2:41 p.m.
At 13:00 4/25/2004, you wrote:
I installed Fedora Core 1 and everything seems to be working well,
including being able to use the internet. (Although, I think I stuffed up
my firewall settings yesterday). However I need the help of a kind patient
person who can walk me through our simple 3 computer network setup. I am
the only one on Linux, the other two are on WindowsXP. Mine however is the
only computer with internet access.
You're going to need to provide a lot more detail when you ask a question,
but we'll try to help you.
Now, assuming that your computer (A) connects to the Internet and that the
other two computers (B and C) run WinXP and connect to yours, I suggest
you:
1. First make sure that you have two Ethernet cards in your A computer,
and that A can connect to the Internet *and* to B and C.
2. Once basic networking has been established (don't worry about the rest
of it until then), go to http://www.shorewall.net and download the
Shorewall RPM package. Also download the "Two-Interface Quick Guide" and it
will show you how to give B and C access to the Internet via A.
Post back here if you have more questions. And remember, when starting a
new conversation, press the button in your mail program for a *new*
message... do not reply to an existing message since this confuses the
threads.
Did starting a new thread help? Hope so. But it looks confusing to me.
OK. My machine is dual booted win98/Fedora 1. Networking has worked fine
with windows, but my 14 year old son sorted that out. We are on a hub so I
don't need 2 ethernet cards. My big problem is I don't know how to
configure the networking files and samba. Also LIsa won't start up for me
which I think is another init config file problem (eg me being blonde
again!). Please tell me what kind of other information you need to know. I
like to use the KDE desk top and have somewhere picked up a utility called
smb4k which looks like a gui samba configuration interface and network
neighbourhood thingy in one. (But the documentation is primitive to say the
least). I feel like I probably need to start from scratch.
Shelagh
Cheers,
"First, do no harm" J.Holt
Huh?
This is from the Hippocratic Oath... who the heck is J. Holt?
This is in the context of education. J Holt tried to reform education in
America in the 60s & 70s. And yes he probably did quote from the
Hippocratic oath. SOM
--
Rodolfo J. Paiz
rpaiz(a)simpaticus.com
http://www.simpaticus.com
--
"First, do no harm" J.Holt
1:06 a.m.
New subject: Start again on the newbie's networking problem. Re: Need help (of course) setting up network
Shelagh Manton wrote/ha scritto, On/il 26/04/2004 21:41:
Did starting a new thread help? Hope so. But it looks confusing to me.
OK. My machine is dual booted win98/Fedora 1. Networking has worked
fine with windows, but my 14 year old son sorted that out. We are on a
hub so I don't need 2 ethernet cards. My big problem is I don't know
how to configure the networking files and samba. Also LIsa won't start
up for me which I think is another init config file problem (eg me
being blonde again!). Please tell me what kind of other information
you need to know. I like to use the KDE desk top and have somewhere
picked up a utility called smb4k which looks like a gui samba
configuration interface and network neighbourhood thingy in one. (But
the documentation is primitive to say the least). I feel like I
probably need to start from scratch.
Shelagh
Internet sharig and file sharing are two completely separate issues.
1) I am on a hub and I have two separate cards (one for the Internet and
one for home/office): setting is much easier and safer, and traffic is
completely separate.Adding a card is cheap and easy.
You set the first card to Internet and try it: if it works you set the
network parameters on second card.
But you have to tell the machine that is a router (see file /etc/systcl.con)
kernel.sysrq=0
net.ipv4.ip_forward=1
net.ipv4.conf.default.rp_filter=1
kernel.core_uses_pid=1
At this point you must tell the machine that must do some NAT (Network
address translation) by setting appropriate iptables file in /etc/sysconfig
This is mine...with eth0 card to the internal and ppp0 as Internet
connection
# Firewall configuration written by lokkit
# Manual customization of this file is not recommended.
# Note: ifup-post will punch the current nameservers through the
# firewall; such entries will *not* be listed here.
*filter
:FORWARD DROP [0:0]
:INPUT DROP [0:0]
:OUTPUT ACCEPT [0:0]
-A INPUT -i lo -j ACCEPT
-A INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT
-A FORWARD -i eth0 -j ACCEPT
-A FORWARD -m state --state ESTABLISHED,RELATED -j ACCEPT
-A INPUT -i eth0 -j ACCEPT
COMMIT
# Generated by webmin
*mangle
:FORWARD ACCEPT [0:0]
:INPUT ACCEPT [0:0]
:OUTPUT ACCEPT [0:0]
:PREROUTING ACCEPT [0:0]
:POSTROUTING ACCEPT [0:0]
COMMIT
# Completed
# Generated by webmin
*nat
:PREROUTING ACCEPT [0:0]
:OUTPUT ACCEPT [0:0]
:POSTROUTING ACCEPT [0:0]
-A POSTROUTING -o ppp0 -j MASQUERADE
COMMIT
# Completed
Samba configuration in a separate message after confirmation of success!!!
In any case I suggest to Install Webmin (that you can download at Www.webmin.com)
--
Antonio M.
=========================================================
Working with Mozilla 1.6 on Redhat Linux Fedora Core 1
=========================================================
=========================================================
Uso Mozilla 1.6 su Redhat Linux Fedora Core 1
=========================================================
7:54 a.m.
New subject: Start again on the newbie's networking problem. Re: Need help (of course) setting up network
On Tue, 27 Apr 2004 08:06:35 +0200, antonio montagnani
<anto.montagnani(a)virgilio.it> wrote:
My son tells me (we are working on this thing together) that I have an
ethernet card and my external modem is on a serial port. Does this count?
However, on the security issue, I don't know that hacking into our network
would be the most interesting exercise, as my sons both assure me that it
would put any self respecting hacker to sleep and their machines are full
of school essays and compositions and no world shattering secrets at all.
At this present time I would like to just get file tranfer between the
machines up and running. Maybe later worry about letting them on the net,
after all they can use my machine to do so.
I tried to install swat but something is missing or in another directory,
because when I use the rpm install thing it tells me that it can't find
samba 3. I'm sure that I have it because I did a complete install of
everything from the CDs and there is a smb file that I found once in /etc.
that looked like the one described in a book I bought to help me. I also
have downloaded webmin which looks good but I have yet to install it. I
hope it explains things like samba shares and the syntax for entering these
mysteries. Are they things I want to share or can they be things the other
machine wants to share? And if so how do I put it into the configuration
gui? These are the thngs I have trouble with. (I also don't understand card
game rules and can't add up 2 digit numbers in my head 'cause that means
remembering numbers to carry over, and they disappear in the short time
from one calculation to the next. Maybe it's all related!)
Shelagh
Should I find the relevant files and copy them so you can see where I stand
at the present time?
(should I change the names to protect the innnocent?)
SOM
Internet sharig and file sharing are two completely separate issues.
1) I am on a hub and I have two separate cards (one for the Internet and
one for home/office): setting is much easier and safer, and traffic is
completely separate.Adding a card is cheap and easy.
You set the first card to Internet and try it: if it works you set the
network parameters on second card.
But you have to tell the machine that is a router (see file
/etc/systcl.con)
kernel.sysrq=0
net.ipv4.ip_forward=1
net.ipv4.conf.default.rp_filter=1
kernel.core_uses_pid=1
At this point you must tell the machine that must do some NAT (Network
address translation) by setting appropriate iptables file in
/etc/sysconfig
This is mine...with eth0 card to the internal and ppp0 as Internet
connection
# Firewall configuration written by lokkit
# Manual customization of this file is not recommended.
# Note: ifup-post will punch the current nameservers through the
# firewall; such entries will *not* be listed here.
*filter
:FORWARD DROP [0:0]
:INPUT DROP [0:0]
:OUTPUT ACCEPT [0:0]
-A INPUT -i lo -j ACCEPT
-A INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT
-A FORWARD -i eth0 -j ACCEPT
-A FORWARD -m state --state ESTABLISHED,RELATED -j ACCEPT
-A INPUT -i eth0 -j ACCEPT
COMMIT
# Generated by webmin
*mangle
:FORWARD ACCEPT [0:0]
:INPUT ACCEPT [0:0]
:OUTPUT ACCEPT [0:0]
:PREROUTING ACCEPT [0:0]
:POSTROUTING ACCEPT [0:0]
COMMIT
# Completed
# Generated by webmin
*nat
:PREROUTING ACCEPT [0:0]
:OUTPUT ACCEPT [0:0]
:POSTROUTING ACCEPT [0:0]
-A POSTROUTING -o ppp0 -j MASQUERADE
COMMIT
# Completed
Samba configuration in a separate message after confirmation of
success!!!
In any case I suggest to Install Webmin (that you can download at
Www.webmin.com)
--
"First, do no harm" J.Holt
11:14 p.m.
New subject: Start again on the newbie's networking problem. Re: Need help (of course) setting up network
At 06:54 4/27/2004, you wrote:
My son tells me (we are working on this thing together) that I have an
ethernet card and my external modem is on a serial port. Does this count?
Indeed it does! The point is that you have separate *network interfaces*
for internal and external traffic. My home is set up the same way,
actually: the internal network is on an Ethernet card and the ISDN modem is
connected to the firewall's serial port. So you're Good To Go [tm].
Have you succeeded in connecting to the Internet through your serial port?
If so, what is the name of the port? ppp0, ppp1, what?
However, on the security issue, I don't know that hacking into our
network
would be the most interesting exercise, as my sons both assure me that it
would put any self respecting hacker to sleep and their machines are full
of school essays and compositions and no world shattering secrets at all.
Unfortunately this is not the point. People (mostly script kiddies with no
real knowledge using tools someone else built) *will* attempt to hack into
your network, but they will not be looking for your data. They will instead
be looking to brag about how many machines the "own", and they will be
looking to launch further attacks FROM YOUR MACHINES to hide their identity
and origin. This is, for example, how "Denial of Service" (DoS) attacks are
performed... hack 1,000 innocent bystanders, then use their machines to
attack your target while *never* showing your face directly. And, of
course, the innocent bystanders get blacklisted, banned, and sometimes
prosecuted. As if that weren't enough, some hackers use networks to spread
either virii or spam.
So yes... you _do_ need to secure your network. Your data is irrelevant.
At this present time I would like to just get file tranfer between the
machines up and running. Maybe later worry about letting them on the net,
after all they can use my machine to do so.
We can do both. As you are working on this, do download the latest version
of Shorewall and read the "Two-Interface Quick Guide." I'll help you set it
up, and they'll be on the Net very soon.
I tried to install swat but something is missing or in another
directory,
because when I use the rpm install thing it tells me that it can't find
samba 3.
In order to be able to help you better, please provide more specific
information or just copy-paste data directly from the screen. For example,
please show me the output of running this command as root:
# rpm -qa | grep samba
Also, try this:
# up2date samba-swat
Up2date should be able to solve any dependencies automatically for you.
Note that the default up2date servers provided by Red Hat are usually
swamped and kind of slow... have you switched your up2date to a mirror
server yet? If not, go ahead and run the command anyway... it'll work
albeit slowly, and Alexander Dalloz wrote a quick mini-HOWTO on switching
servers that will help you later.
I hope it explains things like samba shares and the syntax for
entering
these mysteries. Are they things I want to share or can they be things the
other machine wants to share?
Samba is primarily so that your Linux machine can share information with
others. However, there is a program called smbclient (included in Samba,
nothing extra to fetch or install) which can access Windows shares from
Linux, so it really provides two-way communication.
Should I find the relevant files and copy them so you can see where I
stand at the present time?
(should I change the names to protect the innnocent?)
You're welcome to post your /etc/samba/smb.conf file (please refer to
filenames with paths... it's easier for those of us not able to see your
screen). I suggest you run this command (as root, indicated by the # prompt):
# cat /etc/samba/smb.conf | grep -v ^#
The "grep" command is a search. The "-v" parameter tells it *not* to
return
lines which contain the search string, and "^#" means lines that start with
a #. The ^ represents the start of the line. So, cat the file and show only
those lines that do *not* start with a #. That will cut out all the
comments and make the file much easier to put in an email message. Also,
show me this:
# ifconfig -a
# chkconfig --list
All that we are doing is not that hard... you are just starting from
scratch. Do not worry... we'll get you straightened out.
Cheers,
--
Rodolfo J. Paiz
rpaiz(a)simpaticus.com
http://www.simpaticus.com
6:40 a.m.
New subject: Start again on the newbie's networking problem. Re: Need help (of course) setting up network
Around 05:14am on Wednesday, April 28, 2004 (UK time), Rodolfo J. Paiz scrawled:
and origin. This is, for example, how "Denial of Service"
(DoS) attacks are
performed... hack 1,000 innocent bystanders, then use their machines to
attack your target while *never* showing your face directly. And, of
course, the innocent bystanders get blacklisted, banned, and sometimes
prosecuted. As if that weren't enough, some hackers use networks to spread
Have you a cite for the prosecution of someone who was hacked into?
While I agree with you that protection is very important regardless of
the value of any data on the PC, and that unprotected PCs have often
been used for DoS attacks, I would have thought that claiming people
have been prosecuted is scaremongering. As ever, I could well be wrong
'though.
Cheers
Steve
--
(o< www.stevesearle.com
//\ Powered by Fedora Core
V_/_ No MS products were used in the creation of this message
12:35pm up 52 days, 20:59, 1 user, load average: 0.02, 0.06, 0.03
7:05 a.m.
New subject: Start again on the newbie's networking problem. Re: Need help (of course) setting up network
On Wed, 2004-04-28 at 07:40, Steve Searle wrote:
Around 05:14am on Wednesday, April 28, 2004 (UK time), Rodolfo J.
Paiz scrawled:
> and origin. This is, for example, how "Denial of Service" (DoS) attacks
are
> performed... hack 1,000 innocent bystanders, then use their machines to
> attack your target while *never* showing your face directly. And, of
> course, the innocent bystanders get blacklisted, banned, and sometimes
> prosecuted. As if that weren't enough, some hackers use networks to spread
Have you a cite for the prosecution of someone who was hacked into?
While I agree with you that protection is very important regardless of
the value of any data on the PC, and that unprotected PCs have often
been used for DoS attacks, I would have thought that claiming people
have been prosecuted is scaremongering. As ever, I could well be wrong
'though.
Cheers
Steve
In any case it's not worth some law enforcement officials showing up at
your door and "borrowing" your hard drive(s) for several months.
--
jludwig <wralphie(a)comcast.net>
9:49 a.m.
New subject: Start again on the newbie's networking problem. Re: Need help (of course) setting up network
On Wed, Apr 28, 2004 at 08:05:09AM -0400, jludwig wrote:
On Wed, 2004-04-28 at 07:40, Steve Searle wrote:
> Around 05:14am on Wednesday, April 28, 2004 (UK time), Rodolfo J. Paiz scrawled:
>
> > and origin. This is, for example, how "Denial of Service" (DoS)
attacks are
> > performed... hack 1,000 innocent bystanders, then use their machines to
> > attack your target while *never* showing your face directly. And, of
> > course, the innocent bystanders get blacklisted, banned, and sometimes
> > prosecuted. As if that weren't enough, some hackers use networks to spread
>
> Have you a cite for the prosecution of someone who was hacked into?
> While I agree with you that protection is very important regardless of
> the value of any data on the PC, and that unprotected PCs have often
> been used for DoS attacks, I would have thought that claiming people
> have been prosecuted is scaremongering. As ever, I could well be wrong
> 'though.
>
> Cheers
>
> Steve
In any case it's not worth some law enforcement officials showing up at
your door and "borrowing" your hard drive(s) for several months.
I think they take everything you own and it's up to you to prove your
innocence. Even if you are innocent, how do you get compensated for
such actions. This could go on for months or years and you may never
get your property or your life back.
Then again, sooner or later they have to let you out, right:)
Better to trash your drives before it happens. Of course if you are
paranoid for no reason, you may be wasting your time and money.
jay
9:57 a.m.
New subject: Start again on the newbie's networking problem. Re: Need help (of course) setting up network
Around 03:49pm on Wednesday, April 28, 2004 (UK time), Jay Daniels scrawled:
On Wed, Apr 28, 2004 at 08:05:09AM -0400, jludwig wrote:
> On Wed, 2004-04-28 at 07:40, Steve Searle wrote:
> > Around 05:14am on Wednesday, April 28, 2004 (UK time), Rodolfo J. Paiz
scrawled:
> >
> > > and origin. This is, for example, how "Denial of Service" (DoS)
attacks are
> > > performed... hack 1,000 innocent bystanders, then use their machines to
> > > attack your target while *never* showing your face directly. And, of
> > > course, the innocent bystanders get blacklisted, banned, and sometimes
> > > prosecuted. As if that weren't enough, some hackers use networks to
spread
> >
> > Have you a cite for the prosecution of someone who was hacked into?
> > While I agree with you that protection is very important regardless of
> > the value of any data on the PC, and that unprotected PCs have often
> > been used for DoS attacks, I would have thought that claiming people
> > have been prosecuted is scaremongering. As ever, I could well be wrong
> > 'though.
> >
> > Cheers
> >
> > Steve
> In any case it's not worth some law enforcement officials showing up at
> your door and "borrowing" your hard drive(s) for several months.
I think they take everything you own and it's up to you to prove your
innocence. Even if you are innocent, how do you get compensated for
such actions. This could go on for months or years and you may never
get your property or your life back.
I suspect in this heavy handed law enforcement scenario, having a
properly configure firewall is not going to be much use. I still would
like to see some evidence of people being prosecuted because they have
allowed their computer to be hacked.
Steve
--
(o< www.stevesearle.com
//\ Powered by Fedora Core
V_/_ No MS products were used in the creation of this message
3:54pm up 53 days, 18 min, 3 users, load average: 0.11, 0.13, 0.10
12:25 p.m.
New subject: Start again on the newbie's networking problem. Re: Need help (of course) setting up network
On Wed, 2004-04-28 at 10:57, Steve Searle wrote:
Around 03:49pm on Wednesday, April 28, 2004 (UK time), Jay Daniels
scrawled:
>
> On Wed, Apr 28, 2004 at 08:05:09AM -0400, jludwig wrote:
> > On Wed, 2004-04-28 at 07:40, Steve Searle wrote:
> > > Around 05:14am on Wednesday, April 28, 2004 (UK time), Rodolfo J. Paiz
scrawled:
> > >
> > > > and origin. This is, for example, how "Denial of Service"
(DoS) attacks are
> > > > performed... hack 1,000 innocent bystanders, then use their machines
to
> > > > attack your target while *never* showing your face directly. And, of
> > > > course, the innocent bystanders get blacklisted, banned, and
sometimes
> > > > prosecuted. As if that weren't enough, some hackers use networks
to spread
> > >
> > > Have you a cite for the prosecution of someone who was hacked into?
