Hi, I experiemented a bit with the guest account parameter the other day, and I some questions: a) It seems to me that if you turn this parameter on, the user will be used when someone browses the domain without beeing a domain member, is this a true observation? (Don't answer this one, I checked the manual and it said yes). b) It also seems that the guestuser must have a sambaSid that ends in 501, else samba will not find the user, correct? c) Also, if I want a guest user that can log on to my domain without a password, but who will not have any access to shares etc, should I then use this "guest" user or should I create a special user for this? I think the questions are quite basic, but I just wanted to check that I am correct. Tarjei
Hi, I experiemented a bit with the guest account parameter the other day, and I some questions: a) It seems to me that if you turn this parameter on, the user will be used when someone browses the domain without beeing a domain member, is this a true observation? (Don't answer this one, I checked the manual and it said yes). b) It also seems that the guestuser must have a sambaSid that ends in 501, else samba will not find the user, correct? c) Also, if I want a guest user that can log on to my domain without a password, but who will not have any access to shares etc, should I then use this "guest" user or should I create a special user for this? I think the questions are quite basic, but I just wanted to check that I am correct. Tarjei
Hi, I experiemented a bit with the guest account parameter the other day, and I some questions: a) It seems to me that if you turn this parameter on, the user will be used when someone browses the domain without beeing a domain member, is this a true observation? (Don't answer this one, I checked the manual and it said yes). b) It also seems that the guestuser must have a sambaSid that ends in 501, else samba will not find the user, correct? c) Also, if I want a guest user that can log on to my domain without a password, but who will not have any access to shares etc, should I then use this "guest" user or should I create a special user for this? I think the questions are quite basic, but I just wanted to check that I am correct. Tarjei
On Wed, Jan 14, 2004 at 02:25:17PM +0100, Tarjei Huse wrote:> Hi, > > I experiemented a bit with the guest account parameter the other day, > and I some questions: > > a) It seems to me that if you turn this parameter on, the user will be > used when someone browses the domain without beeing a domain member, is > this a true observation? > (Don't answer this one, I checked the manual and it said yes).It is also used by existing domain members, for the logon process.> b) It also seems that the guestuser must have a sambaSid that ends in > 501, else samba will not find the user, correct?We make up an account if you don't supply one, and we will get nasty side-effects if you don't give it a RID of 501> c) Also, if I want a guest user that can log on to my domain without a > password, but who will not have any access to shares etc, should I then > use this "guest" user or should I create a special user for this?Use this account. This is done (if you want to match win2k behaviour) with the 'map to guest = bad user' parameter. Andrew Bartlett