thr3ads.net - samba - [Samba] smbpasswd -d nobody, listing still possible? [Nov 2005]

If this information is useful, please help other people find it:
Share via:

julius Junghans

2005-Nov-27 11:11 UTC

[Samba] smbpasswd -d nobody, listing still possible?

hi,

i wondered why i can still list my shares with "smbclient -NL
localip",
security = SHARE ....i just disable the user nobody?


the log:
[2005/11/27 12:05:48, 2] lib/interface.c:add_interface(81)
  added interface ip=192.168.10.66 bcast=192.168.10.255 nmask=255.255.255.0
[2005/11/27 12:05:48, 2] lib/interface.c:add_interface(81)
  added interface ip=127.0.0.1 bcast=127.255.255.255 nmask=255.0.0.0
[2005/11/27 12:05:48, 3] smbd/sec_ctx.c:push_sec_ctx(256)
  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
[2005/11/27 12:05:48, 3] smbd/uid.c:push_conn_ctx(388)
  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
[2005/11/27 12:05:48, 3] smbd/sec_ctx.c:set_sec_ctx(288)
  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2005/11/27 12:05:48, 3] smbd/sec_ctx.c:pop_sec_ctx(386)
  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
[2005/11/27 12:05:48, 3] smbd/sec_ctx.c:push_sec_ctx(256)
  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
[2005/11/27 12:05:48, 3] smbd/uid.c:push_conn_ctx(388)
  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
[2005/11/27 12:05:48, 3] smbd/sec_ctx.c:set_sec_ctx(288)
  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2005/11/27 12:05:48, 3] smbd/sec_ctx.c:push_sec_ctx(256)
  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
[2005/11/27 12:05:48, 3] smbd/uid.c:push_conn_ctx(388)
  push_conn_ctx(0) : conn_ctx_stack_ndx = 1
[2005/11/27 12:05:48, 3] smbd/sec_ctx.c:set_sec_ctx(288)
  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
[2005/11/27 12:05:48, 3] smbd/sec_ctx.c:pop_sec_ctx(386)
  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
[2005/11/27 12:05:48, 3] smbd/sec_ctx.c:push_sec_ctx(256)
  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
[2005/11/27 12:05:48, 3] smbd/uid.c:push_conn_ctx(388)
  push_conn_ctx(0) : conn_ctx_stack_ndx = 1
[2005/11/27 12:05:48, 3] smbd/sec_ctx.c:set_sec_ctx(288)
  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
[2005/11/27 12:05:48, 3] smbd/sec_ctx.c:pop_sec_ctx(386)
  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
[2005/11/27 12:05:48, 3] smbd/sec_ctx.c:pop_sec_ctx(386)
  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
[2005/11/27 12:05:48, 3] smbd/server.c:main(839)
  loaded services
[2005/11/27 12:05:48, 3] smbd/server.c:main(854)
  Becoming a daemon.
[2005/11/27 12:05:48, 2] lib/tallocmsg.c:register_msg_pool_usage(56)
  Registered MSG_REQ_POOL_USAGE
[2005/11/27 12:05:48, 2] lib/dmallocmsg.c:register_dmalloc_msgs(71)
  Registered MSG_REQ_DMALLOC_MARK and LOG_CHANGED
[2005/11/27 12:05:48, 3] printing/printing.c:start_background_queue(1321)
  start_background_queue: Starting background LPQ thread
[2005/11/27 12:05:48, 2] smbd/server.c:open_sockets_smbd(334)
  waiting for a connection
[2005/11/27 12:05:54, 3] smbd/oplock.c:init_oplocks(1380)
  open_oplock_ipc: opening loopback UDP socket.