> > > While I agree with you that protection is very important regardless of
> > > the value of any data on the PC, and that unprotected PCs have often
> > > been used for DoS attacks, I would have thought that claiming people
> > > have been prosecuted is scaremongering. As ever, I could well be wrong
> > > 'though.
> > >
> > > Cheers
> > >
> > > Steve
> > In any case it's not worth some law enforcement officials showing up at
> > your door and "borrowing" your hard drive(s) for several months.
>
> I think they take everything you own and it's up to you to prove your
> innocence. Even if you are innocent, how do you get compensated for
> such actions. This could go on for months or years and you may never
> get your property or your life back.
I suspect in this heavy handed law enforcement scenario, having a
properly configure firewall is not going to be much use. I still would
like to see some evidence of people being prosecuted because they have
allowed their computer to be hacked.
Steve
There are sites that deal with computer forensics. The issue here is
that your computer or hard drive becomes "evidence". They upon
inspection of your system would/could quickly determine that your system
was a "zombie". But a knife, car, etc., used in a crime becomes evidence
and might never be returned.
--
jludwig <wralphie(a)comcast.net>
7:08 a.m.
New subject: Start again on the newbie's networking problem. Re: Need help (of course) setting up network
So, I see that it is important to have a good firewall on the net. I must
tell some of my more innocent friends.
PS. I am planning on doing those things you suggested, but it may take me a
while. So if you don't hear from me for don't think I've disappeared, just
very slow and time limited.
Shelagh
On Wed, 28 Apr 2004 13:25:03 -0400, jludwig <wralphie(a)comcast.net> wrote:
On Wed, 2004-04-28 at 10:57, Steve Searle wrote:
> Around 03:49pm on Wednesday, April 28, 2004 (UK time), Jay Daniels
> scrawled:
>
> > > On Wed, Apr 28, 2004 at 08:05:09AM -0400, jludwig wrote:
> > > On Wed, 2004-04-28 at 07:40, Steve Searle wrote:
> > > > Around 05:14am on Wednesday, April 28, 2004 (UK time), Rodolfo J.
> Paiz scrawled:
> > > > > > > > and origin. This is, for example, how "Denial
of Service"
> (DoS) attacks are > > > > performed... hack 1,000 innocent bystanders,
> then use their machines to > > > > attack your target while *never*
> showing your face directly. And, of > > > > course, the innocent
> bystanders get blacklisted, banned, and sometimes > > > > prosecuted. As
> if that weren't enough, some hackers use networks to spread > > > >
> >
> Have you a cite for the prosecution of someone who was hacked into?
> > > > While I agree with you that protection is very important
> regardless of
> > > > the value of any data on the PC, and that unprotected PCs have
> often
> > > > been used for DoS attacks, I would have thought that claiming
> people
> > > > have been prosecuted is scaremongering. As ever, I could well be
> wrong
> > > > 'though.
> > > > > > > Cheers
> > > > > > > Steve
> > > In any case it's not worth some law enforcement officials showing up
> at
> > > your door and "borrowing" your hard drive(s) for several months.
> > > I think they take everything you own and it's up to you to prove
> your
> > innocence. Even if you are innocent, how do you get compensated for
> > such actions. This could go on for months or years and you may never
> > get your property or your life back.
>
> I suspect in this heavy handed law enforcement scenario, having a
> properly configure firewall is not going to be much use. I still would
> like to see some evidence of people being prosecuted because they have
> allowed their computer to be hacked.
>
> Steve
There are sites that deal with computer forensics. The issue here is
that your computer or hard drive becomes "evidence". They upon
inspection of your system would/could quickly determine that your system
was a "zombie". But a knife, car, etc., used in a crime becomes evidence
and might never be returned.
-- jludwig <wralphie(a)comcast.net>
--
"First, do no harm" J.Holt
11 a.m.
New subject: Start again on the newbie's networking problem. Re: Need help (of course) setting up network
On Tue, 27 Apr 2004 22:14:02 -0600, Rodolfo J. Paiz <rpaiz(a)simpaticus.com>
wrote:
We can do both. As you are working on this, do download the latest
version of Shorewall and read the "Two-Interface Quick Guide." I'll help
you set it up, and they'll be on the Net very soon.
I have downloaded this, but not installed yet. Soon, soon.
I mentioned that I stuffed my firewall settings a couple of days ago. I
installed firestarter in the mistaken belief that it might help me
understand what is going on. What happens now is that wheb I start up, the
computer doesn't recognise the ppp0 interface. Yet, I have opened kppp and
used evolution successfully. Now I don't want to install another firewall
utility which may conflict with firestarter (even more!). So, how do I get
rid of it? Or do you know of it and can help me to set it up properly? (I
can imagine you tearing your hair out in despair!)
In order to be able to help you better, please provide more specific
information or just copy-paste data directly from the screen. For
example, please show me the output of running this command as root:
# rpm -qa | grep samba
results from this:
# rpm -qa | grep samba
samba-client-3.0.0-15
samba-common-3.0.0-15
samba-3.0.0-15
redhat-config-samba-1.1.4-1
Also, try this:
# up2date samba-swat
I tried this and it said I needed some public GPG (PGP?) keys. What does
this mean? I did not get fedora from an official package and maybe I should
not be accessing official sites for packages. What do you suggest? I notice
another thread where someone uses yum and offer a yum.conf file to drop in
the correct directory. Would that be more appropriate? or maybe I need to
change the repository to another one now before I downlaod swat?
Up2date should be able to solve any dependencies automatically for you.
Note that the default up2date servers provided by Red Hat are usually
swamped and kind of slow... have you switched your up2date to a mirror
server yet? If not, go ahead and run the command anyway... it'll work
albeit slowly, and Alexander Dalloz wrote a quick mini-HOWTO on switching
servers that will help you later.
What's the ettyket for leaving out bits? [snip]?
You're welcome to post your /etc/samba/smb.conf file (please refer to
filenames with paths... it's easier for those of us not able to see your
screen). I suggest you run this command (as root, indicated by the #
prompt):
# cat /etc/samba/smb.conf | grep -v ^#
result of /etc/samba/smb.conf | grep -v ^#
workgroup = MYGROUP
server string = Samba Server
; hosts allow = 192.168.1. 192.168.2. 127.
printcap name = /etc/printcap
load printers = yes
; printing = bsd
; guest account = pcguest
log file = /var/log/samba/%m.log
max log size = 50
; password server = <NT-Server-Name>
; password level = 8
; username level = 8
; encrypt passwords = yes
; smb passwd file = /etc/samba/smbpasswd
; unix password sync = Yes
; passwd program = /usr/bin/passwd %u
; passwd chat = *New*UNIX*password* %n\n *ReType*new*UNIX*password* %n\n
*passwd:*all*authentication*tokens*updated*successfully*
; username map = /etc/samba/smbusers
; include = /etc/samba/smb.conf.%m
socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
; interfaces = 192.168.12.2/24 192.168.13.2/24
; remote browse sync = 192.168.3.25 192.168.5.255
; remote announce = 192.168.1.255 192.168.2.44
; local master = no
; os level = 33
; domain master = yes
; preferred master = yes
; domain logons = yes
; logon script = %m.bat
; logon script = %U.bat
; logon path = \\%L\Profiles\%U
; name resolve order = wins lmhosts bcast
; wins support = yes
; wins server = w.x.y.z
; wins proxy = yes
dns proxy = no
; preserve case = no
; short preserve case = no
; default case = lower
; case sensitive = no
[homes]
comment = Home Directories
browseable = no
writeable = yes
; [netlogon]
; comment = Network Logon Service
; path = /home/netlogon
; guest ok = yes
; writable = no
; share modes = no
;[Profiles]
; path = /home/profiles
; browseable = no
; guest ok = yes
[printers]
comment = All Printers
path = /var/spool/samba
browseable = no
printable = yes
;[tmp]
; comment = Temporary file space
; path = /tmp
; read only = no
; public = yes
;[public]
; comment = Public Stuff
; path = /home/samba
; public = yes
; read only = yes
; write list = @staff
;[fredsprn]
; comment = Fred's Printer
; valid users = fred
; path = /homes/fred
; printer = freds_printer
; public = no
; writable = no
; printable = yes
;[fredsdir]
; comment = Fred's Service
; path = /usr/somewhere/private
; valid users = fred
; public = no
; writable = yes
; printable = no
;[pchome]
; comment = PC Directories
; path = /usr/pc/%m
; public = no
; writable = yes
;[public]
; path = /usr/somewhere/else/public
; public = yes
; only guest = yes
; writable = yes
; printable = no
;[myshare]
; comment = Mary's and Fred's stuff
; path = /usr/somewhere/shared
; valid users = mary fred
; public = no
; writable = yes
; printable = no
; create mask = 0765
[home]
comment = personal directories
path = /home
writeable = yes
guest ok = yes
Which, from all the ;comments, I haven't done much to change the samba
settings at all yet. Sigh!
