Log into an NT Domain

Hello All,

I'm totally frustrated and don't know where to turn. I downloaded NLD
9.0 today and was all ready to start to test it out on some of our
office computers. I am infinitely frustrated, however, in how to join
an NT domain. I have followed all the instructions on the topic, and
ended with the YaST front end for Samba saying that I was accepted into
the domain. However, I can't for the life of me even find the smb.conf
file on this computer, or in any other way determine if Samba is
installed! Also, I'm not sure that even if I get Samba running that it
will solve my problem because what I'm really getting at is being
authenticated when using an intranet website to run a SQL procedure for
inventory and sales queries. The IIS hosted page is looking for NT
challenge/response protocol, and I have no idea where that comes into
play in the Linux setup. Lastly, our NT network uses WINS to name our
computers, and I can't seem to get any info on how to use WINS in
Linux. Oh yeah, is there any way to browse a domain and see the
computers?

I know these are all stupid questions from someone who hasn't read "the
book" but I can't find "the book" any where. I see a lot of
information on Mandrake and RH, but a step-by-step "Domain Security for
Dummies" isn't out there for NLD that has the right directories for
files, etc. Can anyone please, please help me???

1. Make sure that Samba is running. (If I type smbstatus it just tells
me "command not found" regardless of whether I'm logged on as root or
anything)
2. Make sure that I'm logged on to the domain.
3. Browse the domain? if possibe
4. Pass along my authentication to the IIS when accessing web pages
Thank you in advance for your help!
John

John schreef:
[...]
> 1. Make sure that Samba is running. (If I type smbstatus it just tells
> me "command not found" regardless of whether I'm logged on as root or
> anything)

You could try 'man samba' or ls /usr/bin/smb

> 2. Make sure that I'm logged on to the domain.

I don't think logging into an NT domain as a windows user in really
possible. You can join an NT domain using samba acting as server. You
can connect to shares on an NT domain using smbclient.

> 3. Browse the domain? if possibe

I guess you can do this with smbclient.

> 4. Pass along my authentication to the IIS when accessing web pages
> Thank you in advance for your help!
> John
>

Normally having a connection to a Windows server makes all activities to
this server work in the user context of the connection. I don't know if
this helps to solve your problem. Try to connect a share on the server
with IIS using smbclient and then try if you get authenticated by IIS
when you access those webpages.

If that doesn't work, and you cannot convince system management to
validate database access on database users, you could try to run
'linspire (previously lindows)' and have more luck.

Good luck,
Max

"John" <(E-Mail Removed)> skrev i meddelandet
news:(E-Mail Removed) oups.com...
> Hello All,
>
> I'm totally frustrated and don't know where to turn. I downloaded NLD
> 9.0 today and was all ready to start to test it out on some of our
> office computers. I am infinitely frustrated, however, in how to join
> an NT domain. I have followed all the instructions on the topic, and
> ended with the YaST front end for Samba saying that I was accepted into
> the domain. However, I can't for the life of me even find the smb.conf
> file on this computer, or in any other way determine if Samba is
> installed! Also, I'm not sure that even if I get Samba running that it
> will solve my problem because what I'm really getting at is being
> authenticated when using an intranet website to run a SQL procedure for
> inventory and sales queries. The IIS hosted page is looking for NT
> challenge/response protocol, and I have no idea where that comes into
> play in the Linux setup. Lastly, our NT network uses WINS to name our
> computers, and I can't seem to get any info on how to use WINS in
> Linux. Oh yeah, is there any way to browse a domain and see the
> computers?
>
> I know these are all stupid questions from someone who hasn't read "the
> book" but I can't find "the book" any where. I see a lot of
> information on Mandrake and RH, but a step-by-step "Domain Security for
> Dummies" isn't out there for NLD that has the right directories for
> files, etc. Can anyone please, please help me???
>
> 1. Make sure that Samba is running. (If I type smbstatus it just tells
> me "command not found" regardless of whether I'm logged on as root or
> anything)
> 2. Make sure that I'm logged on to the domain.
> 3. Browse the domain? if possibe
> 4. Pass along my authentication to the IIS when accessing web pages
> Thank you in advance for your help!
> John
>

Look in /etc/samba for the smb.conf. It is not installed correctly by
default so you may rename it to: smb.conf

John wrote:
> Hello All,
>
> I'm totally frustrated and don't know where to turn. I downloaded
NLD
> 9.0 today and was all ready to start to test it out on some of our
> office computers. I am infinitely frustrated, however, in how to
join
> an NT domain. I have followed all the instructions on the topic, and
> ended with the YaST front end for Samba saying that I was accepted
into
> the domain. However, I can't for the life of me even find the
smb.conf
> file on this computer, or in any other way determine if Samba is
> installed!

