samba - Nov 2002 - NULL sessions - Listing shares anonymously - restrict anonymous

Hi,
    I am running 2.2.5 and I would like to know if the
"restrict anonymous" as been implemented correctly, as it was supposed
to behave from the start, in order to deny
ALL anonymous connections as stated in the man :
"When restrict anonymous is yes, all anonymous connections are denied no
matter what they are for."

Ive been reading some dev mailing lists and someone said that there would be
0, 1 , 2 as
possible values to the "restrict anonymous" option, as it been done
yet ?

Yan

On Fri, 2002-11-15 at 12:44, Yannick Mercier wrote:
> Hi,
>     I am running 2.2.5 and I would like to know if the
> "restrict anonymous" as been implemented correctly, as it was
supposed
> to behave from the start, in order to deny
> ALL anonymous connections as stated in the man :
> "When restrict anonymous is yes, all anonymous connections are denied
no
> matter what they are for."
> 
> Ive been reading some dev mailing lists and someone said that there would
be
> 0, 1 , 2 as
> possible values to the "restrict anonymous" option, as it been
done yet ?
In Samba 3.0 we now have support for this new mode (0, 1 and 2 are now
implemented), where 'restrict anonymous' provides a security benefit. 

 The current 2.2 implementation is unfortunately named, and was designed
to prevent changes to %U in smb.conf macros.  

Andrew Bartlett

-- 
Andrew Bartlett                                 abartlet@pcug.org.au
Manager, Authentication Subsystems, Samba Team  abartlet@samba.org
Student Network Administrator, Hawker College   abartlet@hawkerc.net
http://samba.org     http://build.samba.org     http://hawkerc.net
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: This is a digitally signed message part
Url :
http://lists.samba.org/archive/samba/attachments/20021122/9e7962ac/attachment.bin

Yes I have tried the newest alpha version
it works for the restrict anonymous thing
but unfortunately, a bug with it or with WinXP
( but I presume it is a bug in samba alpha because
my WinXP box works perfectly with the old samba )
makes that after authentication, when loading desktop settings
my WinXP box reboots

So I cant use this alpha version


----- Original Message -----
From: "Andrew Bartlett" <abartlet@samba.org>
To: "Yannick Mercier" <ymercier@mxtest.homedns.org>
Cc: <samba@lists.samba.org>
Sent: Thursday, November 21, 2002 11:14 PM
Subject: Re: [Samba] NULL sessions - Listing shares anonymously -
restrictanonymous