Also, show me this:
# ifconfig -a
results of #ifconfig -a
eth0 Link encap:Ethernet HWaddr 00:03:CE:89:69:EA
inet addr:192.168.32.0 Bcast:192.168.32.255 Mask:255.255.255.0
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
RX packets:88 errors:0 dropped:0 overruns:0 frame:0
TX packets:94 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:1000
RX bytes:8024 (7.8 Kb) TX bytes:15304 (14.9 Kb)
Interrupt:11 Base address:0x8000
lo Link encap:Local Loopback
inet addr:127.0.0.1 Mask:255.0.0.0
UP LOOPBACK RUNNING MTU:16436 Metric:1
RX packets:2414 errors:0 dropped:0 overruns:0 frame:0
TX packets:2414 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:0
RX bytes:1814739 (1.7 Mb) TX bytes:1814739 (1.7 Mb)
# chkconfig --list
results of # chkconfig --list
gpm 0:off 1:off 2:on 3:on 4:on 5:on 6:off
kudzu 0:off 1:off 2:off 3:on 4:on 5:on 6:off
syslog 0:off 1:off 2:on 3:on 4:on 5:on 6:off
rawdevices 0:off 1:off 2:off 3:on 4:on 5:on 6:off
netfs 0:off 1:off 2:off 3:on 4:on 5:on 6:off
network 0:off 1:off 2:on 3:on 4:on 5:on 6:off
random 0:off 1:off 2:on 3:on 4:on 5:on 6:off
saslauthd 0:off 1:off 2:off 3:off 4:off 5:off 6:off
iptables 0:off 1:off 2:off 3:off 4:off 5:off 6:off
anacron 0:off 1:off 2:on 3:on 4:on 5:on 6:off
atd 0:off 1:off 2:off 3:on 4:on 5:on 6:off
irda 0:off 1:off 2:off 3:off 4:off 5:off 6:off
acpid 0:off 1:off 2:off 3:on 4:on 5:on 6:off
apmd 0:off 1:off 2:on 3:on 4:on 5:on 6:off
irqbalance 0:off 1:off 2:off 3:on 4:on 5:on 6:off
pcmcia 0:off 1:off 2:on 3:on 4:on 5:on 6:off
nfslock 0:off 1:off 2:off 3:on 4:on 5:on 6:off
nfs 0:off 1:off 2:off 3:off 4:off 5:off 6:off
microcode_ctl 0:off 1:off 2:on 3:on 4:on 5:on 6:off
smartd 0:off 1:off 2:on 3:on 4:on 5:on 6:off
isdn 0:off 1:off 2:on 3:on 4:on 5:on 6:off
autofs 0:off 1:off 2:off 3:on 4:on 5:on 6:off
sshd 0:off 1:off 2:on 3:on 4:on 5:on 6:off
identd 0:off 1:off 2:off 3:off 4:off 5:off 6:off
portmap 0:off 1:off 2:off 3:on 4:on 5:on 6:off
spamassassin 0:off 1:off 2:on 3:on 4:on 5:on 6:off
sendmail 0:off 1:off 2:on 3:on 4:on 5:on 6:off
rhnsd 0:off 1:off 2:off 3:on 4:on 5:on 6:off
crond 0:off 1:off 2:on 3:on 4:on 5:on 6:off
yum 0:off 1:off 2:off 3:off 4:off 5:on 6:off
tux 0:off 1:off 2:off 3:off 4:off 5:off 6:off
aep1000 0:off 1:off 2:off 3:off 4:off 5:off 6:off
bcm5820 0:off 1:off 2:off 3:off 4:off 5:off 6:off
httpd 0:off 1:off 2:off 3:off 4:off 5:off 6:off
squid 0:off 1:off 2:off 3:off 4:off 5:off 6:off
winbind 0:off 1:off 2:off 3:off 4:off 5:on 6:off
smb 0:off 1:off 2:off 3:off 4:off 5:on 6:off
messagebus 0:off 1:off 2:off 3:on 4:on 5:on 6:off
snmpd 0:off 1:off 2:off 3:off 4:off 5:off 6:off
snmptrapd 0:off 1:off 2:off 3:off 4:off 5:off 6:off
hpoj 0:off 1:off 2:on 3:on 4:on 5:on 6:off
xfs 0:off 1:off 2:on 3:on 4:on 5:on 6:off
xinetd 0:off 1:off 2:off 3:on 4:on 5:on 6:off
cups 0:off 1:off 2:on 3:on 4:on 5:on 6:off
named 0:off 1:off 2:off 3:off 4:off 5:off 6:off
ntpd 0:off 1:off 2:off 3:off 4:off 5:off 6:off
vncserver 0:off 1:off 2:off 3:off 4:off 5:off 6:off
lisa 0:off 1:off 2:off 3:off 4:off 5:on 6:off
vsftpd 0:off 1:off 2:off 3:off 4:off 5:off 6:off
canna 0:off 1:off 2:on 3:on 4:on 5:off 6:off
FreeWnn 0:off 1:off 2:on 3:on 4:on 5:off 6:off
dovecot 0:off 1:off 2:off 3:off 4:off 5:off 6:off
dhcrelay 0:off 1:off 2:off 3:off 4:off 5:off 6:off
rwhod 0:off 1:off 2:off 3:off 4:off 5:off 6:off
kadmin 0:off 1:off 2:off 3:off 4:off 5:off 6:off
kprop 0:off 1:off 2:off 3:off 4:off 5:off 6:off
krb524 0:off 1:off 2:off 3:off 4:off 5:off 6:off
krb5kdc 0:off 1:off 2:off 3:off 4:off 5:off 6:off
dhcpd 0:off 1:off 2:off 3:off 4:off 5:off 6:off
radvd 0:off 1:off 2:off 3:off 4:off 5:off 6:off
amd 0:off 1:off 2:off 3:off 4:off 5:off 6:off
yppasswdd 0:off 1:off 2:off 3:off 4:off 5:off 6:off
ypserv 0:off 1:off 2:off 3:off 4:off 5:off 6:off
ypxfrd 0:off 1:off 2:off 3:off 4:off 5:off 6:off
innd 0:off 1:off 2:off 3:off 4:off 5:off 6:off
mysqld 0:off 1:off 2:off 3:off 4:off 5:off 6:off
postgresql 0:off 1:off 2:off 3:off 4:off 5:off 6:off
wine 0:off 1:off 2:on 3:on 4:on 5:on 6:off
firestarter 0:off 1:off 2:on 3:on 4:on 5:on 6:off
webmin 0:off 1:off 2:on 3:on 4:off 5:on 6:off
xinetd based services:
krb5-telnet: off
rsync: off
eklogin: off
gssftp: off
klogin: off
chargen-udp: off
kshell: off
chargen: off
daytime-udp: off
daytime: off
echo-udp: off
echo: off
services: off
time: off
time-udp: off
cups-lpd: off
sgi_fam: on
ktalk: off
imap: off
imaps: off
ipop2: off
ipop3: off
pop3s: off
rexec: off
rlogin: off
rsh: off
amandaidx: off
amidxtape: off
finger: off
ntalk: off
talk: off
telnet: off
amanda: off
My note; winbind says it is working in level 5 but when I start up the
messages say that winbind fail. Is this also related to Samba? Is it a
service I need? Do I need DNS? Surely I can gat away with not having it?
All that we are doing is not that hard... you are just starting from
scratch. Do not worry... we'll get you straightened out.
I really appreciate
the effort that this takes, to help me.
Shelagh
Cheers,
10:10 a.m.
At 13:41 4/26/2004, you wrote:
Did starting a new thread help? Hope so. But it looks confusing to me.
All that happens is that the mailing-list software adds "In-Reply-To" and
other headers (which you normally don't see) which explain who answered
whom and keeps the conversation in a logical order, for those email clients
that support it. Each conversation is called a "thread" and simply changing
the subject line does not start a new thread. So, if you reply to a thread
about compiler inefficiencies and change the subject, most people will
simply delete the entire thread because they're not interested in it, and
you won't get any replies.
That's why it's best to start a new thread (simply by starting a new
message instead of replying), so that everyone sees your message and you
start your own conversation. This also helps people reading through or
searching through the archives later on, which are organized by thread.
We are on a hub so I don't need 2 ethernet cards.
You should make all the Windows machines go *through* the Linux machine to
get to the Internet, since it is a great (free) opportunity to improve your
security and protection drastically by setting up the firewall on Linux.
That's what my first response was about... setting up the firewall with
Shorewall.
However, in order to do this you *do* need to separate your internal
computer from the network. The single best way ("best demonstrated
practice") is to add a second network card to your Linux box and connect
one card to the Internet and one card to your hub. That way nothing from
the outside can get to your vulnerable Windows boxes without going through
the much safer Linux box. You /can/ get networking functioning with only
one network card, but it is so insecure that it's not worth the effort. You
also introduce certain traffic and routing-related complications that don't
happen with two cards.
So really... as a *very strong* suggestion: get a second network card.
You'll improve your network and your security and your peace of mind a
great deal.
My big problem is I don't know how to configure the networking
files and
samba.
From GNOME, there is System Tools --> Network. Surely there is a similar
configuration screen in KDE. Please read the instructions before using,
since the Network Configuration utility allows you to use different
profiles and is very flexible, but you *can* make mistakes. Of course, if
this is a desktop machine and you're never going to change the profile,
then it's very easy to use.
For Samba, make sure that SWAT is installed. (I forget how to check that in
Fedora... if you can't find it I'll look it up). SWAT will help you
configure Samba through a web browser and is very capable as well as easy.
This is from the Hippocratic Oath... who the heck is J. Holt?
This is in the context of education. J Holt tried to reform education in
America in the 60s & 70s. And yes he probably did quote from the
Hippocratic oath. SOM
OK. In this case, however, you may want to modify the quote so it doesn't
look like Mr. Holt plagiarized Hippocrates. You're trying to make him look
good, right? <smile>
Cheers,
--
Rodolfo J. Paiz
rpaiz(a)simpaticus.com
http://www.simpaticus.com
11:50 a.m.
New subject: Need help (of course) setting up network
Well I guess it was too good to be true. Some one to help me. Sorry for
bothering you with my problems I'll just struggle through on my own.
See you (maybe)
Som
On Tue, 27 Apr 2004 05:41:52 +1000, Shelagh Manton <oneida(a)tpg.com.au>
wrote:
At 13:00 4/25/2004, you wrote:
I installed Fedora Core 1 and everything seems to be working well,
including being able to use the internet. (Although, I think I stuffed up
my firewall settings yesterday). However I need the help of a kind
patient person who can walk me through our simple 3 computer network
setup. I am the only one on Linux, the other two are on WindowsXP. Mine
however is the only computer with internet access.
You're going to need to provide a lot more detail when you ask a
question, but we'll try to help you.
Now, assuming that your computer (A) connects to the Internet and that
the other two computers (B and C) run WinXP and connect to yours, I
suggest you:
1. First make sure that you have two Ethernet cards in your A computer,
and that A can connect to the Internet *and* to B and C.
2. Once basic networking has been established (don't worry about the rest
of it until then), go to http://www.shorewall.net and download the
Shorewall RPM package. Also download the "Two-Interface Quick Guide" and
it will show you how to give B and C access to the Internet via A.
Post back here if you have more questions. And remember, when starting a
new conversation, press the button in your mail program for a *new*
message... do not reply to an existing message since this confuses the
threads.
Did starting a new thread help? Hope so. But it looks confusing to me.
OK. My machine is dual booted win98/Fedora 1. Networking has worked fine
with windows, but my 14 year old son sorted that out. We are on a hub so
I don't need 2 ethernet cards. My big problem is I don't know how to
configure the networking files and samba. Also LIsa won't start up for me
which I think is another init config file problem (eg me being blonde
again!). Please tell me what kind of other information you need to know.
I like to use the KDE desk top and have somewhere picked up a utility
called smb4k which looks like a gui samba configuration interface and
network neighbourhood thingy in one. (But the documentation is primitive
to say the least). I feel like I probably need to start from scratch.
Shelagh
Cheers,
"First, do no harm" J.Holt
Huh?
This is from the Hippocratic Oath... who the heck is J. Holt?
This is in the context of education. J Holt tried to reform education in
America in the 60s & 70s. And yes he probably did quote from the
Hippocratic oath. SOM
10:05 p.m.
New subject: Need help (of course) setting up network
On Tue, 2004-05-04 at 12:50, Shelagh Manton wrote:
Well I guess it was too good to be true. Some one to help me. Sorry
for
bothering you with my problems I'll just struggle through on my own.
See you (maybe)
Som
On Tue, 27 Apr 2004 05:41:52 +1000, Shelagh Manton <oneida(a)tpg.com.au>
wrote:
> At 13:00 4/25/2004, you wrote:
> I installed Fedora Core 1 and everything seems to be working well,
> including being able to use the internet. (Although, I think I stuffed up
> my firewall settings yesterday). However I need the help of a kind
> patient person who can walk me through our simple 3 computer network
> setup. I am the only one on Linux, the other two are on WindowsXP. Mine
> however is the only computer with internet access.
> You're going to need to provide a lot more detail when you ask a
> question, but we'll try to help you.
> Now, assuming that your computer (A) connects to the Internet and that
> the other two computers (B and C) run WinXP and connect to yours, I
> suggest you:
> 1. First make sure that you have two Ethernet cards in your A computer,
> and that A can connect to the Internet *and* to B and C.
> 2. Once basic networking has been established (don't worry about the rest
> of it until then), go to http://www.shorewall.net and download the
> Shorewall RPM package. Also download the "Two-Interface Quick Guide" and
> it will show you how to give B and C access to the Internet via A.
> Post back here if you have more questions. And remember, when starting a
> new conversation, press the button in your mail program for a *new*
> message... do not reply to an existing message since this confuses the
> threads.
>
> Did starting a new thread help? Hope so. But it looks confusing to me.
>
> OK. My machine is dual booted win98/Fedora 1. Networking has worked fine
> with windows, but my 14 year old son sorted that out. We are on a hub so
> I don't need 2 ethernet cards. My big problem is I don't know how to
> configure the networking files and samba. Also LIsa won't start up for me
> which I think is another init config file problem (eg me being blonde
> again!). Please tell me what kind of other information you need to know.
> I like to use the KDE desk top and have somewhere picked up a utility
> called smb4k which looks like a gui samba configuration interface and
> network neighbourhood thingy in one. (But the documentation is primitive
> to say the least). I feel like I probably need to start from scratch.
>
> Shelagh
> Cheers,
> "First, do no harm" J.Holt
> Huh?
> This is from the Hippocratic Oath... who the heck is J. Holt?
> This is in the context of education. J Holt tried to reform education in
> America in the 60s & 70s. And yes he probably did quote from the
> Hippocratic oath. SOM
Just received this posting.
1) Under Start>System Settings>Network(Network Configuration) is the GUI
program (needs the root password).
2) If your son could do the Windoz setup he should have no problems with
this if you can't figure it out.
3) Any other info fire back anouther post on this thread. -- It took 11
hours for me to see/get it.
--
jludwig <wralphie(a)comcast.net>
11:55 p.m.
New subject: Need help (of course) setting up network
At 10:50 5/4/2004, you wrote:
Well I guess it was too good to be true. Some one to help me. Sorry
for
bothering you with my problems I'll just struggle through on my own.
You're kidding, right? I'm still waiting to see your last message... or
perhaps I missed it.
Given that everyone and anyone will be attempting to help you remotely,
without being able to see or touch the system, and because of the many
limitations this imposes, you really *are* supposed to figure things out
yourself. However, we *will* do our best to help you. I've been on the Red
Hat List at least a good six or seven years now... and I've both given and
received a great deal of help in that time, so I'm not going away. Neither
is anyone else.
Post again with your current status and whatever you've tried, or point me
to any previous message you posted which I might have missed. You can
copy/paste or provide a URL, whatever is easier. Don't get all ruffled,
though... no one is purposely ignoring you or "dissing" you as they in the
States would say. If you don't get a useful answer, then probably:
1. no one can think of anything useful to suggest
2. you have not formulated the question well
3. you need to provide a lot more detail
4. people who could help you (or try) didn't read the message
Try again!
Cheers,
--
Rodolfo J. Paiz
rpaiz(a)simpaticus.com
http://www.simpaticus.com
10:01 a.m.
New subject: Need help (of course) setting up network
On Tuesday 04 May 2004 09:55 pm, Rodolfo J. Paiz wrote:
You're kidding, right? I'm still waiting to see your last
message...
or perhaps I missed it.
No, Rodolfo, you didn't miss it. You responded helpfully, over a week
ago.
As did a bunch of others, though the thread did get offtrack a bit for a
while.
Here's what Shelagh last wrote on this thread, one week ago today:
<snip>
So, I see that it is important to have a good firewall on the net. I
must tell some of my more innocent friends.
PS. I am planning on doing those things you suggested, but it may take
me a while. So if you don't hear from me for don't think I've
disappeared, just very slow and time limited.
</snip>
My recommendation to Shelagh would be to be more careful about what he
says, and how he says it, to those of us who can help him.
See my reply to Shelagh as well...
Jeff
--
Jeff Lasman, nobaloney.net, P. O. Box 52672, Riverside, CA 92517 US
Professional Internet Services & Support / Consulting / Colocation
Our blists address used on lists is for list email only
Phone +1 909 324-9706, or see: "http://www.nobaloney.net/contactus.html"
2:03 p.m.
New subject: Need help (of course) setting up network
On Tue, 04 May 2004 22:55:29 -0600, Rodolfo J. Paiz <rpaiz(a)simpaticus.com>
wrote:
At 10:50 5/4/2004, you wrote:
> Well I guess it was too good to be true. Some one to help me. Sorry for
> bothering you with my problems I'll just struggle through on my own.
You're kidding, right? I'm still waiting to see your last message... or
perhaps I missed it.
Given that everyone and anyone will be attempting to help you remotely,
without being able to see or touch the system, and because of the many
limitations this imposes, you really *are* supposed to figure things out
yourself. However, we *will* do our best to help you. I've been on the
Red Hat List at least a good six or seven years now... and I've both
given and received a great deal of help in that time, so I'm not going
away. Neither is anyone else.
