samba - Apr 2006 - How to map locked user Administrator in AD domain to guest ?

Hello

I have Samba running as AD member. In addition there is a support of
quest user connections to shares, that allow guest connections to
shares, where access is restricted on IP addresses base. 

Problem is, that Administrator is not mapped to guest, because
Administrator in AD domain is locked. Samba gets respond
NT_STATUS_ACCOUNT_LOCKED_OUT and denies connection. While computers,
that are not AD members want use Samba shares that are guest allowed and
can't do that while logged in as Administrator. If Administrator is
unlocked - option map to guest on bad password is working perfect.

Is there a way to say, that user Administrator must be guest even if it
is locked ?


With best regards
Martynas Buozis

Hello

So maybe somebody can advice if it is possible to configure SAMBA so,
that user Administrator would map to guest even if it is locked in
domain ? Or it is definitely not possible ?

Also it is strange, that without password it is working, while it is not
working when password is specified ! 

# smbclient //smb/admin$ -U Administrator%
Anonymous login successful
Domain=[DOM] OS=[Unix] Server=[Samba 3.0.20]
smb: \> 

# smbclient //smb/admin$ -U Administrator%dummy
session setup failed: NT_STATUS_ACCOUNT_LOCKED_OUT
dfrsec02:~/dumps#

Why second case can't be handled as first one ?


With best regards
Martynas 
 
-----Original Message-----
From: samba-bounces+martynas=ti.com@lists.samba.org
[mailto:samba-bounces+martynas=ti.com@lists.samba.org] On Behalf Of
Buozis, Martynas
Sent: Tuesday, April 18, 2006 2:30 PM
To: samba@samba.org
Subject: [Samba] How to map locked user Administrator in AD domain to
guest ?

Hello

I have Samba running as AD member. In addition there is a support of
quest user connections to shares, that allow guest connections to
shares, where access is restricted on IP addresses base. 

Problem is, that Administrator is not mapped to guest, because
Administrator in AD domain is locked. Samba gets respond
NT_STATUS_ACCOUNT_LOCKED_OUT and denies connection. While computers,
that are not AD members want use Samba shares that are guest allowed and
can't do that while logged in as Administrator. If Administrator is
unlocked - option map to guest on bad password is working perfect.

Is there a way to say, that user Administrator must be guest even if it
is locked ?


With best regards
Martynas Buozis
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba