THIBADEAU,DAN (HP-Roseville,ex1)
2002-May-15 16:53 UTC
[Samba] connections always mapped to guest
I have setup Samba 2.2.4 on HPUX 11.0. I'm using it only as a print server. It appears that ALL connections are being mapped to "pcguest" regardless whether they are valid or not. I do not have a "username map" defined, "guest ok = yes" is set for my printer share. I am running winbindd, which seems to be working correctly. I ran the following command 5 times, changing the "map to guest" parameter, and typing my password correctly and incorrectly. Here are my results: -----------------------------------------------------------------------> smbclient '\\BOITEST\PR1234' -U dan_thibadeau -W palo-alto1) set: map to guest = Never typed correct password result: smbstatus shows "uid" is "pcguest" connection was made, and I got prompt (typed "exit") 2) set: map to guest = Never typed WRONG password result: session setup failed: NT_STATUS_LOGON_FAILURE 3) set: map to guest = Bad User typed correct password result: session setup failed: SUCCESS - 0 4) set: made no changes, just repeated test 3 result: smbstatus shows "uid" is "pcguest" connection was made, and I got a prompt (typed "exit") 5) set: map to guest = Bad User typed WRONG password result: smbstatus shows "uid" is "pcguest" connection was made, and I got a prompt (typed "exit") ----------------------------------------------------------------------- My concerns are: 1) Why are all connections being mapped to "pcguest"? 2) Why did I get a session failure of "SUCCESS - 0" on test 3? 3) Why did test 5 connect when I typed the wrong password? I have debug level 3 logs of each test and my smb.conf if requested. Dan Thibadeau
THIBADEAU,DAN (HP-Roseville,ex1)
2002-May-21 00:33 UTC
[Samba] connections always mapped to guest
Should all connections to a print share be connected as the guest account? I don't have a "username map" defined, and I'm running winbindd which I thought allowed "dynamic" UID assignment to connecting users. Yet "smbstatus" shows all connections as "pcguest". Also, I have "map to guest = Bad User", which I believe is ONLY supposed to map a user that is NOT found on the domain controller. Even if I set this to "Never" ALL users are still being mapped to "pcguest". The only difference is that "Bad User" allows them to print even if they type the WRONG password. I didn't think this was supposed to happen unless set to "Bad Password". I'm really confused, please help. Dan Thibadeau -----Original Message----- From: THIBADEAU,DAN (HP-Roseville,ex1) Sent: Wednesday, May 15, 2002 5:50 PM To: 'samba@lists.samba.org' Subject: [Samba] connections always mapped to guest I have setup Samba 2.2.4 on HPUX 11.0. I'm using it only as a print server. It appears that ALL connections are being mapped to "pcguest" regardless whether they are valid or not. I do not have a "username map" defined, "guest ok = yes" is set for my printer share. I am running winbindd, which seems to be working correctly. I ran the following command 5 times, changing the "map to guest" parameter, and typing my password correctly and incorrectly. Here are my results: -----------------------------------------------------------------------> smbclient '\\BOITEST\PR1234' -U dan_thibadeau -W palo-alto1) set: map to guest = Never typed correct password result: smbstatus shows "uid" is "pcguest" connection was made, and I got prompt (typed "exit") 2) set: map to guest = Never typed WRONG password result: session setup failed: NT_STATUS_LOGON_FAILURE 3) set: map to guest = Bad User typed correct password result: session setup failed: SUCCESS - 0 4) set: made no changes, just repeated test 3 result: smbstatus shows "uid" is "pcguest" connection was made, and I got a prompt (typed "exit") 5) set: map to guest = Bad User typed WRONG password result: smbstatus shows "uid" is "pcguest" connection was made, and I got a prompt (typed "exit") ----------------------------------------------------------------------- My concerns are: 1) Why are all connections being mapped to "pcguest"? 2) Why did I get a session failure of "SUCCESS - 0" on test 3? 3) Why did test 5 connect when I typed the wrong password? I have debug level 3 logs of each test and my smb.conf if requested. Dan Thibadeau