Post again with your current status and whatever you've tried, or point
me to any previous message you posted which I might have missed. You can
copy/paste or provide a URL, whatever is easier. Don't get all ruffled,
though... no one is purposely ignoring you or "dissing" you as they in
the States would say. If you don't get a useful answer, then probably:
1. no one can think of anything useful to suggest
2. you have not formulated the question well
3. you need to provide a lot more detail
4. people who could help you (or try) didn't read the message
Try again!
Cheers,
Sorry about the brain storm. I knew as soon as I'd sent it that it was
stupid. I did send my reply with the results of what you had sked me in it
on the Saturday (accoding to my e-mail program and did get it back into my
inbox as you would expect and that was the last I heard of it till I posted
without checking if it had really got to the list). I also appear to not be
getting some of my mail (missing posts) or very late.
Sorry again.
Do you want me to start again? Maybe even re-install.(I'm getting quite
good at that). Just to have a clean start with no stupid mistakes messing
up the picture.
Shelagh
9:47 a.m.
New subject: Need help (of course) setting up network
At 13:03 5/6/2004, you wrote:
Do you want me to start again? Maybe even re-install.(I'm getting
quite
good at that). Just to have a clean start with no stupid mistakes messing
up the picture.
As you wish. As long as you're clear about what you're doing, the point is
to both fix the problem and show you how to fix such a thing yourself in
the future. So we can work on the system you have now, or you can
reinstall. Just tell us what's going on so we have a good picture of the
situation.
Cheers,
--
Rodolfo J. Paiz
rpaiz(a)simpaticus.com
http://www.simpaticus.com
1:04 p.m.
New subject: Need help (of course) setting up network
On Fri, 07 May 2004 08:47:23 -0600, Rodolfo J. Paiz <rpaiz(a)simpaticus.com>
wrote:
At 13:03 5/6/2004, you wrote:
> Do you want me to start again? Maybe even re-install.(I'm getting quite
> good at that). Just to have a clean start with no stupid mistakes
> messing up the picture.
As you wish. As long as you're clear about what you're doing, the point
is to both fix the problem and show you how to fix such a thing yourself
in the future. So we can work on the system you have now, or you can
reinstall. Just tell us what's going on so we have a good picture of the
situation.
Cheers,
Ok, a gracious freshstart. I will reinstall, for tow reasons, I installed
Firestarter in the hope that it would help me to work out what was
happening to my network. (Before I worked out that the firewall has no
effext on our lan). Now I am having problems with my firewall, possibley
not having a functioning firewall at all. Two, I installed everything,
including things I don't need or want and I really can't work out how to
uninstall those things. One day I hope to. So, for now I will send you the
results of the instructions you gave me. I know they will not apply in the
new setup, or maybe they will because I'm likely to do the same things and
falter at the same steps.
results from this:
# rpm -qa | grep samba
samba-client-3.0.0-15
samba-common-3.0.0-15
samba-3.0.0-15
redhat-config-samba-1.1.4-1
result of /etc/samba/smb.conf | grep -v ^#
workgroup = MYGROUP
server string = Samba Server
; hosts allow = 192.168.1. 192.168.2. 127.
printcap name = /etc/printcap
load printers = yes
; printing = bsd
; guest account = pcguest
log file = /var/log/samba/%m.log
max log size = 50
; password server = <NT-Server-Name>
; password level = 8
; username level = 8
; encrypt passwords = yes
; smb passwd file = /etc/samba/smbpasswd
; unix password sync = Yes
; passwd program = /usr/bin/passwd %u
; passwd chat = *New*UNIX*password* %n\n *ReType*new*UNIX*password* %n\n
*passwd:*all*authentication*tokens*updated*successfully*
; username map = /etc/samba/smbusers
; include = /etc/samba/smb.conf.%m
socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
; interfaces = 192.168.12.2/24 192.168.13.2/24
; remote browse sync = 192.168.3.25 192.168.5.255
; remote announce = 192.168.1.255 192.168.2.44
; local master = no
; os level = 33
; domain master = yes
; preferred master = yes
; domain logons = yes
; logon script = %m.bat
; logon script = %U.bat
; logon path = \\%L\Profiles\%U
; name resolve order = wins lmhosts bcast
; wins support = yes
; wins server = w.x.y.z
; wins proxy = yes
dns proxy = no
; preserve case = no
; short preserve case = no
; default case = lower
; case sensitive = no
[homes]
comment = Home Directories
browseable = no
writeable = yes
; [netlogon]
; comment = Network Logon Service
; path = /home/netlogon
; guest ok = yes
; writable = no
; share modes = no
;[Profiles]
; path = /home/profiles
; browseable = no
; guest ok = yes
[printers]
comment = All Printers
path = /var/spool/samba
browseable = no
printable = yes
;[tmp]
; comment = Temporary file space
; path = /tmp
; read only = no
; public = yes
;[public]
; comment = Public Stuff
; path = /home/samba
; public = yes
; read only = yes
; write list = @staff
;[fredsprn]
; comment = Fred's Printer
; valid users = fred
; path = /homes/fred
; printer = freds_printer
; public = no
; writable = no
; printable = yes
;[fredsdir]
; comment = Fred's Service
; path = /usr/somewhere/private
; valid users = fred
; public = no
; writable = yes
; printable = no
;[pchome]
; comment = PC Directories
; path = /usr/pc/%m
; public = no
; writable = yes
;[public]
; path = /usr/somewhere/else/public
; public = yes
; only guest = yes
; writable = yes
; printable = no
;[myshare]
; comment = Mary's and Fred's stuff
; path = /usr/somewhere/shared
; valid users = mary fred
; public = no
; writable = yes
; printable = no
; create mask = 0765
[home]
comment = personal directories
path = /home
writeable = yes
guest ok = yes
results of #ifconfig -a
eth0 Link encap:Ethernet HWaddr 00:03:CE:89:69:EA
inet addr:192.168.32.0 Bcast:192.168.32.255 Mask:255.255.255.0
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
RX packets:88 errors:0 dropped:0 overruns:0 frame:0
TX packets:94 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:1000
RX bytes:8024 (7.8 Kb) TX bytes:15304 (14.9 Kb)
Interrupt:11 Base address:0x8000
lo Link encap:Local Loopback
inet addr:127.0.0.1 Mask:255.0.0.0
UP LOOPBACK RUNNING MTU:16436 Metric:1
RX packets:2414 errors:0 dropped:0 overruns:0 frame:0
TX packets:2414 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:0
RX bytes:1814739 (1.7 Mb) TX bytes:1814739 (1.7 Mb)
# chkconfig --list
results of # chkconfig --list
gpm 0:off 1:off 2:on 3:on 4:on 5:on 6:off
kudzu 0:off 1:off 2:off 3:on 4:on 5:on 6:off
syslog 0:off 1:off 2:on 3:on 4:on 5:on 6:off
rawdevices 0:off 1:off 2:off 3:on 4:on 5:on 6:off
netfs 0:off 1:off 2:off 3:on 4:on 5:on 6:off
network 0:off 1:off 2:on 3:on 4:on 5:on 6:off
random 0:off 1:off 2:on 3:on 4:on 5:on 6:off
saslauthd 0:off 1:off 2:off 3:off 4:off 5:off 6:off
iptables 0:off 1:off 2:off 3:off 4:off 5:off 6:off
anacron 0:off 1:off 2:on 3:on 4:on 5:on 6:off
atd 0:off 1:off 2:off 3:on 4:on 5:on 6:off
irda 0:off 1:off 2:off 3:off 4:off 5:off 6:off
acpid 0:off 1:off 2:off 3:on 4:on 5:on 6:off
apmd 0:off 1:off 2:on 3:on 4:on 5:on 6:off
irqbalance 0:off 1:off 2:off 3:on 4:on 5:on 6:off
pcmcia 0:off 1:off 2:on 3:on 4:on 5:on 6:off
nfslock 0:off 1:off 2:off 3:on 4:on 5:on 6:off
nfs 0:off 1:off 2:off 3:off 4:off 5:off 6:off
microcode_ctl 0:off 1:off 2:on 3:on 4:on 5:on 6:off
smartd 0:off 1:off 2:on 3:on 4:on 5:on 6:off
isdn 0:off 1:off 2:on 3:on 4:on 5:on 6:off
autofs 0:off 1:off 2:off 3:on 4:on 5:on 6:off
sshd 0:off 1:off 2:on 3:on 4:on 5:on 6:off
identd 0:off 1:off 2:off 3:off 4:off 5:off 6:off
portmap 0:off 1:off 2:off 3:on 4:on 5:on 6:off
spamassassin 0:off 1:off 2:on 3:on 4:on 5:on 6:off
sendmail 0:off 1:off 2:on 3:on 4:on 5:on 6:off
rhnsd 0:off 1:off 2:off 3:on 4:on 5:on 6:off
crond 0:off 1:off 2:on 3:on 4:on 5:on 6:off
yum 0:off 1:off 2:off 3:off 4:off 5:on 6:off
tux 0:off 1:off 2:off 3:off 4:off 5:off 6:off
aep1000 0:off 1:off 2:off 3:off 4:off 5:off 6:off
