1827794 Members
2889 Online
109969 Solutions
New Discussion

Re: Samba and guest user

 
Josef Forman
Frequent Advisor

Samba and guest user

Hi,
I use RedHat ES 3. Samba authentication is set to the DC server (I use users map file). Everything works well, but now i want to allow access to one directory without password checking. The problem is when somebody out of domain access the share - window for name/password appears.

pieces of samba configuration:
[global]
guest account = nobody
map to guest = Bad User
security = server
[share]
path = /bla/bla
browseable = Yes
public = Yes
writable = Yes
printable = No
guest ok = Yes
share modes = Yes
force user = nobody
force group = nobody
force create mode = 0775
force directory mode = 0775


Any idea?
6 REPLIES 6
RAC_1
Honored Contributor

Re: Samba and guest user

Put in a valied users setting for that share.
valid users = abc, xyz

Resart samba.
There is no substitute to HARDWORK
Ross Minkov
Esteemed Contributor

Re: Samba and guest user

Since you are using nobody for the guest account, make sure you don't have it listed under invalid users too.
Josef Forman
Frequent Advisor

Re: Samba and guest user

I need public share, so i assume i don't need parametr valid users.

nobody account is not in invalid parametr
Josef Forman
Frequent Advisor

Re: Samba and guest user

is not invalid USER :)
Ivan Ferreira
Honored Contributor

Re: Samba and guest user

You can try using the map to guest parameter:

Map to guest = bad password


Insted of bad user. If a valid user tryes to connect, is not a bad user, is a bad password.
Por que hacerlo dificil si es posible hacerlo facil? - Why do it the hard way, when you can do it the easy way?
Steven E. Protter
Exalted Contributor

Re: Samba and guest user

I reccommend against allowing users not explicitly set up in Linux to access the share.

A few ways to do that.

You can diable the guest user, manually add the users you want and use the smbpasswd command to set their passwords. These authorized users will be prompted when they first access.

You can if you wish allow Linus to accept LDAP or ADS users by usering a different security scheme. This should not display the Windows user/password.

Also, if this information is flying around the network there is an issue with Windows that needs to be dealt with.

SEP
Steven E Protter
Owner of ISN Corporation
http://isnamerica.com
http://hpuxconsulting.com
Sponsor: http://hpux.ws
Twitter: http://twitter.com/hpuxlinux
Founder http://newdatacloud.com