samba - Jul 2002 - PDC operation allowing guest machines to log in ?

Howdy :)

I just have a little question regarding PDC and domain logons... my setup
is working nicely with roaming profiles, logging onto the Samba 2.2.3 PDC,
but I find that I am still able to find the server from a new machine,
supply a user/password and access the shares on the server.

Is this correct operation? Surely allowing this completely defeats the
object of machine accounts and a 'trust list' of machines?

Cheers,
Gavin.

Gavin Hamill wrote:
> 
> Howdy :)
> 
> I just have a little question regarding PDC and domain logons... my setup
> is working nicely with roaming profiles, logging onto the Samba 2.2.3 PDC,
> but I find that I am still able to find the server from a new machine,
> supply a user/password and access the shares on the server.
> 
> Is this correct operation? Surely allowing this completely defeats the
> object of machine accounts and a 'trust list' of machines?
No.  The 'trust accounts' are to protect the username and password you
pass at the Ctrl+Alt+Del box, and connections to the workstation from
other machines.

Andrew Bartlett

-- 
Andrew Bartlett                                 abartlet@pcug.org.au
Manager, Authentication Subsystems, Samba Team  abartlet@samba.org
Student Network Administrator, Hawker College   abartlet@hawkerc.net
http://samba.org     http://build.samba.org     http://hawkerc.net