Corrent security mode settings to allow mess-windows XP behave!
in [Samba]
|
Prev: Corrent security mode settings to allow mess-windows XP behave!
Next: unix exts / wide links / symlinks
From: Chris Smith on 6 Apr 2010 17:40 On Tue, Apr 6, 2010 at 5:22 PM, Robert Heller <heller(a)deepsoft.com> wrote: > Right now, I have the > security mode set to 'share'. "security = share" is deprecated and not recommend you're going to make Jeremy wish he removed support for it :) move to "security = user" -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
From: Robert Heller on 6 Apr 2010 18:20 At Tue, 6 Apr 2010 14:35:19 -0700 Jeremy Allison <jra(a)samba.org> wrote: > > On Tue, Apr 06, 2010 at 05:33:10PM -0400, Chris Smith wrote: > > On Tue, Apr 6, 2010 at 5:22 PM, Robert Heller <heller(a)deepsoft.com> wrote: > > > Right now, I have the > > > security mode set to 'share'. > > > > "security = share" is deprecated and not recommend > > > > you're going to make Jeremy wish he removed support for it :) > > Nah. Enough people complain that we'll *never* be > able to get rid of it :-). Setting it to 'user' causes mess-windows to ask for a username and password to access the *anoymous* (guest ok = yes) printers and share! > > -- Robert Heller -- Get the Deepwoods Software FireFox Toolbar! Deepwoods Software -- Linux Installation and Administration http://www.deepsoft.com/ -- Web Hosting, with CGI and Database heller(a)deepsoft.com -- Contract Programming: C/C++, Tcl/Tk -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
From: Chris Smith on 6 Apr 2010 19:00 On Tue, Apr 6, 2010 at 6:12 PM, Robert Heller <heller(a)deepsoft.com> wrote: > Setting it to 'user' causes mess-windows to ask for a username and > password to access the *anoymous* (guest ok = yes) printers and share! That will happen if you don't set it up properly. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
From: Robert Heller on 6 Apr 2010 20:00 At Tue, 6 Apr 2010 18:57:20 -0400 Chris Smith <smb_77(a)chrissmith.org> wrote: > > On Tue, Apr 6, 2010 at 6:12 PM, Robert Heller <heller(a)deepsoft.com> wrote: > > Setting it to 'user' causes mess-windows to ask for a username and > > password to access the *anoymous* (guest ok = yes) printers and share! > > That will happen if you don't set it up properly. Yeah. I added 'map to guest = bad user'. The anonymous shares are working. Windows now asks for a username AND password for the protected shares, but cannot connect, claiming the share is already open under a different user (or some such nonsense). > > -- Robert Heller -- Get the Deepwoods Software FireFox Toolbar! Deepwoods Software -- Linux Installation and Administration http://www.deepsoft.com/ -- Web Hosting, with CGI and Database heller(a)deepsoft.com -- Contract Programming: C/C++, Tcl/Tk -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
From: Chris Smith on 7 Apr 2010 11:20
On Tue, Apr 6, 2010 at 7:58 PM, Robert Heller <heller(a)deepsoft.com> wrote: > Yeah. Â I added 'map to guest = bad user'. Â The anonymous shares are > working. Â Windows now asks for a username AND password for the protected > shares, but cannot connect, claiming the share is already open under a > different user (or some such nonsense). My notes for a working guest share with user security is: ======================================================== Global: security = user map to guest = Bad User username map = /etc/samba/smbusers -- no 'valid users =' line -- Share: guest ok = yes -- no 'valid users =' line -- ..may also want.. guest only = yes ..and if desired.. force group = nobody force user = nobody For the username map (/etc/samba/smbusers in this case): nobody = guest ..assuming "nobody" (a standard user in most distros I've run across) is to be your "guest" user ======================================================== For the problem you know see, suggest closing all share connections and rebooting the client. Then logon (if you're not going to centralize authentication - ie. domain controller) with credentials that match those of a samba user and try again. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba |