samba - Aug 2019 - Samba 4.8.3 - Stand-alone server

Presently, we do not wish to use domain credentials - samba users and
passwords have been set.

The testparm and smbclient do not show any errors - smbclient on this server
allows access as desired.

 

When attempting to map a share in a PC environment and for a quick moment,
the share is visible.

However, to establish the map, me the user is asked for their credentials in
a Windows domain user credential pop-up.

 

Not being a Windows/domain administrator, nor a Samba Administrator, are we
missing something in the config file, or a setting in the domain? 

 

[global]

        workgroup = STA

        netbios name = sttest01

        server role = standalone

        security = user

        map to guest = Bad User

        passdb backend = tdbsam

 

        printing = cups

        printcap name = cups

        load printers = yes

        cups options = raw

 

        logfile = /var/log/samba/sambalog.log

        log level = 1 auth:5

 

        unix password sync = no

 

[homes]

        comment = Home Directories

        valid users = %S, %D%w%S

        browseable = No

        read only = No

        inherit acls = Yes

 

[printers]

        comment = All Printers

        path = /var/tmp

        printable = Yes

        create mask = 0600

        browseable = No

 

[print$]

        comment = Printer Drivers

        path = /var/lib/samba/drivers

        write list = @printadmin root

        force group = @printadmin

        create mask = 0664

        directory mask = 0775

 

[AXIARListen]

   comment = Axiar Listen directory Retrieval

   path = /AXIAR/listen

   public = yes

   writeable = yes

   printable = no

   create mask = 0777

   guest only = true

On 16/08/2019 17:39, Bob Wyatt via samba wrote:
> Presently, we do not wish to use domain credentials - samba users and
> passwords have been set.
>
> However, to establish the map, me the user is asked for their credentials
in
> a Windows domain user credential pop-up.
>
> Not being a Windows/domain administrator, nor a Samba Administrator, are we
> missing something in the config file, or a setting in the domain?
>
> [global]
>          workgroup = STA
>          netbios name = sttest01
>          server role = standalone
>          security = user
>          map to guest = Bad User
>          passdb backend = tdbsam
>          printing = cups
>          printcap name = cups
>          load printers = yes
>          cups options = raw
>          logfile = /var/log/samba/sambalog.log
>          log level = 1 auth:5
>          unix password sync = no
>
> [homes]
>          comment = Home Directories
>          valid users = %S, %D%w%S
>          browseable = No
>          read only = No
>          inherit acls = Yes
>
> [printers]
>          comment = All Printers
>          path = /var/tmp
>          printable = Yes
>          create mask = 0600
>          browseable = No
>
> [print$]
>          comment = Printer Drivers
>          path = /var/lib/samba/drivers
>          write list = @printadmin root
>          force group = @printadmin
>          create mask = 0664
>          directory mask = 0775
>
> [AXIARListen]
>     comment = Axiar Listen directory Retrieval
>     path = /AXIAR/listen
>     public = yes
>     writeable = yes
>     printable = no
>     create mask = 0777
>     guest only = true
>
You will probably always be asked for authentication. I take it we are 
talking about the 'AXIARListen' share here, if so, then only the guest 
user will be allowed access. To ensure that it is a guest user, Samba 
has to check that the user is unknown, so it checks the connecting user 
against its database and if unknown, the user is mapped to the guest 
user, it will do this every time a user connect, because the unknown 
user will not be stored in Samba's database.

Rowland