topic Re: Samba and guest user in Operating System - Linux

Samba and guest user

Josef Forman — Mon, 15 Aug 2005 10:13:14 GMT

Hi,
I use RedHat ES 3. Samba authentication is set to the DC server (I use users map file). Everything works well, but now i want to allow access to one directory without password checking. The problem is when somebody out of domain access the share - window for name/password appears.

pieces of samba configuration:
[global]
guest account = nobody
map to guest = Bad User
security = server
[share]
path = /bla/bla
browseable = Yes
public = Yes
writable = Yes
printable = No
guest ok = Yes
share modes = Yes
force user = nobody
force group = nobody
force create mode = 0775
force directory mode = 0775

Any idea?

Re: Samba and guest user

RAC_1 — Mon, 15 Aug 2005 12:20:24 GMT

Put in a valied users setting for that share.
valid users = abc, xyz

Resart samba.

Re: Samba and guest user

Ross Minkov — Mon, 15 Aug 2005 12:26:55 GMT

Since you are using nobody for the guest account, make sure you don't have it listed under invalid users too.

Re: Samba and guest user

Josef Forman — Tue, 16 Aug 2005 01:27:25 GMT

I need public share, so i assume i don't need parametr valid users.

nobody account is not in invalid parametr

Re: Samba and guest user

Josef Forman — Tue, 16 Aug 2005 01:28:05 GMT

is not invalid USER :)

Re: Samba and guest user

Ivan Ferreira — Tue, 16 Aug 2005 08:00:14 GMT

You can try using the map to guest parameter:

Map to guest = bad password

Insted of bad user. If a valid user tryes to connect, is not a bad user, is a bad password.

Re: Samba and guest user

Steven E. Protter — Tue, 16 Aug 2005 08:01:18 GMT

I reccommend against allowing users not explicitly set up in Linux to access the share.

A few ways to do that.

You can diable the guest user, manually add the users you want and use the smbpasswd command to set their passwords. These authorized users will be prompted when they first access.

You can if you wish allow Linus to accept LDAP or ADS users by usering a different security scheme. This should not display the Windows user/password.

Also, if this information is flying around the network there is an issue with Windows that needs to be dealt with.

SEP