topic Re: Samba default user in Operating System - HP-UX

Samba default user

Mauro Livi — Wed, 29 Apr 2009 21:44:11 GMT

Hi all,
Quick Samba question (perhaps somewhat stupid...but here goes). I have created a public directory and would like that to be accessible to all users. However, I'm finding that unless I create a Unix account for the user(s), they are unable to access the directory through Windows.
That is to say, if they have a Unix account, they can access just fine and everyone is happy. However, if they don't have a Unix account, they are presented with a Windows login prompt. I was under the impression that a publicly accessible directory is owned by the default user (smbnull) and therefore assumed that specific Unix accounts were not needed.
Wrong assumption???

Using HPUX 11.11 and Samba A.02.03.04

Thanks
Mauro

Re: Samba default user

Mauro Livi — Wed, 29 Apr 2009 21:48:53 GMT

I should perhaps elaborate a little more. If a user has a Unix account, the directory is accessible and the user is never prompted with any login dialogue box by windows. They go straight in and can freely access.
If however, a user does not have a Unix, account, they are presented with a windows login box (which usually fails anyway).

Thanks again
Mauro

Re: Samba default user

avizen9 — Thu, 30 Apr 2009 05:21:04 GMT

you can create a generic account and share username password to all samba users which will be easy, let me know,

thanks

Re: Samba default user

Mauro Livi — Thu, 30 Apr 2009 13:48:34 GMT

Thanks for your reply, but it sounds like you are suggesting some sort of "guest" user, and my understanding is that Samba directories may be accessible by the "default" user (smbnull). I can create a "guest" user, but I don't see the point if it uses the "default" user anyway.
What I want is for people to be able to access the drive (through windows) when they are logged into the network with their "regular" network credentials. If a particular user does not have a Unix account, then use the "default" user (smbnull). Make sense?

Thanks again.
Mauro

Re: Samba default user

Heironimus — Thu, 30 Apr 2009 16:10:39 GMT

You haven't really provided enough information to do more than speculate wildly. Is the Samba server part of your Windows domain? Do you want it to be usable by any client at all or just by valid domain users?

Re: Samba default user

Mauro Livi — Thu, 30 Apr 2009 16:14:44 GMT

Heironimus...good points.

Yes - Samba server is part of Windows domain

I want it to be usable only by valid domain users.

Thanks

Mauro

Re: Samba default user

Heironimus — Thu, 30 Apr 2009 17:14:20 GMT

For a domain member where not all users have UNIX accounts you probably need to look at the "map to guest" parameter in smb.conf. You can have Samba map authenticated users without real UIDs to its guest account UID.

Re: Samba default user

Mauro Livi — Thu, 30 Apr 2009 17:31:37 GMT

Certainly makes sense. But I guess this is where I get confused. The excerpt below is from my smb.conf. This is where I would set a guest account mapping. However the text comment clearly states that it should default to smbnull. I can un-comment the guest account setting and see if I can force I guess.

# Default guest account is smbnull. If you want a guest account, you
# can specify other that should present in /etc/passwd
; guest account = smbnull

Re: Samba default user

Heironimus — Thu, 30 Apr 2009 17:47:55 GMT

And what is "map to guest" set to in your configuration?

Re: Samba default user

Mauro Livi — Thu, 30 Apr 2009 17:52:34 GMT

Well as it turns out, that is not specified. So in my case, would I set this to smbnull???

map to guest = smbnull

Re: Samba default user

Heironimus — Fri, 01 May 2009 16:07:24 GMT

No, "map to guest" defines when a connection will be remapped to the guest UID. You probably want it set to "bad uid", but you should read about it in the smb.conf man page to make that matches the behavior you're looking for.

Re: Samba default user

Mauro Livi — Wed, 06 May 2009 20:26:16 GMT

The map to guest setting did the trick. I had to read up a bit on man smb.conf, but I found what I was looking for.

Thanks again to all who responded.

Mauro