> I have setup Samba 2.2.4 on HPUX 11.0. I'm using it only as a print > server. It appears that ALL connections are being mapped to "pcguest" > regardless whether they are valid or not. I do not have a "username > map" defined, "guest ok = yes" is set for my printer share. I am > running winbindd, which seems to be working correctly. I ran the > following command 5 times, changing the "map to guest" parameter, and > typing my password correctly and incorrectly.I am having almost exactly the same problem. I am running Samba v2.2.5 on HP-UX 11.0, and two of my Win2k machines (that I've found so far) are exhibiting this behavior on the shared [homes] volume. The others seem to be working properly. Here's a brief excerpt of a debug = 3 chat between the working machine and the server and then the non working machine: --- working machine [2002/08/02 12:11:55, 3] smbd/sec_ctx.c:(162) get_current_groups: user is in 3 groups: 200, 331, 529 [2002/08/02 12:11:55, 3] smbd/password.c:(336) uid 2543 registered to name massonga [2002/08/02 12:11:55, 3] smbd/password.c:(338) Clearing default real name [2002/08/02 12:11:55, 3] smbd/password.c:(340) User name: massonga Real name: Gary Masson [2002/08/02 12:11:55, 3] smbd/process.c:(1022) Chained message [2002/08/02 12:11:55, 3] smbd/process.c:(684) switch message SMBtconX (pid 17580) [2002/08/02 12:11:55, 3] smbd/sec_ctx.c:(313) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2002/08/02 12:11:55, 3] lib/access.c:(318) check_access: no hostnames in host allow/deny list. [2002/08/02 12:11:55, 2] lib/access.c:(327) Allowed connection from (130.219.34.247) [2002/08/02 12:11:55, 3] smbd/password.c:(735) authorise_login: ACCEPTED: validated uid ok as non-guest (user=massonga) --- non-working machine [2002/08/02 13:05:41, 3] smbd/reply.c:(1039) Registered username massonga for guest access ... [2002/08/02 13:05:41, 3] smbd/password.c:(336) uid 2543 registered to name massonga [2002/08/02 13:05:41, 3] smbd/password.c:(338) Clearing default real name [2002/08/02 13:05:41, 3] smbd/password.c:(340) User name: massonga Real name: Gary Masson [2002/08/02 13:05:41, 3] smbd/process.c:(1022) Chained message [2002/08/02 13:05:41, 3] smbd/process.c:(684) switch message SMBtconX (pid 21679) [2002/08/02 13:05:41, 3] smbd/sec_ctx.c:(313) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2002/08/02 13:05:41, 3] lib/access.c:(318) check_access: no hostnames in host allow/deny list. [2002/08/02 13:05:41, 2] lib/access.c:(327) Allowed connection from (130.219.34.113) [2002/08/02 13:05:42, 3] smbd/password.c:(854) authorise_login: ACCEPTED: guest account and guest ok (lmguest) ...why on earth did it decide that he was a guest? There is no logical reason for it. I have 'map to guest' set to "bad user." Doesn't make sense to me. I am willing to send more data if you require, of course. Thank you very much -- this is stressing me out here! :) ---- _ _ _ _ ___ _ _ _ |Y#| | | |\/| | \ |\ | | | Ryan Novosielski - Jr. UNIX Systems Admin |$&| |__| | | |__/ | \| _| | novosirj@umdnj.edu - 973/972.0922 (2-0922) \__/ Univ. of Med. and Dent. | IST/ACS - New Jersey Medical School - C630
