) # to enable the default home directory shares. This will share each # user's home directory as \\server\username ;[homes] ;   comment = Home Directories ;   browseable = no  # By default, the home directories are exported read-only. Change the # next parameter to 'no' if you want to be able to write to them. ;   read only = yes  # File creation mask is set to 0700 for security reasons. If you want to # create files with group=rw permissions, set next parameter to 0775. ;   create mask = 0700  # Directory creation mask is set to 0700 for security reasons. If you want to # create dirs. with group=rw permissions, set next parameter to 0775. ;   directory mask = 0700  # By default, \\server\username shares can be connected to by anyone # with access to the samba server. # Un-comment the following parameter to make sure that only "username" # can connect to \\server\username # This might need tweaking when using external authentication schemes ;   valid users = %S  # Un-comment the following and create the netlogon directory for Domain Logons # (you need to configure Samba to act as a domain controller too.) ;[netlogon] ;   comment = Network Logon Service ;   path = /home/samba/netlogon ;   guest ok = yes ;   read only = yes  # Un-comment the following and create the profiles directory to store # users profiles (see the "logon path" option above) # (you need to configure Samba to act as a domain controller too.) # The path below should be writable by all users so that their # profile directory may be created the first time they log on ;[profiles] ;   comment = Users profiles ;   path = /home/samba/profiles ;   guest ok = no ;   browseable = no ;   create mask = 0600 ;   directory mask = 0700  [printers]     comment = All Printers     browseable = no     path = /var/spool/samba     printable = yes ;   guest ok = no ;   read only = yes     create mask = 0700  # Windows clients look for this share name as a source of downloadable # printer drivers [print$]     comment = Printer Drivers     path = /var/lib/samba/printers ;   browseable = yes ;   read only = yes ;   guest ok = no # Uncomment to allow remote administration of Windows print drivers. # You may need to replace 'lpadmin' with the name of the group your # admin users are members of. # Please note that you also need to set appropriate Unix permissions # to the drivers directory for these users to have write rights in it ;   write list = root, @lpadmin  [Music]     path = /home/chad/Music     writeable = yes ;   browseable = yes ;   valid users = chad     guest ok = no     security = user   [Downloads]     path = /home/chad/Downloads     writeable = yes ;   browseable = yes     valid users = chad  [Videos]     path = /home/chad/Videos     writeable = yes     valid users = chad 

Before someone says its must be a problem with Windows 10 credentials...I have already tried removing all net credentials (actually there were none), and still have the same issue.

        
   
   

Lista de respuestas

0
 
vote

Esto suele ocurrir cuando el usuario de Samba coincide con el usuario que ha iniciado sesión actualmente. Entonces, si crea una parte de Samba para Chad y en la PC remota, su nombre de usuario también es Chad, no le pedirá una contraseña y le informará. (Creo que las contraseñas tienen que coincidir también, se convierte en un inicio de sesión automático, Así que hablar).

Ahora, si desea que la acción requiera una contraseña sin importar qué, lo que podría intento es agregar la línea security = user a su abcdefghijklmn8 Y debería requerir una contraseña ahora.

Todo esto asume que ambos nombres de usuario en el cliente y el servidor son los mismos.

 

This usually happens when the samba user matches the currently logged on user. So if you create a samba share for CHAD and on the remote PC, your username is also CHAD it wont ask for a password and let you in. (I believe the passwords have to match as well, it turns into like an auto login, so to speak).

Now if you want to make the share require a password no matter what, what you could try is add the line security = user to your smb.conf and it should require a password now.

This is all assuming both usernames on the client and server are the same.

 
 
 
 

Relacionados problema

3  Mejores prácticas para el directorio compartido en el servidor (Clientes de Samba Windows 10)  ( Best practice for shared directory on server samba windows 10 clients ) 
Configuración del intercambio de archivos en Linux Server (Ubuntu) con Samba para clientes de Windows 10. Configure originalmente este entorno hace 7 años en ...

1  Configure un mini-PC basado en Ubuntu 15.04 como enrutador WiFi [cerrado]  ( Set up an ubuntu 15 04 based mini pc as wifi router ) 
cerrado. Esta pregunta es off-topic . Actualmente no está aceptando respuestas. ¿Quieres ...

3  La autenticación de samba falla  ( Samba authentication fails ) 
He estado buscando sin cesar lo que salió mal, y no puedo resolverlo. Hay mucho que todavía no entiendo en trabajar con Samba en Ubuntu, así que si algo parec...

0  Windows no puede acceder a Samba Server  ( Windows cannot access samba server ) 
Tengo un servidor Ubuntu, Wheatley, y estoy tratando de configurar Samba para su uso personal en mi red doméstica. El objetivo es tener una computadora con Wi...

43  ¿Cómo transferir archivos entre Ubuntu y Windows?  ( How to transfer files between ubuntu and windows ) 
Quiero transferir algunos archivos de esta PC con Ubuntu a una PC con Windows 7 No me importa cómo hacerlo (FTP, Samba o lo que sea) Quiero saber los pasos, b...

11  Comparte a través de la red a los usuarios de Windows  ( Share across network to windows users ) 
Tengo una carpeta que quiero compartir con un par de usuarios de Windows en la red. Estoy usando Ubuntu 10.4 Cuando haga clic con el botón derecho en una ...

6  ¿Cómo transfiero los archivos sobre SSH después de sudo?  ( How do i transfer files over ssh after sudo ) 
Tengo acceso a una caja sobre SSH y hay algunos archivos que me gustaría transferir a otra máquina, pero aquellos solo son accesibles en otra cuenta Si i s...

2  Una buena aplicación de mensajería de LAN y compartir archivos  ( A good lan messaging and file sharing application ) 
Actualmente utilizo IPTUX para enviar mensajes y compartir archivos a través de mi albergue LAN, pero la interfaz no es bastante conveniente y los archivos en...

1  Configuración de múltiples computadoras Ubuntu para compartir archivos y usuarios  ( Setting up multiple ubuntu computers to share files and users ) 
Soy muy nuevo en el mundo del * Nix y solo van vagamente escuchado de cosas como YP / NIS, LDAP, Kerberos, etc. Si tengo varias máquinas con las que quiero ti...

39  ¿Cómo configuro el intercambio de archivos entre dos computadoras portátiles de Ubuntu en mi red inalámbrica?  ( How do i set up file sharing between two ubuntu laptops on my wireless network ) 
Tengo dos computadoras portátiles que ejecutan Ubuntu 12.04. Ambos se conectan a la misma red WiFi para acceder a Internet. ¿Cómo los conecto entre sí para ...




© 2022 respuesta.top Reservados todos los derechos. Centro de preguntas y respuestas reservados todos los derechos