Hello, We are working with samba 1.9.16p11 on Solaris. Connections are made from Windows NT or Windows 3.11 PC's. In the smb.conf man pages, the public parameter definition explains that a public directory is accessed with the privileges of the guest account. In that case, I have a problem in understanding one of the example given in the default configuration file ( example/simple/smb.conf ): ; A publicly accessible directory, but read only, except for people in ; the staff group ;[public] ; comment = Public Stuff ; path = /usr/somewhere/public ; public = yes ; writable = no ; printable = no ; write list = @staff How is it possible to define a write list when all the users accessing the directory are seen as "guest" ( no password required ) ? Thanks for your help --.--.--.--.--.--.--.--.--.--.--.--.--.--.--.--.--.--.--.--. . Troian Pierre - THOMSON multimedia R&D France . tel : (33) 02 99 27 35 88 - fax : (33) 02 99 27 30 01 . email : troian@kiki.rennes.thmulti.com (SUN) --.--.--.--.--.--.--.--.--.--.--.--.--.--.--.--.--.--.--.--.
On Wed, 22 Oct 1997 00:55:16 +1000, you wrote:> > Hello, > > We are working with samba 1.9.16p11 on Solaris. Connections are made > from Windows NT or Windows 3.11 PC's. > > In the smb.conf man pages, the public parameter definition explains that > a public directory is accessed with the privileges of the guest account. > > In that case, I have a problem in understanding one of the example given > in the default configuration file ( example/simple/smb.conf ): > >; A publicly accessible directory, but read only, except for people in >; the staff group >;[public] >; comment = Public Stuff >; path = /usr/somewhere/public >; public = yes >; writable = no >; printable = no >; write list = @staff > > How is it possible to define a write list when all the users accessing > the directory are seen as "guest" ( no password required ) ? >Because you can actually connect with a username, samba falls back on guest if all 5 other possible password validation methods fail (or none is supplied) (see the bottom of man smb.conf for info on how it chooses how to log people in). Try doing: smbclient //server/public_share -U username and you will be suprised to find that you are prompted for a password and can login with a true username/password and land up using the username you supplied. If you put 'guest only = yes' in your smb.conf for a guest share then samba will skip all other 5 methods of password validation and force someone in as a guest user.
--On Thursday, October 23, 1997, 1:42 AM +1000 "Simon Hyde" <shyde@poboxes.com> wrote: } Because you can actually connect with a username, samba falls back on guest } if all 5 other possible password validation methods fail (or none is } supplied) (see the bottom of man smb.conf for info on how it chooses how to } log people in). } Try doing: } smbclient //server/public_share -U username } and you will be suprised to find that you are prompted for a password and } can login with a true username/password and land up using the username you } supplied. If you put 'guest only = yes' in your smb.conf for a guest share } then samba will skip all other 5 methods of password validation and force } someone in as a guest user. One difference I've noticed since the installation of 1.9.17p4 is that passwords are being requested for public directories on the samba server. Before P4, passwords weren't being requested. I'm using an NT server as the password server. Guests still get in. It seemed to improve things to add "guest ok = yes" in addition to "public = yes" for the public shares. If I read your analysis right, this wouldn't happen if the shares were marked "guest only", but what changed in 1.9.17p4 to cause the query? Jim -- Jim Watt jimw@PE-Nelson.COM Perkin-Elmer Corporation Voice (desk): +1 408 577 2228 PE-Nelson Division Fax: +1 408 894 9307 3833 North First Street Voice (main): +1 408 577 2200 San Jose CA 95134-1701