[CS-FSLUG] Networking with Ubuntu or Fedora Core 6 part 3
Tim Young
Tim.Young at LightSys.org
Wed Feb 28 13:56:48 CST 2007
Ah. It is a username/password issue. Occasionally you need to set up
users in samba. Printing is often allowed as the guest user, but
occasionally it is not. :)
The easy thing to do here is to add a samba user, set it's password, and
then use that username and password with your printer URI.
So, add a unix user on your server
useradd smbuser
We will NOT set the password for this account in unix. By default it is
locked.
Then, we will add a simple samba password for that user. (blank is Ok)
smbpasswd -a smbuser
Type the same password in twice, and you should be all set.
Finally, test it out from the smaller box.
smbclient -L 192.168.0.2 -U smbuser
Enter your password, and you should see a listing of the printers (and
shares) on the server.
Finally, you will need to modify the printer URI on the client.
smb://username:password@server[:port]/printer
So you would do something like:
smb://smbuser:smbpasswd@192.168.0.2/HPLaser
- Tim Young
Hilding Egestål wrote:
> This is the result
>
> [root at localhost ~]# smbclient -L 192.168.0.2
> Password:
> session setup failed: NT_STATUS_LOGON_FAILURE
>
>
>
> Tim Young skrev:
>
>> Hi,
>> Sorry for not responding sooner. (Remember how I said I occasionally am
>> too busy to answer... :)
>>
>> To see what printers are available, you can browse the network and go to
>> the big computer. It will tell you what printers are available.
>>
>> Or, you can run the following from the command-line:
>> smbclient -L [servername]
>> smbclient -L 192.168.0.2
>>
>> That will list all the shares available on the server.
>>
>> The URI syntax is:
>>
>> *
>>
>> smb://server[:port]/printer
>>
>> *
>>
>> smb://workgroup/server[:port]/printer
>>
>> *
>>
>> smb://username:password@server[:port]/printer
>>
>> *
>>
>> smb://username:password@workgroup/server[:port]/printer
>>
>> So, if your printer was named, "HPLaser", your URI would be:
>> smb://192.168.0.2/HPLaser
>>
>>
>> You can have both ssh and smb enabled at the same time. Each "service"
>> runs on a different port. The ports are numbers, like 631 for cups
>> (printing). It is difficult (but not impossible) to have two services
>> on the same port on the same computer. Ssh uses port 22 (TCP), and
>> samba uses
>>
>> 137:UDP, 138:UDP, 139:TCP
>>
>> The ports are like different house numbers on a street. They allow the
>> various programs to separate out what things are happening on your
>> computer, and which program the network packet should go to.
>>
>> - Tim Young
>>
>> Hilding Egestål wrote:
>>
>>
>>> smb://192.168.0.2 but after that? I have searched on the big PC for the
>>> folders and found /usr/local/Brother/lpd or cups. Shall I use that
>>> instead of /Brother
>>> Is it possible to have SSH and Samba at the same time?
>>>
>>> /Hilding
>>>
>>>
>>>
>>> Tim Young skrev:
>>>
>>>
>>>
>>>> Sometimes I have time to respond, other times I do not. There are many
>>>> times when I have knowledge to help people out, but I do not have time
>>>> to. :( But, today I have a little time and needed the break from what
>>>> I am currently working on. :)
>>>>
>>>> Your printing is relatively easy to do. I am assuming you have samba
>>>> installed (for file sharing) since those are the firewall rules I gave
>>>> you. Samba, by default, shares the printer. So, all you need to do is
>>>> configure it on the other computer. You already have samba and cups
>>>> (port 631) available.
>>>>
>>>> On your computer with the printer on it, make sure that cups is
>>>> enabled. (there is some gui that tells you which services are started
>>>> at boot time. It should be there.)
>>>>
>>>> The URI (what it asks you for when you go to add a printer) should be
>>>> something like:
>>>> smb://192.168.0.2/Brother
>>>> or the ipp thing you had below. Either one should work.
>>>>
>>>> You would install this network printer through the same menu system you
>>>> installed the local one, just on the small PC.
