samba - Mar 2004 - Samba 3 "public" Access

Hello all,

  I've upgraded to Samba 3.0 and I'm having problems replicating some 
behavior I relied on in Samba 2.2.  Here's my scenario:  I have a 
Windows Active Directory domain.  All users have a windows login 
account.  No users have a "UNIX" login account on any of my Linux 
boxes.  With Samba 2.2 I could specify a share like so:

[public]
   path=/path/to/public/files
   public = yes
   writable = no
   force user = nobody

And have any user that was logged into their Windows workstation browse 
to \\SERVER and then be able to open the "Public" folder (i.e. the 
\\SERVER\PUBLIC location).  If public=yes was not set, then you could 
specify Windows->UNIX mapping in smbusers, etc..

However with Samba 3.0, a Windows user with no UNIX account is unable to 
even open \\SERVER.  They are immediately prompted for a login and a 
password.  The Samba log shows:

[2004/03/04 17:00:28, 1] smbd/sesssetup.c:reply_spnego_kerberos(218)
  Username tjohnson is invalid on this system

The few IT workers with 1:1 Windows to Linux user account mappings work 
fine so the account logins are happening successfully.  I need to get 
back to a state where Windows users with no UNIX account can see 
"public" type folders.  Any help?

Much appreciated!!

-- Jason

On Thu, 4 Mar 2004, Jason McCormick wrote:
> Hello all,
>
>   I've upgraded to Samba 3.0 and I'm having problems replicating
some
> behavior I relied on in Samba 2.2.  Here's my scenario:  I have a
> Windows Active Directory domain.  All users have a windows login
> account.  No users have a "UNIX" login account on any of my Linux
> boxes.  With Samba 2.2 I could specify a share like so:
>
> [public]
>    path=/path/to/public/files
>    public = yes
>    writable = no
>    force user = nobody
Add:
	guest ok = yes

And in [globals] set:
	security = share

- John T.
>
> And have any user that was logged into their Windows workstation browse
> to \\SERVER and then be able to open the "Public" folder (i.e.
the
> \\SERVER\PUBLIC location).  If public=yes was not set, then you could
> specify Windows->UNIX mapping in smbusers, etc..
>
> However with Samba 3.0, a Windows user with no UNIX account is unable to
> even open \\SERVER.  They are immediately prompted for a login and a
> password.  The Samba log shows:
>
> [2004/03/04 17:00:28, 1] smbd/sesssetup.c:reply_spnego_kerberos(218)
>   Username tjohnson is invalid on this system
>
> The few IT workers with 1:1 Windows to Linux user account mappings work
> fine so the account logins are happening successfully.  I need to get
> back to a state where Windows users with no UNIX account can see
> "public" type folders.  Any help?
>
> Much appreciated!!
>
> -- Jason
>
>
-- 
John H Terpstra
Email: jht@samba.org