Ryan, Take a look at the "restrictanonymous" registry setting in the working/nonworking Win2k PCs. See if they are different. I've seen SMBtconX errors related to that setting in the past. "1" worked ok, "2" caused problems. Jim> -----Original Message----- > From: Ryan Novosielski [mailto:novosirj@UMDNJ.EDU] > Sent: Friday, August 02, 2002 1:04 PM > To: Samba Mailing List > Cc: dan_thibadeua@hp.com > Subject: [Samba] Re: Connections always mapped to guest > > > > I have setup Samba 2.2.4 on HPUX 11.0. I'm using it only as a print > > server. It appears that ALL connections are being mapped to > "pcguest" > > regardless whether they are valid or not. I do not have a "username > > map" defined, "guest ok = yes" is set for my printer share. I am > > running winbindd, which seems to be working correctly. I ran the > > following command 5 times, changing the "map to guest" > parameter, and > > typing my password correctly and incorrectly. > > I am having almost exactly the same problem. I am running > Samba v2.2.5 on > HP-UX 11.0, and two of my Win2k machines (that I've found so far) are > exhibiting this behavior on the shared [homes] volume. The > others seem to > be working properly. Here's a brief excerpt of a debug = 3 > chat between > the working machine and the server and then the non working machine: > > --- working machine > [2002/08/02 12:11:55, 3] smbd/sec_ctx.c:(162) > get_current_groups: user is in 3 groups: 200, 331, 529 > [2002/08/02 12:11:55, 3] smbd/password.c:(336) > uid 2543 registered to name massonga > [2002/08/02 12:11:55, 3] smbd/password.c:(338) > Clearing default real name > [2002/08/02 12:11:55, 3] smbd/password.c:(340) > User name: massonga Real name: Gary Masson > [2002/08/02 12:11:55, 3] smbd/process.c:(1022) > Chained message > [2002/08/02 12:11:55, 3] smbd/process.c:(684) > switch message SMBtconX (pid 17580) > [2002/08/02 12:11:55, 3] smbd/sec_ctx.c:(313) > setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 > [2002/08/02 12:11:55, 3] lib/access.c:(318) > check_access: no hostnames in host allow/deny list. > [2002/08/02 12:11:55, 2] lib/access.c:(327) > Allowed connection from (130.219.34.247) > [2002/08/02 12:11:55, 3] smbd/password.c:(735) > authorise_login: ACCEPTED: validated uid ok as non-guest > (user=massonga) > > --- non-working machine > > [2002/08/02 13:05:41, 3] smbd/reply.c:(1039) > Registered username massonga for guest access > ... > [2002/08/02 13:05:41, 3] smbd/password.c:(336) > uid 2543 registered to name massonga > [2002/08/02 13:05:41, 3] smbd/password.c:(338) > Clearing default real name > [2002/08/02 13:05:41, 3] smbd/password.c:(340) > User name: massonga Real name: Gary Masson > [2002/08/02 13:05:41, 3] smbd/process.c:(1022) > Chained message > [2002/08/02 13:05:41, 3] smbd/process.c:(684) > switch message SMBtconX (pid 21679) > [2002/08/02 13:05:41, 3] smbd/sec_ctx.c:(313) > setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 > [2002/08/02 13:05:41, 3] lib/access.c:(318) > check_access: no hostnames in host allow/deny list. > [2002/08/02 13:05:41, 2] lib/access.c:(327) > Allowed connection from (130.219.34.113) > [2002/08/02 13:05:42, 3] smbd/password.c:(854) > authorise_login: ACCEPTED: guest account and guest ok (lmguest) > > ...why on earth did it decide that he was a guest? There is no logical > reason for it. I have 'map to guest' set to "bad user." > Doesn't make sense > to me. I am willing to send more data if you require, of > course. Thank you > very much -- this is stressing me out here! :) > > ---- _ _ _ _ ___ _ _ _ > |Y#| | | |\/| | \ |\ | | | Ryan Novosielski - Jr. UNIX > Systems Admin > |$&| |__| | | |__/ | \| _| | novosirj@umdnj.edu - > 973/972.0922 (2-0922) > \__/ Univ. of Med. and Dent. | IST/ACS - New Jersey Medical > School - C630 > > > > -- > To unsubscribe from this list go to the following URL and read the > instructions: http://lists.samba.org/mailman/listinfo/samba >