Samba passwords

[Jez Hancock]

On Mon, Jun 30, 2003 at 08:25:57PM -0400, Bob Hall wrote:
> I'm trying to get samba running on my FBSD server. I've done this 
> previously with another server, but I can't seem to get it to 
> work this time. If I turn off password encryption, then I pass 
> all the tests in the DIAGNOSIS file, but Win2k obviously won't 
> allow the connection without encrypted passwords. If I turn 
> encryption on, I pass any test that doesn't involve a password. 
> 
> I created the password file with make_smbpasswd. I also tried 
> importing a password file used with an earlier version of Samba, 
> and editing the usernames and user ids. There is no ENCRYPTION 
> file included with this port, and I can't find any other 
> instructions for setting up the password file. I've googled and 
> searched, and can't find anything that goes beyond what I already 
> know. If someone could point me to instructions for setting this 
> up, I'd be grateful.
fwiw my smb.conf file looks like this:
# Global parameters
[global]
    workgroup = LAN
    netbios name = FBSD
    server string = FreeBSD Samba Server
    encrypt passwords = Yes
    log level = 5
    log file = /var/log/log.%m
    preferred master = Yes
    valid users = Jez munk jezhanco
    admin users = Jez munk jezhanco
    hosts allow = <list of ip addresses here>

[homes]
    comment = Home Directories
    read only = No

[all]
    comment = All
    path = /
    guest account =
    read only = No

[mov]
    comment = Movies
    path = /mnt/mov
    guest account =
    read only = No
[data]
    comment = Data
    path = /mnt/data
    guest account =
    read only = No
[mp3]
    comment = MP3s
    path = /mnt/mp3
    guest account =
    read only = No
[avweb]
    comment = AVG Dev Site
    path = /home/avweb/
    guest account =
    read only = No
# end

I then create passwords using 'smbpasswd user password ' for each of the user's
in the 'valid users' list, started samba and this was enough to allow me
to access shares from my win2k machine (so long as the user/password I
used to login to the win2k machine matched one of the 'valid users' and
the machine was in the LAN workgroup).

HTH,
Jez