[2005/11/27 12:05:54, 3] smbd/oplock_linux.c:linux_init_kernel_oplocks(309)
  Linux kernel oplocks enabled
[2005/11/27 12:05:54, 3] smbd/oplock.c:init_oplocks(1411)
  open_oplock ipc: pid = 5986, global_oplock_port = 32771
[2005/11/27 12:05:54, 3] smbd/process.c:process_smb(1114)
  Transaction 0 of length 183
[2005/11/27 12:05:54, 3] smbd/process.c:switch_message(900)
  switch message SMBnegprot (pid 5986) conn 0x0
[2005/11/27 12:05:54, 3] smbd/sec_ctx.c:set_sec_ctx(288)
  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2005/11/27 12:05:54, 3] smbd/negprot.c:reply_negprot(466)
  Requested protocol [PC NETWORK PROGRAM 1.0]
[2005/11/27 12:05:54, 3] smbd/negprot.c:reply_negprot(466)
  Requested protocol [MICROSOFT NETWORKS 1.03]
[2005/11/27 12:05:54, 3] smbd/negprot.c:reply_negprot(466)
  Requested protocol [MICROSOFT NETWORKS 3.0]
[2005/11/27 12:05:54, 3] smbd/negprot.c:reply_negprot(466)
  Requested protocol [LANMAN1.0]
[2005/11/27 12:05:54, 3] smbd/negprot.c:reply_negprot(466)
  Requested protocol [LM1.2X002]
[2005/11/27 12:05:54, 3] smbd/negprot.c:reply_negprot(466)
  Requested protocol [DOS LANMAN2.1]
[2005/11/27 12:05:54, 3] smbd/negprot.c:reply_negprot(466)
  Requested protocol [Samba]
[2005/11/27 12:05:54, 3] smbd/negprot.c:reply_nt1(331)
  not using SPNEGO
[2005/11/27 12:05:54, 3] smbd/negprot.c:reply_negprot(559)
  Selected protocol NT LANMAN 1.0
[2005/11/27 12:05:54, 3] smbd/process.c:process_smb(1114)
  Transaction 1 of length 142
[2005/11/27 12:05:54, 3] smbd/process.c:switch_message(900)
  switch message SMBsesssetupX (pid 5986) conn 0x0
[2005/11/27 12:05:54, 3] smbd/sec_ctx.c:set_sec_ctx(288)
  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2005/11/27 12:05:54, 3] smbd/sesssetup.c:reply_sesssetup_and_X(751)
  wct=13 flg2=0xc801
[2005/11/27 12:05:54, 3] smbd/sesssetup.c:reply_sesssetup_and_X(897)
  Domain=[MIDEARTH]  NativeOS=[Unix] NativeLanMan=[Samba 3.0.20b] 
PrimaryDomain=[null]
[2005/11/27 12:05:54, 3] smbd/sesssetup.c:reply_sesssetup_and_X(912)
  sesssetupX:name=[MIDEARTH]\[metalfan]@[192.168.10.66]
[2005/11/27 12:05:54, 3] smbd/sesssetup.c:check_guest_password(115)
  Got anonymous request
[2005/11/27 12:05:54, 3] auth/auth.c:check_ntlm_password(219)
  check_ntlm_password:  Checking password for unmapped user []\[]@[] 
with the new password interface
[2005/11/27 12:05:54, 3] auth/auth.c:check_ntlm_password(222)
  check_ntlm_password:  mapped user is: []\[]@[]
[2005/11/27 12:05:54, 3] auth/auth.c:check_ntlm_password(268)
  check_ntlm_password: guest authentication for user [] succeeded
[2005/11/27 12:05:54, 3] smbd/process.c:process_smb(1114)
  Transaction 2 of length 96
[2005/11/27 12:05:54, 3] smbd/process.c:switch_message(900)
  switch message SMBtconX (pid 5986) conn 0x0
[2005/11/27 12:05:54, 3] smbd/sec_ctx.c:set_sec_ctx(288)
  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2005/11/27 12:05:54, 3] auth/auth.c:check_ntlm_password(219)
  check_ntlm_password:  Checking password for unmapped user 
[MIDEARTH]\[metalfan]@[192.168.10.66] with the new password interface