bcm5820 0:off 1:off 2:off 3:off 4:off 5:off 6:off
httpd 0:off 1:off 2:off 3:off 4:off 5:off 6:off
squid 0:off 1:off 2:off 3:off 4:off 5:off 6:off
winbind 0:off 1:off 2:off 3:off 4:off 5:on 6:off
smb 0:off 1:off 2:off 3:off 4:off 5:on 6:off
messagebus 0:off 1:off 2:off 3:on 4:on 5:on 6:off
snmpd 0:off 1:off 2:off 3:off 4:off 5:off 6:off
snmptrapd 0:off 1:off 2:off 3:off 4:off 5:off 6:off
hpoj 0:off 1:off 2:on 3:on 4:on 5:on 6:off
xfs 0:off 1:off 2:on 3:on 4:on 5:on 6:off
xinetd 0:off 1:off 2:off 3:on 4:on 5:on 6:off
cups 0:off 1:off 2:on 3:on 4:on 5:on 6:off
named 0:off 1:off 2:off 3:off 4:off 5:off 6:off
ntpd 0:off 1:off 2:off 3:off 4:off 5:off 6:off
vncserver 0:off 1:off 2:off 3:off 4:off 5:off 6:off
lisa 0:off 1:off 2:off 3:off 4:off 5:on 6:off
vsftpd 0:off 1:off 2:off 3:off 4:off 5:off 6:off
canna 0:off 1:off 2:on 3:on 4:on 5:off 6:off
FreeWnn 0:off 1:off 2:on 3:on 4:on 5:off 6:off
dovecot 0:off 1:off 2:off 3:off 4:off 5:off 6:off
dhcrelay 0:off 1:off 2:off 3:off 4:off 5:off 6:off
rwhod 0:off 1:off 2:off 3:off 4:off 5:off 6:off
kadmin 0:off 1:off 2:off 3:off 4:off 5:off 6:off
kprop 0:off 1:off 2:off 3:off 4:off 5:off 6:off
krb524 0:off 1:off 2:off 3:off 4:off 5:off 6:off
krb5kdc 0:off 1:off 2:off 3:off 4:off 5:off 6:off
dhcpd 0:off 1:off 2:off 3:off 4:off 5:off 6:off
radvd 0:off 1:off 2:off 3:off 4:off 5:off 6:off
amd 0:off 1:off 2:off 3:off 4:off 5:off 6:off
yppasswdd 0:off 1:off 2:off 3:off 4:off 5:off 6:off
ypserv 0:off 1:off 2:off 3:off 4:off 5:off 6:off
ypxfrd 0:off 1:off 2:off 3:off 4:off 5:off 6:off
innd 0:off 1:off 2:off 3:off 4:off 5:off 6:off
mysqld 0:off 1:off 2:off 3:off 4:off 5:off 6:off
postgresql 0:off 1:off 2:off 3:off 4:off 5:off 6:off
wine 0:off 1:off 2:on 3:on 4:on 5:on 6:off
firestarter 0:off 1:off 2:on 3:on 4:on 5:on 6:off
webmin 0:off 1:off 2:on 3:on 4:off 5:on 6:off
xinetd based services:
krb5-telnet: off
rsync: off
eklogin: off
gssftp: off
klogin: off
chargen-udp: off
kshell: off
chargen: off
daytime-udp: off
daytime: off
echo-udp: off
echo: off
services: off
time: off
time-udp: off
cups-lpd: off
sgi_fam: on
ktalk: off
imap: off
imaps: off
ipop2: off
ipop3: off
pop3s: off
rexec: off
rlogin: off
rsh: off
amandaidx: off
amidxtape: off
finger: off
ntalk: off
talk: off
telnet: off
amanda: off
My note; winbind says it is working in level 5 but when I start up the
messages say that winbind fails. Is this also related to Samba? Is it a
service I need? Do I need to have DNS? This makes me a DNS server doesn't
it, and I don't need to be that?
Thanking you in anticipation.
Shelagh
5:47 a.m.
New subject: Need help (of course) setting up network
Around 07:04pm on Friday, May 07, 2004 (UK time), Shelagh Manton scrawled:
Ok, a gracious freshstart. I will reinstall, for tow reasons, I
installed
<snip>
Hi Shelagh,
since your original posts were a while ago, and because you have
reinstalled, can you also state what isn't working that you want to
work, or what you want to make happen that isn't. Probably best to take
this a step at a time, start with one thing and then go on to the next
when that is sorted.
Also give a brief statement of your setup, how many machines are on your
network, and what OS do they each run.
results of #ifconfig -a
eth0 Link encap:Ethernet HWaddr 00:03:CE:89:69:EA
inet addr:192.168.32.0 Bcast:192.168.32.255 Mask:255.255.255.0
I'm' not a network expert, and others will probably correct me if I am
wrong, but I think it is unusual or even plain wrong to have an IP
address (inet addr) ending in .0. The last number should be between 1
and 254. Did you set this yourself, or was it allocated by DHCP?
My note; winbind says it is working in level 5 but when I start up
the
messages say that winbind fails. Is this also related to Samba? Is it a
service I need? Do I need to have DNS? This makes me a DNS server doesn't
it, and I don't need to be that?
Not sure what winbind is, I use samba without it. Can you see any
messages relating to why it fails. Try:
grep -i winbind /var/log/messages
I am sure that as America awakes, and also after the weekend more people
will add to and improve on what I have been able to say. Don't worry,
it may take some time but we will probably get you sorted. People here
are happy to help, and won't get fed up if it takes a while - so have
patience.
Good luck
Steve
--
(o< www.stevesearle.com
//\ Powered by Fedora Core
V_/_ No MS products were used in the creation of this message
11:32am up 4 days, 20:31, 0 users, load average: 0.00, 0.00, 0.00
8:47 a.m.
New subject: Need help (of course) setting up network
On Sat, 2004-05-08 at 06:47, Steve Searle wrote:
> results of #ifconfig -a
> eth0 Link encap:Ethernet HWaddr 00:03:CE:89:69:EA
> inet addr:192.168.32.0 Bcast:192.168.32.255 Mask:255.255.255.0
I'm' not a network expert, and others will probably correct me if I am
wrong, but I think it is unusual or even plain wrong to have an IP
address (inet addr) ending in .0. The last number should be between 1
and 254. Did you set this yourself, or was it allocated by DHCP?
Actually depending on the subnet mask an IP address ending in 0 can be
correct and valid. Looks real strange but it will work with the correct
subnet masking.
In the case above however you are correct, a 24 bit subnet mask
(255.255.255.0) defines the networks address of 192.168.32.0, the
broadcast of 192.168.32.255, which means valid host addresses will be in
the range of 192.168.32.1 to 192.168.32.254.
--
Scot L. Harris <webid(a)cfl.rr.com>
9:05 a.m.
New subject: Need help (of course) setting up network
> I'm' not a network expert, and others will probably
correct me if I am wrong, but I think it is unusual or
even plain wrong to have an IP address (inet addr)
ending in .0. The last number should be between 1 and
254. Did you set this yourself, or was it allocated
by DHCP? <<
This is correct. With an IP address, a hostid of all
zeroes (ending in .0) and a hostid of all ones (ending
in .255) are both reserved. A valid IP should end with
a number from 1 through 254. It has been my experience
that the number 1 is usually seen on DNS servers and
routers.
- Jamie
__________________________________
Do you Yahoo!?
Win a $20,000 Career Makeover at Yahoo! HotJobs
http://hotjobs.sweepstakes.yahoo.com/careermakeover
9:13 a.m.
New subject: Need help (of course) setting up network
On Sat, 2004-05-08 at 10:05, Jamie Cadorette wrote:
>> I'm' not a network expert, and others will probably
correct me if I am wrong, but I think it is unusual or
even plain wrong to have an IP address (inet addr)
ending in .0. The last number should be between 1 and
254. Did you set this yourself, or was it allocated
by DHCP? <<
This is correct. With an IP address, a hostid of all
zeroes (ending in .0) and a hostid of all ones (ending
in .255) are both reserved. A valid IP should end with
a number from 1 through 254. It has been my experience
that the number 1 is usually seen on DNS servers and
routers.
- Jamie
It all depends on the subnet mask which defines what portion of the IP
address represents the network and what portion represents the host
addresses. If your network uses a 16 bit subnet mask there can be
several host address that end in 0 and 255.
Very strange looking but perfectly valid.
In the case described above they have a 24 bit subnet mask, in that case
you are correct the address ending in 0 is the network and 255 is the
broadcast.
--
Scot L. Harris <webid(a)cfl.rr.com>
3:38 a.m.
New subject: Need help (of course) setting up network
Thanks to everyone who replied.
On Sun, 2004-05-09 at 00:13, Scot L. Harris wrote:
On Sat, 2004-05-08 at 10:05, Jamie Cadorette wrote:
> >> I'm' not a network expert, and others will probably
> correct me if I am wrong, but I think it is unusual or
> even plain wrong to have an IP address (inet addr)
> ending in .0. The last number should be between 1 and
> 254. Did you set this yourself, or was it allocated
> by DHCP? <<
>
Yes, I did select this number for myself. After reading about IP
addresses and netmasks, I realised that the series of numbers we were
using on windows was incorrect. Eg public IP addresses. So we changed
them but we can change them again.