>>>>
>>>> - Tim Young
>>>>
>>>> Hilding wrote:
>>>>
>>>>
>>>>
>>>>
>>>>> Well I must say, You are a real source of knowledge. Now I can see the
>>>>> folders from the big PC with FC6 in the small PC with FC6. So, now I
>>>>> have got step 2: the printer, ssh is installed. I have used
>>>>>
>>>>> ipp://192.168.0.2/printers/Brother
>>>>>
>>>>> for the printer. IPnumber 192.168.0.2 is the big PC, and I would like to
>>>>> sit at the small PC, printing out my documents on the big one. What do
>>>>> You say about this?
>>>>>
>>>>> /Hilding in Gothenburg
>>>>>
>>>>>
>>>>>
>>>>> Tim Young skrev:
>>>>>
>>>>>
>>>>>
>>>>>
>>>>>
>>>>>> Where you change ssh to reliable, you will also need to add:
>>>>>> 137:UDP
>>>>>> 138:UDP
>>>>>> 139:TCP
>>>>>>
>>>>>> There will probably not be a check-mark for these services, but there
>>>>>> should be an "other services" text box where you can type in the above
>>>>>> lines.
>>>>>>
>>>>>> - Tim Young
>>>>>>
>>>>>> Ps. The lines below represent your firewall. What you have are a bunch
>>>>>> of rules which occur in order. They consist of a pattern and an
>>>>>> action. If the network connection matches the pattern, then the action
>>>>>> occurs.
>>>>>>
>>>>>> You have a bunch of "ACCEPT" actions. If the pattern is the printing
>>>>>> protocol (dport 631), then it is accepted and allowed through the
>>>>>> firewall. At the end of the list is a rule which REJECTS all the
>>>>>> packets which had not been allowed beforehand. So if you do not see an
>>>>>> "ACCEPT" rule for something in particular, it gets rejected.
>>>>>>
>>>>>> If you want to see a list of the various things you can accept or
>>>>>> reject, you can find it in /etc/services
>>>>>>
>>>>>>
>>>>>> Hilding wrote:
>>>>>>
>>>>>>
>>>>>>
>>>>>>
>>>>>>
>>>>>>
>>>>>>> Going to System - Security Level: and changing to mark SSH as reliable
>>>>>>> will give You this iptables-save
>>>>>>>
>>>>>>> Generated by iptables-save v1.3.5 on Mon Feb 26 17:26:09 2007
>>>>>>> *filter
>>>>>>> :INPUT ACCEPT [0:0]
>>>>>>> :FORWARD ACCEPT [0:0]
>>>>>>> :OUTPUT ACCEPT [2:320]
>>>>>>> :RH-Firewall-1-INPUT - [0:0]
>>>>>>> -A INPUT -j RH-Firewall-1-INPUT
>>>>>>> -A FORWARD -j RH-Firewall-1-INPUT
>>>>>>> -A RH-Firewall-1-INPUT -i lo -j ACCEPT
>>>>>>> -A RH-Firewall-1-INPUT -p icmp -m icmp --icmp-type any -j ACCEPT
>>>>>>> -A RH-Firewall-1-INPUT -p esp -j ACCEPT
>>>>>>> -A RH-Firewall-1-INPUT -p ah -j ACCEPT
>>>>>>> -A RH-Firewall-1-INPUT -d 224.0.0.251 -p udp -m udp --dport 5353 -j ACCEPT
>>>>>>> -A RH-Firewall-1-INPUT -p udp -m udp --dport 631 -j ACCEPT
>>>>>>> -A RH-Firewall-1-INPUT -p tcp -m tcp --dport 631 -j ACCEPT
>>>>>>> -A RH-Firewall-1-INPUT -m state --state RELATED,ESTABLISHED -j ACCEPT
>>>>>>> -A RH-Firewall-1-INPUT -p tcp -m state --state NEW -m tcp --dport 22 -j
>>>>>>> ACCEPT
>>>>>>> -A RH-Firewall-1-INPUT -j REJECT --reject-with icmp-host-prohibited
>>>>>>> COMMIT
>>>>>>> # Completed on Mon Feb 26 17:26:09 2007
>>>>>>>
>>>>>>>
>>>>>>>
>>>>>>> Tim Young skrev:
>>>>>>>
>>>>>>>
>>>>>>>
>>>>>>>
>>>>>>>
>>>>>>>
>>>>>>>
>>>>>>>> Hi there,
>>>>>>>> One of the problems with a network with Linux is that there are a ton of
>>>>>>>> ways to do everything. If all you have is two Linux boxes, then you
>>>>>>>> will want to use NFS file-sharing. If you may sometime use a windows
>>>>>>>> box on your computer, you will want to set up Samba (You may do it
>>>>>>>> instead of NFS. They are not mutually exclusive, they just do the same
>>>>>>>> thing two different ways.)