[2005/11/27 12:05:54, 3] auth/auth.c:check_ntlm_password(222)
  check_ntlm_password:  mapped user is: [GANDALF]\[metalfan]@[192.168.10.66]
[2005/11/27 12:05:54, 3] smbd/sec_ctx.c:push_sec_ctx(256)
  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
[2005/11/27 12:05:54, 3] smbd/uid.c:push_conn_ctx(388)
  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
[2005/11/27 12:05:54, 3] smbd/sec_ctx.c:set_sec_ctx(288)
  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2005/11/27 12:05:54, 3] smbd/sec_ctx.c:pop_sec_ctx(386)
  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
[2005/11/27 12:05:54, 3] auth/auth_sam.c:check_sam_security(260)
  check_sam_security: Couldn't find user 'metalfan' in passdb.
[2005/11/27 12:05:54, 2] auth/auth.c:check_ntlm_password(317)
  check_ntlm_password:  Authentication for user [metalfan] -> [metalfan] 
FAILED with error NT_STATUS_NO_SUCH_USER
[2005/11/27 12:05:54, 3] smbd/password.c:authorise_login(600)
  authorise_login: ACCEPTED: guest account and guest ok (nobody)
[2005/11/27 12:05:54, 3] smbd/service.c:make_connection_snum(477)
  Connect path is '/tmp' for service [IPC$]
[2005/11/27 12:05:54, 3] smbd/sec_ctx.c:push_sec_ctx(256)
  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
[2005/11/27 12:05:54, 3] smbd/uid.c:push_conn_ctx(388)
  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
[2005/11/27 12:05:54, 3] smbd/sec_ctx.c:set_sec_ctx(288)
  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2005/11/27 12:05:54, 3] smbd/sec_ctx.c:get_current_groups(171)
  get_current_groups: user is in 1 groups: 65534
[2005/11/27 12:05:54, 3] smbd/sec_ctx.c:pop_sec_ctx(386)
  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
[2005/11/27 12:05:54, 3] smbd/sec_ctx.c:get_current_groups(171)
  get_current_groups: user is in 1 groups: 65534
[2005/11/27 12:05:54, 3] smbd/sec_ctx.c:push_sec_ctx(256)
  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
[2005/11/27 12:05:54, 3] smbd/uid.c:push_conn_ctx(388)
  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
[2005/11/27 12:05:54, 3] smbd/sec_ctx.c:set_sec_ctx(288)
  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2005/11/27 12:05:54, 3] smbd/sec_ctx.c:pop_sec_ctx(386)
  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
[2005/11/27 12:05:54, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(232)
  fetch sid from gid cache 65534 -> 
S-1-5-21-2782176782-1915697250-1140267049-132069
[2005/11/27 12:05:54, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(232)
  fetch sid from gid cache 65534 -> 
S-1-5-21-2782176782-1915697250-1140267049-132069
[2005/11/27 12:05:54, 3] lib/util_seaccess.c:se_access_check(250)
[2005/11/27 12:05:54, 3] lib/util_seaccess.c:se_access_check(251)
  se_access_check: user sid is S-1-5-21-2782176782-1915697250-1140267049-501
  se_access_check: also S-1-5-21-2782176782-1915697250-1140267049-132069
  se_access_check: also S-1-1-0
  se_access_check: also S-1-5-2
  se_access_check: also S-1-5-32-546
[2005/11/27 12:05:54, 3] smbd/vfs.c:vfs_init_default(215)
  Initialising default vfs hooks
[2005/11/27 12:05:54, 3] smbd/sec_ctx.c:set_sec_ctx(288)
