Hello
I am setting up a samba 4 DC in my home server, and I have multiple
shares I want to only be accessed after username/password input, and
those are working fine. However, I also want to have one share that can
be accessed by anyone in the network, without entering any credentials.
I searched around the internet and found that I could use "security =
user" and "map to guest = Bad User", but when I try to access the
share
from a Windows client I still get the credentials popup, and can only
see the share by either entering a real username and password or "\"
in
the username field and leaving the password blank.
Is there any way to have the share working the way I want it?
Thank you in advance.
Samba Version: 4.1.3
Operating System: Debian 3.2.51-1 x86_64
My smb.conf:
[global]
server role = active directory domain controller
workgroup = CASA
realm = **REMOVED**
netbios name = SATURN
server services = -dns
security = user
map to guest = Bad User
[netlogon]
path = /var/lib/samba/sysvol/dc.ttsda.cc/scripts
read only = no
browseable = no
[sysvol]
path = /var/lib/samba/sysvol
read only = no
browseable = no
[Musica]
path = /mnt/disks/ext1/Music
read only = no
public = yes
[Downloads]
path = /mnt/disks/ext1/Downloads
read only = no
New to samba 4 but in your share can you not just do [wideopenshare] path=/mnt/disk/ext/downloads guest ok = True read only = True browseable = True to something any cifs client can read ? On Tue, Feb 4, 2014 at 8:16 AM, Tiago Dias <tiago.dias at posteo.net> wrote:> Hello > > I am setting up a samba 4 DC in my home server, and I have multiple shares > I want to only be accessed after username/password input, and those are > working fine. However, I also want to have one share that can be accessed > by anyone in the network, without entering any credentials. > I searched around the internet and found that I could use "security > user" and "map to guest = Bad User", but when I try to access the share > from a Windows client I still get the credentials popup, and can only see > the share by either entering a real username and password or "\" in the > username field and leaving the password blank. > > Is there any way to have the share working the way I want it? > > Thank you in advance. > > Samba Version: 4.1.3 > Operating System: Debian 3.2.51-1 x86_64 > > My smb.conf: > [global] > server role = active directory domain controller > workgroup = CASA > realm = **REMOVED** > netbios name = SATURN > server services = -dns > > security = user > map to guest = Bad User > > [netlogon] > path = /var/lib/samba/sysvol/dc.ttsda.cc/scripts > read only = no > browseable = no > > [sysvol] > path = /var/lib/samba/sysvol > read only = no > browseable = no > > [Musica] > path = /mnt/disks/ext1/Music > read only = no > public = yes > > [Downloads] > path = /mnt/disks/ext1/Downloads > read only = no > -- > To unsubscribe from this list go to the following URL and read the > instructions: https://lists.samba.org/mailman/options/samba >-- David Bear mobile: (602) 903-6476
On Tue, 2014-02-04 at 15:16 +0000, Tiago Dias wrote:> Hello > > I am setting up a samba 4 DC in my home server, and I have multiple > shares I want to only be accessed after username/password input, and > those are working fine. However, I also want to have one share that can > be accessed by anyone in the network, without entering any credentials. > I searched around the internet and found that I could use "security = > user" and "map to guest = Bad User", but when I try to access the share > from a Windows client I still get the credentials popup, and can only > see the share by either entering a real username and password or "\" in > the username field and leaving the password blank. > > Is there any way to have the share working the way I want it?The issue is that 'map to guest = bad user' isn't hooked in to the AD DC code. There was a patch to implement it, based on the guest account (as windows does), but I didn't review it positively and I need to find and remember why I didn't like it. So currently this is incompatible with being an AD DC. Sorry, Andrew Bartlett -- Andrew Bartlett http://samba.org/~abartlet/ Authentication Developer, Samba Team http://samba.org Samba Developer, Catalyst IT http://catalyst.net.nz/services/samba