>>>>>>>>
>>>>>>>> With your problem of things not opening eachother, my first guess is
>>>>>>>> that you have a firewall set up. You can determine if you have a
>>>>>>>> firewall by running:
>>>>>>>> iptables-save
>>>>>>>>
>>>>>>>> If it prints a lot of lines, then you have a firewall. :)
>>>>>>>>
>>>>>>>> You may look at:
>>>>>>>> http://tldp.org/HOWTO/SMB-HOWTO.html
>>>>>>>> This tells you about file and printing.
>>>>>>>>
>>>>>>>> You will probably want to break things up into a few parts:
>>>>>>>> Getting the computers to contact eachother via the net.
>>>>>>>> (firewalling, IP addresses, DNS, etc.)
>>>>>>>> Sharing information
>>>>>>>> (Samba, NFS, SSH, etc.)
>>>>>>>>
>>>>>>>> There is a Linux networking howto at tldp.org, but it gets very
>>>>>>>> complex. Since you already have IP addresses, I will assume that you
>>>>>>>> just have a firewall blocking connectivity. You can turn off your
>>>>>>>> firewall a few ways. Fedora uses a program called "lokkit" in the
>>>>>>>> command-line world, but it has some interface in the GUI world. I do
>>>>>>>> not have FC6 so I don't know where it is. If you have a firewall
>>>>>>>> between you and the outside world, for now, just turn off your firewall.
>>>>>>>>
>>>>>>>> For sharing files, you will most likely end up setting up Samba. It is
>>>>>>>> horribly more complex than NFS, but it works in more cases than NFS
>>>>>>>> does. The samba link I gave you up there may be helpful. But since you
>>>>>>>> already set up some shares, most likely, when you have the firewall
>>>>>>>> turned off, things will start working. If not, I can give you a few
>>>>>>>> commands that will tell you quickly where the problem is.
>>>>>>>>
>>>>>>>> Fedora used to allow root SSH by default, so my guess here is that once
>>>>>>>> you have your firewall down, everything will work. If not, ssh is
>>>>>>>> usually very simple. Make sure it is enabled at boot
>>>>>>>> chkconfig sshd on
>>>>>>>> and then make sure it is currently started up
>>>>>>>> service sshd start
>>>>>>>>
>>>>>>>> Then, from the machine you are on, ssh to yourself to see if it works
>>>>>>>> local. If it does, then try it from the other computer. Most all SSH
>>>>>>>> issues, unless you have been playing with the sshd_config file, will be
>>>>>>>> with the firewall or not having your service started.
>>>>>>>>
>>>>>>>> Hope that helps some.
>>>>>>>>
>>>>>>>> - Tim Young
>>>>>>>>
>>>>>>>> HildingE wrote:
>>>>>>>>
>>>>>>>>
>>>>>>>>
>>>>>>>>
>>>>>>>>
>>>>>>>>
>>>>>>>>
>>>>>>>>
>>>>>>>>> Well, sorry to say I am returning to basic about creating network, this
>>>>>>>>> time with Fedora Core 6. Where can I find an easyread HOWTO installing
>>>>>>>>> network? I am just using network between two LinuxPC. Beside Ubuntu I
>>>>>>>>> have a little bit curios about Fedora Core 6, but it seems more
>>>>>>>>> difficult to get it right.
>>>>>>>>>
>>>>>>>>> Places: connect to server - ssh - the adresses to the two computers,
>>>>>>>>> 192.168.0.2 and 192.168.0.3 I am working as root, but it refuses to
>>>>>>>>> open eachother. I have made shared folders, but without any result.