  setting sec ctx (65534, 65534) - sec_ctx_stack_ndx = 0
[2005/11/27 12:05:54, 3] smbd/service.c:make_connection_snum(662)
  192.168.10.66 (192.168.10.66) connect to service IPC$ initially as 
user nobody (uid=65534, gid=65534) (pid 5986)
[2005/11/27 12:05:54, 3] smbd/sec_ctx.c:set_sec_ctx(288)
  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2005/11/27 12:05:54, 3] smbd/reply.c:reply_tcon_and_X(666)
  tconX service=IPC$
[2005/11/27 12:05:54, 3] smbd/process.c:process_smb(1114)
  Transaction 3 of length 113
[2005/11/27 12:05:54, 3] smbd/process.c:switch_message(900)
  switch message SMBtrans (pid 5986) conn 0x803542e0
[2005/11/27 12:05:54, 3] smbd/sec_ctx.c:set_sec_ctx(288)
  setting sec ctx (65534, 65534) - sec_ctx_stack_ndx = 0
[2005/11/27 12:05:54, 3] smbd/ipc.c:reply_trans(539)
  trans <\PIPE\LANMAN> data=0 params=19 setup=0
[2005/11/27 12:05:54, 3] smbd/ipc.c:named_pipe(334)
  named pipe command on <LANMAN> name
[2005/11/27 12:05:54, 3] smbd/lanman.c:api_reply(3580)
  Got API command 0 of form <WrLeh> <B13BWz> 
(tdscnt=0,tpscnt=19,mdrcnt=65504,mprcnt=1024)
[2005/11/27 12:05:54, 3] smbd/lanman.c:api_reply(3584)
  Doing RNetShareEnum
[2005/11/27 12:05:54, 3] smbd/lanman.c:api_RNetShareEnum(1548)
  RNetShareEnum gave 4 entries of 4 (1 65504 142 65504)
[2005/11/27 12:05:54, 3] smbd/process.c:process_smb(1114)
  Transaction 4 of length 39
[2005/11/27 12:05:54, 3] smbd/process.c:switch_message(900)
  switch message SMBtdis (pid 5986) conn 0x803542e0
[2005/11/27 12:05:54, 3] smbd/sec_ctx.c:set_sec_ctx(288)
  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2005/11/27 12:05:54, 3] smbd/sec_ctx.c:set_sec_ctx(288)
  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2005/11/27 12:05:54, 3] smbd/service.c:close_cnum(835)
  192.168.10.66 (192.168.10.66) closed connection to service IPC$
[2005/11/27 12:05:54, 3] smbd/connection.c:yield_connection(69)
  Yielding connection to IPC$
[2005/11/27 12:05:54, 3] smbd/sec_ctx.c:set_sec_ctx(288)
  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2005/11/27 12:05:54, 3] smbd/process.c:timeout_processing(1366)
  timeout_processing: End of file from client (client has disconnected).
[2005/11/27 12:05:54, 3] smbd/sec_ctx.c:set_sec_ctx(288)
  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2005/11/27 12:05:54, 2] smbd/server.c:exit_server(612)
  Closing connections
[2005/11/27 12:05:54, 3] smbd/connection.c:yield_connection(69)
  Yielding connection to
[2005/11/27 12:05:54, 3] smbd/oplock.c:init_oplocks(1380)
  open_oplock_ipc: opening loopback UDP socket.
[2005/11/27 12:05:54, 3] smbd/oplock_linux.c:linux_init_kernel_oplocks(309)
  Linux kernel oplocks enabled
[2005/11/27 12:05:54, 3] smbd/oplock.c:init_oplocks(1411)
  open_oplock ipc: pid = 5987, global_oplock_port = 32772
[2005/11/27 12:05:54, 3] smbd/server.c:exit_server(656)
  Server exit (normal exit)
[2005/11/27 12:05:54, 3] smbd/process.c:process_smb(1114)
  Transaction 0 of length 72
[2005/11/27 12:05:54, 2] smbd/reply.c:reply_special(448)
  netbios connect: name1=192.168.10.66   name2=GANDALF
[2005/11/27 12:05:54, 2] smbd/reply.c:reply_special(455)
