samba - Feb 2007 - Valid users not working on 3.0.23d

Hi,

Any one still having problems with "valid users" on 3.0.23d?
I'm working in "security = USER" mode and with local users only.

Share configuration :

[private]
        path = /home/private
        valid users = papo
        force user = root
        force group = root
        read only = No
        create mask = 0600
        directory mask = 0700

First test, anonymous :

[root@julieta /]# smbclient //julieta/private
Password:
Anonymous login successful
Domain=[DAC] OS=[Unix] Server=[Samba 3.0.23d]
tree connect failed: NT_STATUS_ACCESS_DENIED

So far, working.
Second test, using a valid but not listed user :

[root@julieta /]# smbclient //julieta/private -U administrator
Password:
Domain=[JULIETA] OS=[Unix] Server=[Samba 3.0.23d]
smb: \> mkdir 1
smb: \> rmdir 1
smb: \> quit

This is wrong, administrator shouldn't write, not even connect to the share.
"invalid users" seems to work ok though.
I can provide debug logs for both versions if needed.
Any hints?

Thanks.-

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 02/02/2007 01:08 PM, Papo Napolitano wrote:
> Any one still having problems with "valid users" on 3.0.23d?
> I'm working in "security = USER" mode and with local users
only.
> 
> Share configuration :
> 
> [private]
>         path = /home/private
>         valid users = papo
>         force user = root
>         force group = root
>         read only = No
>         create mask = 0600
>         directory mask = 0700
> 
[...]
> Second test, using a valid but not listed user :
> 
> [root@julieta /]# smbclient //julieta/private -U administrator
> Password:
> Domain=[JULIETA] OS=[Unix] Server=[Samba 3.0.23d]
> smb: \> mkdir 1
> smb: \> rmdir 1
> smb: \> quit
> 
> This is wrong, administrator shouldn't write, not even connect 
> to the share. "invalid users" seems to work ok though.
> I can provide debug logs for both versions if needed.
> Any hints?
	Is your administrator in the list of 'admin users'?

> Thanks.-
	Kind regards,

- --
Felipe Augusto van de Wiel <felipe@paranacidade.org.br>
Coordenadoria de Tecnologia da Informa??o (CTI) - SEDU/PARANACIDADE
http://www.paranacidade.org.br/           Phone: (+55 41 3350 3300)
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.6 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFFxz9zCj65ZxU4gPQRAjVQAKCMWQl39luBMWXxMcN73Z3pSiHnPwCgk1DR
8+0HSyl7roKBwGPxZyZZKrs=khZ1
-----END PGP SIGNATURE-----