> This is correct. With an IP address, a hostid of all
> zeroes (ending in .0) and a hostid of all ones (ending
> in .255) are both reserved. A valid IP should end with
> a number from 1 through 254. It has been my experience
> that the number 1 is usually seen on DNS servers and
> routers.
>
> - Jamie
It all depends on the subnet mask which defines what portion of the IP
address represents the network and what portion represents the host
addresses. If your network uses a 16 bit subnet mask there can be
several host address that end in 0 and 255.
Very strange looking but perfectly valid.
However I'd rather be sure. So I'll change it.
In the case described above they have a 24 bit subnet mask, in that case
you are correct the address ending in 0 is the network and 255 is the
broadcast.
Also, after reinstalling FC1 (yet) again, I did notice some more information and another
gui for configuring samba.
I used Gnome this time and the network configuration guis seem easier to
find. But I think I didn't have this last time at all. (I certainly
searched the KDE desktop desperately for something like this. So maybe I
have been more successful. I will let you know as soon as can. I will do
the commands again though and send them on.
Shelagh
--
Scot L. Harris <webid(a)cfl.rr.com>
5:12 a.m.
New subject: Need help (of course) setting up network
On Sun, 2004-05-09 at 18:38, Shelagh Manton wrote:
>
> Also, after reinstalling FC1 (yet) again, I did notice some more information and
another gui for configuring samba.
I used Gnome this time and the network configuration guis seem easier to
find. But I think I didn't have this last time at all. (I certainly
searched the KDE desktop desperately for something like this. So maybe I
have been more successful. I will let you know as soon as can. I will do
the commands again though and send them on.
Shelagh
> --
I changed my IP address like you suggested. It may have helped. I cannot
get LISa to work not nohow. So I had another go with SMB4K and lo and
behold the other two computers show up! However I can't access anything
on them as it tells me 'smbmount must be installed suid root for direct
user mounts (500,500) smb failed: 1'
Ha ha! Tried through the browser with smb://whatever in the location
thingy and success. I feel like I've performed a magic trick.
However, Kellen can't access the internet yet from his WinXP machine. So
I still need to sort something out. Does this deserve a different
thread? And should I still send the results of those commands for
inspection of possible stupid settings?
Shelagh
>
10:04 a.m.
New subject: Need help (of course) setting up network
On Tuesday 04 May 2004 09:50 am, Shelagh Manton wrote:
Well I guess it was too good to be true. Some one to help me. Sorry
for bothering you with my problems I'll just struggle through on my
own.
Shelagh, a bunch of people tried to help you. Reading what you wrote
back several times ending a week ago, it appears that you got the
replies, and agreed to try some of the suggestions.
And now you're starting the thread over, upset because you didn't get
help? I don't understand.
This list, like many others, is a self-help group, and everyone here
will help you as their time and knowledge permits. My own busy
schedule includes at least two hours per day helping people on lists
and forums; you don't see me much here because I don't run Fedora yet,
so my Fedora-specific knowledge is still quite negligible.
Getting upset with us, especially since your last post telling us you'd
try some of our suggestions, won't endear you to us, and probably won't
help you in getting the help you need.
When I was very young my mother used to tell me I could catch more flies
with honey than I could with vinegar. I pretended to not understand
her, and replied "Who wants flies".
But I knew what she meant.
Courtesy of my Kmail archive, and my penchant for being an email
packrat, here's a history of the posts on this thread (note the dates
could be off, as KMail adjusts dates and times to my timezone):
(this chart looks best with tabs set to 8 chars, and a fixed-width font)
Shelagh 04/26/04 (original post)
Antonio 04/26/04
Shelagh 04/27/04
Rodolfo 04/27/04
Shelagh 04/30/04
Steve 04/28/04
jludwig 04/28/04
Jay 04/28/04
Steve 04/28/04
jludwig 04/28/04
Shelagh 04/28/04
Rodolfo 04/27/04
Shelagh 05/04/04 (repost)
jludwig 05/04/04
Rodolfo 05/04/04
So, Shelagh, at the very least, please, instead of reposting your whole
original post with a complaint, let us know what you still don't
understand and/or still need help on.
If you don't get the help you need on this list perhaps you should try a
linux beginners list or newsgroup, or an entry-level linux networking
or linux security book.
Jeff
--
Jeff Lasman, nobaloney.net, P. O. Box 52672, Riverside, CA 92517 US
Professional Internet Services & Support / Consulting / Colocation
Our blists address used on lists is for list email only
Phone +1 909 324-9706, or see: "http://www.nobaloney.net/contactus.html"
10:11 a.m.
New subject: Need help (of course) setting up network
On 5/5/2004 11:04 AM, Jeff Lasman wrote:
If you don't get the help you need on this list perhaps you
should try a
linux beginners list or newsgroup, or an entry-level linux networking
or linux security book.
Bravo! Three times bravo, Jeff! RTFM, try very hard by yourself first, STFW...
then come to the list, Shelagh.
Cheers,
--
David Collantes - College of Business Administration, UCF - (407)823-3418
http://www.collantes.us/ :: http://www.netbros.com/ ::: http://shurl.us/
Always remember: you are unique, just like everyone else.
10:24 a.m.
New subject: Need help (of course) setting up network
David Collantes wrote:
Bravo! Three times bravo, Jeff! RTFM, try very hard by yourself first,
STFW... then come to the list, Shelagh.
I give up: what's STFW?
Guus -- non-native english speaker....
--
A.J. Bonnema, Leiden The Netherlands,
user #328198 (Linux Counter http://counter.li.org)
10:27 a.m.
New subject: Need help (of course) setting up network
On 5/5/2004 11:24 AM, A.J. Bonnema wrote:
I give up: what's STFW?
Search The "Freaking" Web. :-)
--
David Collantes - College of Business Administration, UCF - (407)823-3418
Always remember: you are unique, just like everyone else.
10:39 a.m.
New subject: Need help (of course) setting up network
A.J. Bonnema wrote:
David Collantes wrote:
>
> Bravo! Three times bravo, Jeff! RTFM, try very hard by yourself first,
> STFW... then come to the list, Shelagh.
I give up: what's STFW?
Guus -- non-native english speaker....
Search The F***ing Web
Sometimes you'll also see...
STFA - Search The F***ing Archives
YMMV - Your Milage May Vary
IMHO - In My Humble Opinion
TIA - Thanks In Advance
and so on.
--
John C. Nichel
KegWorks.com
716.856.9675
john(a)kegworks.com
10:44 a.m.
New subject: Need help (of course) setting up network
John Nichel wrote:
A.J. Bonnema wrote:
> I give up: what's STFW?
>
>
> Guus -- non-native english speaker....
Search The F***ing Web
Sometimes you'll also see...
STFA - Search The F***ing Archives
YMMV - Your Milage May Vary
IMHO - In My Humble Opinion
TIA - Thanks In Advance
and so on.
Thank you: i have updated my list of abbreviations (really: i have one).
Guus.
--
A.J. Bonnema, Leiden The Netherlands,
user #328198 (Linux Counter http://counter.li.org)
11:21 a.m.
New subject: Need help (of course) setting up network
At 09:44 5/5/2004, you wrote:
Thank you: i have updated my list of abbreviations (really: i have
one).
<grin> Other extremely common acronyms on this kind of list:
IIRC - If I Recall Correctly
AFAIK - As Far As I Know
AFAICT - As Far As I Can Tell
OTOH - On The Other Hand
ARRRGH - Arrrgh!
--
Rodolfo J. Paiz
rpaiz(a)simpaticus.com
http://www.simpaticus.com
11:34 a.m.
New subject: Need help (of course) setting up network
On Wednesday 05 May 2004 09:21 am, Rodolfo J. Paiz wrote:
<grin> Other extremely common acronyms on this kind of list:
IIRC - If I Recall Correctly
AFAIK - As Far As I Know
AFAICT - As Far As I Can Tell
OTOH - On The Other Hand
ARRRGH - Arrrgh!
And for us old farts:
LSMFT - Lucky Strike Means Fine Tobacco
(and a few other good expansions, not for the list, we learned in High
School)
Jeff
--
Jeff Lasman, nobaloney.net, P. O. Box 52672, Riverside, CA 92517 US
Professional Internet Services & Support / Consulting / Colocation
Our blists address used on lists is for list email only
Phone +1 909 324-9706, or see: "http://www.nobaloney.net/contactus.html"
11:36 a.m.
New subject: Need help (of course) setting up network
On 5/5/2004 12:34 PM, Jeff Lasman wrote:
And for us old farts:
LSMFT - Lucky Strike Means Fine Tobacco
(and a few other good expansions, not for the list, we learned in High
School)
Oh, no, no more "farts" topics now, please!
Cheers,
--
David Collantes - College of Business Administration, UCF - (407)823-3418
http://www.collantes.us/ :: http://www.netbros.com/ ::: http://shurl.us/
Always remember: you are unique, just like everyone else.
7288
days inactive
7302
days old
33 comments
12 participants
participants (12)
-
A.J. Bonnema -
Antonio Montagnani -
David Collantes -
Jamie Cadorette -
Jay Daniels -
Jeff Lasman -
jludwig -
John Nichel -
Rodolfo J. Paiz -
Scot L. Harris -
Shelagh Manton -
Steve Searle