  netbios connect: local=192.168.10.66 remote=gandalf, name type = 0
[2005/11/27 12:05:54, 3] smbd/process.c:process_smb(1114)
  Transaction 1 of length 183
[2005/11/27 12:05:54, 3] smbd/process.c:switch_message(900)
  switch message SMBnegprot (pid 5987) conn 0x0
[2005/11/27 12:05:54, 3] smbd/sec_ctx.c:set_sec_ctx(288)
  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2005/11/27 12:05:54, 3] smbd/negprot.c:reply_negprot(466)
  Requested protocol [PC NETWORK PROGRAM 1.0]
[2005/11/27 12:05:54, 3] smbd/negprot.c:reply_negprot(466)
  Requested protocol [MICROSOFT NETWORKS 1.03]
[2005/11/27 12:05:54, 3] smbd/negprot.c:reply_negprot(466)
  Requested protocol [MICROSOFT NETWORKS 3.0]
[2005/11/27 12:05:54, 3] smbd/negprot.c:reply_negprot(466)
  Requested protocol [LANMAN1.0]
[2005/11/27 12:05:54, 3] smbd/negprot.c:reply_negprot(466)
  Requested protocol [LM1.2X002]
[2005/11/27 12:05:54, 3] smbd/negprot.c:reply_negprot(466)
  Requested protocol [DOS LANMAN2.1]
[2005/11/27 12:05:54, 3] smbd/negprot.c:reply_negprot(466)
  Requested protocol [Samba]
[2005/11/27 12:05:54, 3] smbd/negprot.c:reply_nt1(331)
  not using SPNEGO
[2005/11/27 12:05:54, 3] smbd/negprot.c:reply_negprot(559)
  Selected protocol NT LANMAN 1.0
[2005/11/27 12:05:54, 3] smbd/process.c:process_smb(1114)
  Transaction 2 of length 142
[2005/11/27 12:05:54, 3] smbd/process.c:switch_message(900)
  switch message SMBsesssetupX (pid 5987) conn 0x0
[2005/11/27 12:05:54, 3] smbd/sec_ctx.c:set_sec_ctx(288)
  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2005/11/27 12:05:54, 3] smbd/sesssetup.c:reply_sesssetup_and_X(751)
  wct=13 flg2=0xc801
[2005/11/27 12:05:54, 3] smbd/sesssetup.c:reply_sesssetup_and_X(897)
  Domain=[MIDEARTH]  NativeOS=[Unix] NativeLanMan=[Samba 3.0.20b] 
PrimaryDomain=[null]
[2005/11/27 12:05:54, 3] smbd/sesssetup.c:reply_sesssetup_and_X(912)
  sesssetupX:name=[MIDEARTH]\[metalfan]@[gandalf]
[2005/11/27 12:05:54, 3] smbd/sesssetup.c:check_guest_password(115)
  Got anonymous request
[2005/11/27 12:05:54, 3] auth/auth.c:check_ntlm_password(219)
  check_ntlm_password:  Checking password for unmapped user []\[]@[] 
with the new password interface
[2005/11/27 12:05:54, 3] auth/auth.c:check_ntlm_password(222)
  check_ntlm_password:  mapped user is: []\[]@[]
[2005/11/27 12:05:54, 3] auth/auth.c:check_ntlm_password(268)
  check_ntlm_password: guest authentication for user [] succeeded
[2005/11/27 12:05:54, 3] smbd/process.c:process_smb(1114)
  Transaction 3 of length 96
[2005/11/27 12:05:54, 3] smbd/process.c:switch_message(900)
  switch message SMBtconX (pid 5987) conn 0x0
[2005/11/27 12:05:54, 3] smbd/sec_ctx.c:set_sec_ctx(288)
  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2005/11/27 12:05:54, 3] auth/auth.c:check_ntlm_password(219)
  check_ntlm_password:  Checking password for unmapped user 
[MIDEARTH]\[metalfan]@[gandalf] with the new password interface
[2005/11/27 12:05:54, 3] auth/auth.c:check_ntlm_password(222)
  check_ntlm_password:  mapped user is: [GANDALF]\[metalfan]@[gandalf]
[2005/11/27 12:05:54, 3] smbd/sec_ctx.c:push_sec_ctx(256)
  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
[2005/11/27 12:05:54, 3] smbd/uid.c:push_conn_ctx(388)
  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
[2005/11/27 12:05:54, 3] smbd/sec_ctx.c:set_sec_ctx(288)
  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2005/11/27 12:05:54, 3] smbd/sec_ctx.c:pop_sec_ctx(386)
  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
[2005/11/27 12:05:54, 3] auth/auth_sam.c:check_sam_security(260)
  check_sam_security: Couldn't find user 'metalfan' in passdb.
[2005/11/27 12:05:54, 2] auth/auth.c:check_ntlm_password(317)
  check_ntlm_password:  Authentication for user [metalfan] -> [metalfan] 
FAILED with error NT_STATUS_NO_SUCH_USER
[2005/11/27 12:05:54, 3] smbd/password.c:authorise_login(600)
  authorise_login: ACCEPTED: guest account and guest ok (nobody)
[2005/11/27 12:05:54, 3] smbd/service.c:make_connection_snum(477)
  Connect path is '/tmp' for service [IPC$]
[2005/11/27 12:05:54, 3] smbd/sec_ctx.c:push_sec_ctx(256)
  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
[2005/11/27 12:05:54, 3] smbd/uid.c:push_conn_ctx(388)
  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
[2005/11/27 12:05:54, 3] smbd/sec_ctx.c:set_sec_ctx(288)
  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2005/11/27 12:05:54, 3] smbd/sec_ctx.c:get_current_groups(171)
  get_current_groups: user is in 1 groups: 65534
[2005/11/27 12:05:54, 3] smbd/sec_ctx.c:pop_sec_ctx(386)
  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
[2005/11/27 12:05:54, 3] smbd/sec_ctx.c:get_current_groups(171)
  get_current_groups: user is in 1 groups: 65534
[2005/11/27 12:05:54, 3] smbd/sec_ctx.c:push_sec_ctx(256)
  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
[2005/11/27 12:05:54, 3] smbd/uid.c:push_conn_ctx(388)
  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
[2005/11/27 12:05:54, 3] smbd/sec_ctx.c:set_sec_ctx(288)
  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2005/11/27 12:05:54, 3] smbd/sec_ctx.c:pop_sec_ctx(386)
  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
[2005/11/27 12:05:54, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(232)
  fetch sid from gid cache 65534 -> 
S-1-5-21-2782176782-1915697250-1140267049-132069
[2005/11/27 12:05:54, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(232)
  fetch sid from gid cache 65534 -> 
S-1-5-21-2782176782-1915697250-1140267049-132069
[2005/11/27 12:05:54, 3] lib/util_seaccess.c:se_access_check(250)
[2005/11/27 12:05:54, 3] lib/util_seaccess.c:se_access_check(251)
  se_access_check: user sid is S-1-5-21-2782176782-1915697250-1140267049-501
  se_access_check: also S-1-5-21-2782176782-1915697250-1140267049-132069
  se_access_check: also S-1-1-0
  se_access_check: also S-1-5-2
  se_access_check: also S-1-5-32-546
[2005/11/27 12:05:54, 3] smbd/vfs.c:vfs_init_default(215)
  Initialising default vfs hooks
[2005/11/27 12:05:54, 3] smbd/sec_ctx.c:set_sec_ctx(288)
  setting sec ctx (65534, 65534) - sec_ctx_stack_ndx = 0
[2005/11/27 12:05:54, 3] smbd/service.c:make_connection_snum(662)
  gandalf (192.168.10.66) connect to service IPC$ initially as user 