>>>>>>>>>
>>>>>>>>> Regards in Lent.
>>>>>>>>>
>>>>>>>>> /Hilding in Gothenburg
>>>>>>>>>
>>>>>>>>> __________________________________________________
>>>>>>>>> Använder du Yahoo!?
>>>>>>>>> Är du trött på spam? Yahoo! E-post har det bästa spamskyddet som finns
>>>>>>>>> http://se.mail.yahoo.com
>>>>>>>>>
>>>>>>>>>
>>>>>>>>> _______________________________________________
>>>>>>>>> ChristianSource FSLUG mailing list
>>>>>>>>> Christiansource at ofb.biz
>>>>>>>>> http://cs.uninetsolutions.com
>>>>>>>>>
>>>>>>>>>
>>>>>>>>>
>>>>>>>>>
>>>>>>>>>
>>>>>>>>>
>>>>>>>>>
>>>>>>>>>
>>>>>>>>>
>>>>>>>>>
>>>>>>>>>
>>>>>>>>>
>>>>>>>> _______________________________________________
>>>>>>>> ChristianSource FSLUG mailing list
>>>>>>>> Christiansource at ofb.biz
>>>>>>>> http://cs.uninetsolutions.com
>>>>>>>>
>>>>>>>>
>>>>>>>>
>>>>>>>>
>>>>>>>>
>>>>>>>>
>>>>>>>>
>>>>>>>>
>>>>>>>>
>>>>>>> __________________________________________________
>>>>>>> Använder du Yahoo!?
>>>>>>> Är du trött på spam? Yahoo! E-post har det bästa spamskyddet som finns
>>>>>>> http://se.mail.yahoo.com
>>>>>>>
>>>>>>>
>>>>>>> _______________________________________________
>>>>>>> ChristianSource FSLUG mailing list
>>>>>>> Christiansource at ofb.biz
>>>>>>> http://cs.uninetsolutions.com
>>>>>>>
>>>>>>>
>>>>>>>
>>>>>>>
>>>>>>>
>>>>>>>
>>>>>>>
>>>>>>>
>>>>>>>
>>>>>>>
>>>>>> _______________________________________________
>>>>>> ChristianSource FSLUG mailing list
>>>>>> Christiansource at ofb.biz
>>>>>> http://cs.uninetsolutions.com
>>>>>>
>>>>>>
>>>>>>
>>>>>>
>>>>>>
>>>>>>
>>>>>>
>>>>> __________________________________________________
>>>>> Använder du Yahoo!?
>>>>> Är du trött på spam? Yahoo! E-post har det bästa spamskyddet som finns
>>>>> http://se.mail.yahoo.com
>>>>>
>>>>>
>>>>> _______________________________________________
>>>>> ChristianSource FSLUG mailing list
>>>>> Christiansource at ofb.biz
>>>>> http://cs.uninetsolutions.com
>>>>>
>>>>>
>>>>>
>>>>>
>>>>>
>>>>>
>>>>>
>>>>>
>>>> _______________________________________________
>>>> ChristianSource FSLUG mailing list
>>>> Christiansource at ofb.biz
>>>> http://cs.uninetsolutions.com
>>>>
>>>>
>>>>
>>>>
>>>>
>>> __________________________________________________
>>> Använder du Yahoo!?
>>> Är du trött på spam? Yahoo! E-post har det bästa spamskyddet som finns
>>> http://se.mail.yahoo.com
>>>
>>>
>>> _______________________________________________
>>> ChristianSource FSLUG mailing list
>>> Christiansource at ofb.biz
>>> http://cs.uninetsolutions.com
>>>
>>>
>>>
>>>
>>>
>>>
>> _______________________________________________
>> ChristianSource FSLUG mailing list
>> Christiansource at ofb.biz
>> http://cs.uninetsolutions.com
>>
>>
>>
>
> __________________________________________________
> Använder du Yahoo!?
> Är du trött på spam? Yahoo! E-post har det bästa spamskyddet som finns
> http://se.mail.yahoo.com
>
>
> _______________________________________________
> ChristianSource FSLUG mailing list
> Christiansource at ofb.biz
> http://cs.uninetsolutions.com
>
>
>
>
More information about the Christiansource
mailing list