samba - Sep 2008 - Anonymous connection to Samba PDC?

Hi,
is there a way to anonymously connect a Windows client to a Samba PDC? I
have some random clients which I currently don't want to add to the domain,
but would still like them to have access to one share.

For example, I have:

[skener]
        path = /var/spool/scanner/scans
        browseable = yes
        writable = yes
        force user = scanner
        force group = scanner
        guest ok = yes
        guest only = yes

When I connect with smbclient (either from localhost or any other Linux
host) this works:
[root@fundus-srv ~]# smbclient //fundus-srv/skener -N
Anonymous login successful
Domain=[FUNDUS] OS=[Unix] Server=[Samba 3.2.3]
smb: \>
>From the logs:
  fundus-srv (::ffff:192.168.1.4) connect to service skener initially as
user scanner (uid=1019, gid=516) (pid 1380)
[2008/09/03 16:34:03,  1] smbd/service.c:close_cnum(1401)

However, if I connect from a Windows machine (which is not a domain member),
this does not work as Windows/Samba insists on using the currently logged in
user. This of course fails since these users do not exist in the domain:
[2008/09/03 16:28:02,  2] auth/auth.c:check_ntlm_password(318)
  check_ntlm_password:  Authentication for user [richi] -> [richi] FAILED
with error NT_STATUS_NO_SUCH_USER


Is there a way to connect anonymously from Windows as well?

Thanks,
Richard

On Wednesday 03 September 2008 09:43:14 Richard Foltyn
wrote:
> Hi,
> is there a way to anonymously connect a Windows client to a Samba PDC? I
> have some random clients which I currently don't want to add to the
domain,
> but would still like them to have access to one share.
>
> For example, I have:
>
> [skener]
>         path = /var/spool/scanner/scans
>         browseable = yes
>         writable = yes
>         force user = scanner
>         force group = scanner
>         guest ok = yes
>         guest only = yes
>
> When I connect with smbclient (either from localhost or any other Linux
> host) this works:
> [root@fundus-srv ~]# smbclient //fundus-srv/skener -N
> Anonymous login successful
> Domain=[FUNDUS] OS=[Unix] Server=[Samba 3.2.3]
> smb: \>
>
> >From the logs:
>
>   fundus-srv (::ffff:192.168.1.4) connect to service skener initially as
> user scanner (uid=1019, gid=516) (pid 1380)
> [2008/09/03 16:34:03,  1] smbd/service.c:close_cnum(1401)
>
> However, if I connect from a Windows machine (which is not a domain
> member), this does not work as Windows/Samba insists on using the currently
> logged in user. This of course fails since these users do not exist in the
> domain: [2008/09/03 16:28:02,  2] auth/auth.c:check_ntlm_password(318)
>   check_ntlm_password:  Authentication for user [richi] -> [richi]
FAILED
> with error NT_STATUS_NO_SUCH_USER
>
>
> Is there a way to connect anonymously from Windows as well?
>
> Thanks,
> Richard
In your smb.conf [global] section add:
	map to guest = bad user

- John T.
-- 
John H Terpstra

"Don't do as I do; Show me better!" - Anonymous.