nobody (uid=65534, gid=65534) (pid 5987)
[2005/11/27 12:05:54, 3] smbd/sec_ctx.c:set_sec_ctx(288)
  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2005/11/27 12:05:54, 3] smbd/reply.c:reply_tcon_and_X(666)
  tconX service=IPC$
[2005/11/27 12:05:54, 3] smbd/process.c:process_smb(1114)
  Transaction 4 of length 129
[2005/11/27 12:05:54, 3] smbd/process.c:switch_message(900)
  switch message SMBtrans (pid 5987) conn 0x803542d8
[2005/11/27 12:05:54, 3] smbd/sec_ctx.c:set_sec_ctx(288)
  setting sec ctx (65534, 65534) - sec_ctx_stack_ndx = 0
[2005/11/27 12:05:54, 3] smbd/ipc.c:reply_trans(539)
  trans <\PIPE\LANMAN> data=0 params=35 setup=0
[2005/11/27 12:05:54, 3] smbd/ipc.c:named_pipe(334)
  named pipe command on <LANMAN> name
[2005/11/27 12:05:54, 3] smbd/lanman.c:api_reply(3580)
  Got API command 104 of form <WrLehDz> <B16BBDz> 
(tdscnt=0,tpscnt=35,mdrcnt=65535,mprcnt=8)
[2005/11/27 12:05:54, 3] smbd/lanman.c:api_reply(3584)
  Doing NetServerEnum
[2005/11/27 12:05:54, 3] smbd/lanman.c:api_RNetServerEnum(1270)
  NetServerEnum domain = MIDEARTH uLevel=1 counted=1 total=1
[2005/11/27 12:05:54, 3] smbd/process.c:process_smb(1114)
  Transaction 5 of length 129
[2005/11/27 12:05:54, 3] smbd/process.c:switch_message(900)
  switch message SMBtrans (pid 5987) conn 0x803542d8
[2005/11/27 12:05:54, 3] smbd/ipc.c:reply_trans(539)
  trans <\PIPE\LANMAN> data=0 params=35 setup=0
[2005/11/27 12:05:54, 3] smbd/ipc.c:named_pipe(334)
  named pipe command on <LANMAN> name
[2005/11/27 12:05:54, 3] smbd/lanman.c:api_reply(3580)
  Got API command 104 of form <WrLehDz> <B16BBDz> 
(tdscnt=0,tpscnt=35,mdrcnt=65535,mprcnt=8)
[2005/11/27 12:05:54, 3] smbd/lanman.c:api_reply(3584)
  Doing NetServerEnum
[2005/11/27 12:05:54, 3] smbd/lanman.c:api_RNetServerEnum(1270)
  NetServerEnum domain = MIDEARTH uLevel=1 counted=1 total=1
[2005/11/27 12:05:54, 3] smbd/process.c:process_smb(1114)
  Transaction 6 of length 39
[2005/11/27 12:05:54, 3] smbd/process.c:switch_message(900)
  switch message SMBtdis (pid 5987) conn 0x803542d8
[2005/11/27 12:05:54, 3] smbd/sec_ctx.c:set_sec_ctx(288)
  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2005/11/27 12:05:54, 3] smbd/sec_ctx.c:set_sec_ctx(288)
  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2005/11/27 12:05:54, 3] smbd/service.c:close_cnum(835)
  gandalf (192.168.10.66) closed connection to service IPC$
[2005/11/27 12:05:54, 3] smbd/connection.c:yield_connection(69)
  Yielding connection to IPC$
[2005/11/27 12:05:54, 3] smbd/sec_ctx.c:set_sec_ctx(288)
  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2005/11/27 12:05:54, 3] smbd/process.c:timeout_processing(1366)
  timeout_processing: End of file from client (client has disconnected).
[2005/11/27 12:05:54, 3] smbd/sec_ctx.c:set_sec_ctx(288)
  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2005/11/27 12:05:54, 2] smbd/server.c:exit_server(612)
  Closing connections
[2005/11/27 12:05:54, 3] smbd/connection.c:yield_connection(69)
  Yielding connection to
[2005/11/27 12:05:54, 3] smbd/server.c:exit_server(656)
  Server exit (normal exit)

