I spotted these entries in a log from samba. They are from a win2k box
and it appears that someone mapped a drive to the /tmp directory as the
nobody user. In /tmp there are a bunch of empty files owned by the
nobody user. Has anybody seen this before or have any hints as to what
is going on.
Any help would be appreciated.
[2003/09/09 10:45:09, 3] smbd/password.c:register_vuid(336)
uid 99 registered to name nobody
[2003/09/09 10:45:09, 3] smbd/password.c:register_vuid(338)
Clearing default real name
[2003/09/09 10:45:09, 3] smbd/password.c:register_vuid(340)
User name: nobody Real name: Nobody
[2003/09/09 10:45:09, 3] smbd/process.c:chain_reply(1023)
Chained message
[2003/09/09 10:45:09, 3] smbd/process.c:switch_message(685)
switch message SMBtconX (pid 6337)
[2003/09/09 10:45:09, 3] smbd/sec_ctx.c:set_sec_ctx(328)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2003/09/09 10:45:09, 3] smbd/password.c:authorise_login(854)
authorise_login: ACCEPTED: guest account and guest ok (nobody)
[2003/09/09 10:45:09, 3] smbd/service.c:make_connection(487)
Connect path is /tmp
Thanks