samba - Jan 2006 - guest account security = domain doesn't work...

Hi,
 
my security is domain, i would like to map users who fail authentication
to be
mapped to a guest account so they can access printers.

My conf file looks like this:
[global]
        workgroup = LAB2000DOMAIN2
        security = DOMAIN
        client schannel = No
        map to guest = Bad Password
        password server = 10.86.32.27
        log level = 4 passdb:5 auth:10 winbind:4
        log file = /local/local1/errorlog/samba.log
        max log size = 50
        smb ports = 50139
        lpq cache time = 0
        socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
        printcap name = cups
        preferred master = No
        local master = No
        domain master = No
        dns proxy = No
        wins server = 10.86.32.27
        idmap uid = 70000-200000
        idmap gid = 70000-200000
        template homedir = /local/local1/
        template shell = /admin-shell
        winbind cache time = 10
        winbind use default domain = Yes
        printer admin = @cupsAdmin
        cups options = "raw"
        force printername = Yes

[print$]
        path = /state/samba/printers
        write list = @cupsAdmin
        force user = root
        force group = root
        guest ok = Yes

[printers]
        comment = All Printers
        path = /local/local1/spool/samba
        guest ok = Yes
        printable = Yes
        browseable = No
But this does not work.
Any ideas?
Would greatly apreciate your help.
Thanks,
Aarti.

Aarti Varshney (asadhnan) wrote:
> my security is domain, i would like to map users who fail authentication
> to be
> mapped to a guest account so they can access printers.
> 
> My conf file looks like this:
> [global]
>         workgroup = LAB2000DOMAIN2
>         security = DOMAIN
>         client schannel = No
>         map to guest = Bad Password
map to guest= "Bad Password"
   means, user exists, but provided invalid password.

Maybe you really want:
map to guest = "Bad User"
or
map to guest = "Bad Uid"

man smb.conf for specific details and differences between these.

-- Rex

Aarti Varshney (asadhnan) wrote:
> my security is domain, i would like to map users who fail authentication
> to be
> mapped to a guest account so they can access printers.
> 
> My conf file looks like this:
> [global]
>         workgroup = LAB2000DOMAIN2
>         security = DOMAIN
>         client schannel = No
>         map to guest = Bad Password
map to guest= "Bad Password"
   means, user exists, but provided invalid password.

Maybe you really want:
map to guest = "Bad User"
or
map to guest = "Bad Uid"

man smb.conf for specific details and differences between these.

-- Rex

Hi Rex,
 
I did try  
map to guest = "Bad User"
and
map to guest = "Bad Uid"
But it did not work either.
-Aarti,
 
> map to guest= "Bad Password"
>    means, user exists, but provided invalid password.
>Maybe you really want:
> map to guest = "Bad User"
> or
> map to guest = "Bad Uid"
> man smb.conf for specific details and differences between these.