samba - Jan 2003 - "Only users" seems nonfunctional

L.S.,

Excerpt from my smb.conf on Samba 2.2.5:

[global]
...
security = share

...

[BenD]
public = no
guest ok = no
user = bzt
only user = yes
path = <...>
writeable = yes
browseable = yes
printable = no

...

Now, according to the manpage for smb.conf, I should only be able to log in 
and use service BenD as user bzt. Nevertheless, I can log in as any user as 
long as I know the password. Even if I use smbclient and explicitly log in as 
a different user, the password is all I need to get in.

Am I missing something?

Thanks in advance,

-- 
Ben Z. Tels
bzt@bentels.dyndns.org
optimusb@stack.nl
http://www.stack.nl/~optimusb/
UIN:2474460

"The Earth is the cradle of the mind, but one cannot stay in the cradle
 forever."
                                        --Tsiolkovsky

On Sun, 5 Jan 2003, Ben Tels wrote:
> L.S.,
>
> Excerpt from my smb.conf on Samba 2.2.5:
>
> [global]
> ...
> security = share
             ^^^^^
This means, so long as I have ANY users' password I get in!

If you want to log on only as a particular user you should use 'USER'
mode
security.
>
> ...
>
> [BenD]
> public = no
> guest ok = no
> user = bzt
If you want to restrict access to only this user then instead of (or in
addition to - depending on what end result you want) add:

valid users = bzt
> only user = yes
> path = <...>
> writeable = yes
> browseable = yes
> printable = no
>
> ...
>
> Now, according to the manpage for smb.conf, I should only be able to log in
> and use service BenD as user bzt.
Not quite! See above.
> Nevertheless, I can log in as any user as long as I know the password.
> Even if I use smbclient and explicitly log in as a different user, the
> password is all I need to get in.
Correct! That is what you specified in smb.conf as what you want.
> Am I missing something?
See above suggestions.

- John T.
-- 
John H Terpstra
Email: jht@samba.org