[@pbrain]$ whereis samba < RH box so ymmv
samba: /etc/samba /usr/lib/samba
/usr/share/samba
/usr/share/man/man7/samba.7.gz

> Also, I'm not sure that even if I get Samba running that it
> will solve my problem because what I'm really getting at is being
> authenticated when using an intranet website to run a SQL procedure
for
> inventory and sales queries. The IIS hosted page is looking for NT
> challenge/response protocol, and I have no idea where that comes into
> play in the Linux setup.

You _may_ have to hope someone running IIS can help -- most Linuxers
would probably be more familiar with Apache and MySQL or PostgeSQL.
Are you authenticating to IIS web page which then connects to SQL
(Server?) to run queries? If so, your only concern will be conforming
to the authentication expected on the web page. If you are using web
page with ActiveX controls, etc., then check with your programmers.

> Lastly, our NT network uses WINS to name our
> computers, and I can't seem to get any info on how to use WINS in
> Linux. Oh yeah, is there any way to browse a domain and see the
> computers?

See docs below.

> I know these are all stupid questions from someone who hasn't read
"the
> book" but I can't find "the book" any where. I see a lot of
> information on Mandrake and RH, but a step-by-step "Domain Security
for
> Dummies" isn't out there for NLD that has the right directories for
> files, etc. Can anyone please, please help me???

Samba probably the best source for docs and they should be on your CDs.
For the latest go to:
http://us1.samba.org/samba/docs/
and to grab all the latest docs in multiple formats, etc. grab this:
http://samba.org/~samba-bugs/docs/sa...latest.tar.bz2

> 1. Make sure that Samba is running. (If I type smbstatus it just
tells
> me "command not found" regardless of whether I'm logged on as root or
> anything)

[@pbrain]$ whereis smbstatus
smbstatus: /usr/bin/smbstatus /usr/share/man/man1/smbstatus.1.gz

[@pbrain]$ smbstatus < I'm not running it
sessionid.tdb not initialised
/var/cache/samba/connections.tdb not initialised
This is normal if an SMB client has never connected to your server.
Failed to open byte range locking database
ERROR: Failed to initialise locking database
Can't initialise locking module - exiting

Perhaps not installed?
[@pbrain]$ rpm -qi samba
Name : samba Relocations: (not
relocateable)
Version : 3.0.6 Vendor: The KDE-RedHat
Project
Release : 3.1.rh80.kde Build Date: Sun 05 Sep 2004
01:33:50 PM CDT ... yada yada yada

> 2. Make sure that I'm logged on to the domain.
> 3. Browse the domain? if possibe
> 4. Pass along my authentication to the IIS when accessing web pages

Depends on how your IIS setup is authenicating but should be doable.
This is normally a locally programmed backend function.

How are you are trying to have Linux access Win shares -- smbclient?

> Thank you in advance for your help!
> John

Sorry for the incompleteness -- company has arrived.
hth,
prg
email above disabled

On 2004-12-28 18:01:47 -0500, "John" <(E-Mail Removed)> said:

> 4. Pass along my authentication to the IIS when accessing web pages
> Thank you in advance for your help!
> John

AFAIK, this is a function of the browser you are using and is not
directly linked to Samba. IE on Windows supports Integrated Windows
Authentication and transparently supplies the credentials of the
currently logged-on user when accessing an IIS site that requires
authentication. I don't know if any of the Linux-based browsers will
do that.

HTH.

--
Scott Lowe

On Tue, 28 Dec 2004 22:41:27 -0500, Scott Lowe wrote:

> On 2004-12-28 18:01:47 -0500, "John" <(E-Mail Removed)> said:
>
>> 4. Pass along my authentication to the IIS when accessing web pages
>> Thank you in advance for your help!
>> John
>
> AFAIK, this is a function of the browser you are using and is not
> directly linked to Samba. IE on Windows supports Integrated Windows
> Authentication and transparently supplies the credentials of the
> currently logged-on user when accessing an IIS site that requires
> authentication. I don't know if any of the Linux-based browsers will
> do that.

Firefox can and does do NTLM authentication since PR1.

--
A large number of installed systems work by fiat. That is, they work
by being declared to work.
-- Anatol Holt

On Tue, 28 Dec 2004 22:41:27 -0500, Scott Lowe <(E-Mail Removed)> wrote:

> IE on Windows supports Integrated Windows Authentication and
> transparently supplies the credentials of the currently logged-on user
> when accessing an IIS site that requires authentication.

I wonder what happens if you're running IE under Crossover on Linux?


--
-| Bob Hauck
-| To Whom You Are Speaking
-| http://www.haucks.org/