my conf:
  
[global]
workgroup = MIDEARTH
netbios name = GANDALF
security = SHARE
message command = sh -c '/usr/kde/3.4/bin/winpopup-send.sh %s %m' &


bind interfaces only = yes
interfaces = eth0 lo

passdb backend = tdbsam
guest account = nobody

#logging
log file = /tmp/samba.log
log level = 3


[data]
comment = Data
path = /home/metalfan/Windows
guest only = Yes
writeable = Yes             


and the smbclient  -NL localip output:

Domain=[MIDEARTH] OS=[Unix] Server=[Samba 3.0.20b]

        Sharename       Type      Comment
        ---------       ----      -------
        data            Disk      Data
        data2           Disk
        IPC$            IPC       IPC Service (Samba 3.0.20b)
        ADMIN$          IPC       IPC Service (Samba 3.0.20b)
Domain=[MIDEARTH] OS=[Unix] Server=[Samba 3.0.20b]

        Server               Comment
        ---------            -------
        GANDALF              Samba 3.0.20b

        Workgroup            Master
        ---------            -------
        MIDEARTH



shouldnt i just get some error like..no user.. ?

greets
Julius

Jeroen van Meeuwen

2005-Nov-27 11:32 UTC

head link

[Samba] smbpasswd -d nobody, listing still possible?

Julius,

Set 'security = user'.

Kind regards,

Jeroen van Meeuwen

--
kanarip


> -----Original Message-----
> Subject: [Samba] smbpasswd -d nobody, listing still possible?
> 
> hi,
> 
> i wondered why i can still list my shares with "smbclient -NL
localip",
> security = SHARE ....i just disable the user nobody?
>
> my conf:
> 
> [global]
> workgroup = MIDEARTH
> netbios name = GANDALF
> security = SHARE
> message command = sh -c '/usr/kde/3.4/bin/winpopup-send.sh %s %m'
&
> 
> 
> bind interfaces only = yes
> interfaces = eth0 lo
> 
> passdb backend = tdbsam
> guest account = nobody
> 
> #logging
> log file = /tmp/samba.log
> log level = 3
> 
> 
> [data]
> comment = Data
> path = /home/metalfan/Windows
> guest only = Yes
> writeable = Yes
> 
> 
> and the smbclient  -NL localip output:
> 
> Domain=[MIDEARTH] OS=[Unix] Server=[Samba 3.0.20b]
> 
>         Sharename       Type      Comment
>         ---------       ----      -------
>         data            Disk      Data
>         data2           Disk
>         IPC$            IPC       IPC Service (Samba 3.0.20b)
>         ADMIN$          IPC       IPC Service (Samba 3.0.20b)
> Domain=[MIDEARTH] OS=[Unix] Server=[Samba 3.0.20b]
> 
>         Server               Comment
>         ---------            -------
>         GANDALF              Samba 3.0.20b
> 
>         Workgroup            Master
>         ---------            -------
>         MIDEARTH
> 
> 
> 
> shouldnt i just get some error like..no user.. ?
> 
> greets
> Julius
> --
> To unsubscribe from this list go to the following URL and read the
> instructions:  https://lists.samba.org/mailman/listinfo/samba

Seemingly Similar Threads

Search for more apparently analagous threads

samba - Nov 2005 - smbpasswd -d nobody, listing still possible?

[Samba] smbpasswd -d nobody, listing still possible?

[Samba] smbpasswd -d nobody, listing still possible?

Seemingly Similar Threads