samba - Aug 2007 - How should guest access work with Samba 3 and User Mode Security???

Hi,

Please can someone confirm to me how guest access should work on a Samba
3 Server configured for User Mode Security.

Am I correct in thinking that shares configured as guest OK should be
accessible by users without accounts on the server and hence they should
not have to supply login name and password. (This used to work OK on
Samba 2 and Share Mode security)

I want to share out applications and a few other shares from my server
without having to create accounts on the server for the users and so
that they don't have to supply a username/password.

I am running Samba samba-3.0.24-5 and here is my smb.conf file:

Regards

Gary


[global]

workgroup = DFGSRV
server string = dfgsrv Samba Server %v
printcap name = /etc/printcap
load printers = yes
printing = cups
cups options = raw
log file = /var/log/samba/%m.log
max log size = 200
security = user
password level = 8
username level = 8
socket options = SO_KEEPALIVE SO_BROADCAST TCP_NODELAY IPTOS_THROUGHPUT
dns proxy = no 
log level = 9
deadtime = 30
oplocks = false
level2 oplocks = false
encrypt passwords = no
idmap uid = 16777216-33554431
idmap gid = 16777216-33554431
template shell = /bin/false
winbind use default domain = no
map to guest = Bad User


[homes]
   comment = Home Directories
   browseable = yes
   writable = yes
   create mode = 0664
   directory mode = 0775

[cdrom]
        path = /media/cdrom
        writeable = no
        browseable = yes
        guest ok = yes
        comment = dfgsrv CDROM Drive
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
- - - - -
This e-mail and any files transmitted with it are confidential and intended
solely for the use of the individual or entity to whom they are addressed.If you
have received this e-mail in error please notify the sender immediately and
delete this e-mail from your system.Please note that any views or opinions
presented in this e-mail are solely those of the author and do not necessarily
represent those of Ricardo (save for reports and other documentation formally
approved and signed for release to the intended recipient).Only Directors are
authorised to enter into legally binding obligations on behalf of Ricardo.
Ricardo may monitor outgoing and incoming e-mails and other telecommunications
systems.
By replying to this e-mail you give consent to such monitoring.The recipient
should check e-mail and any attachments for the presence of viruses. Ricardo
accepts no liability for any damage caused by any virus transmitted by this
e-mail. "Ricardo" means Ricardo plc and its subsidiary companies.
Ricardo plc is a public limited company registered in England with registered
number 00222915.
The registered office of Ricardo plc is Shoreham Technical Centre, Shoreham-by
Sea, West Sussex, BN43 5FG.
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
- - - - -

Mansell, Gary wrote:
> Hi,
>
> Please can someone confirm to me how guest access should work on a Samba
> 3 Server configured for User Mode Security.
>   
Not sure if this can be done or not, but what i know is that 
security=user you need to provide with the username and password.
http://www.samba.org/samba/docs/man/Samba-HOWTO-Collection/ServerType.html#id325823

Regards,
Kaustubh
> Am I correct in thinking that shares configured as guest OK should be
> accessible by users without accounts on the server and hence they should
> not have to supply login name and password. (This used to work OK on
> Samba 2 and Share Mode security)
>
> I want to share out applications and a few other shares from my server
> without having to create accounts on the server for the users and so
> that they don't have to supply a username/password.
>
> I am running Samba samba-3.0.24-5 and here is my smb.conf file:
>
> Regards
>
> Gary
>
>
> [global]
>
> workgroup = DFGSRV
> server string = dfgsrv Samba Server %v
> printcap name = /etc/printcap
> load printers = yes
> printing = cups
> cups options = raw
> log file = /var/log/samba/%m.log
> max log size = 200
> security = user
> password level = 8
> username level = 8
> socket options = SO_KEEPALIVE SO_BROADCAST TCP_NODELAY IPTOS_THROUGHPUT
> dns proxy = no 
> log level = 9
> deadtime = 30
> oplocks = false
> level2 oplocks = false
> encrypt passwords = no
> idmap uid = 16777216-33554431
> idmap gid = 16777216-33554431
> template shell = /bin/false
> winbind use default domain = no
> map to guest = Bad User
>
>
> [homes]
>    comment = Home Directories
>    browseable = yes
>    writable = yes
>    create mode = 0664
>    directory mode = 0775
>
> [cdrom]
>         path = /media/cdrom
>         writeable = no
>         browseable = yes
>         guest ok = yes
>         comment = dfgsrv CDROM Drive
> - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
- - - - - - -
> This e-mail and any files transmitted with it are confidential and intended
solely for the use of the individual or entity to whom they are addressed.If you
have received this e-mail in error please notify the sender immediately and
delete this e-mail from your system.Please note that any views or opinions
presented in this e-mail are solely those of the author and do not necessarily
represent those of Ricardo (save for reports and other documentation formally
approved and signed for release to the intended recipient).Only Directors are
authorised to enter into legally binding obligations on behalf of Ricardo.
Ricardo may monitor outgoing and incoming e-mails and other telecommunications
systems.
> By replying to this e-mail you give consent to such monitoring.The
recipient should check e-mail and any attachments for the presence of viruses.
Ricardo accepts no liability for any damage caused by any virus transmitted by
this e-mail. "Ricardo" means Ricardo plc and its subsidiary companies.
> Ricardo plc is a public limited company registered in England with
registered number 00222915.
> The registered office of Ricardo plc is Shoreham Technical Centre,
Shoreham-by Sea, West Sussex, BN43 5FG.
> - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
- - - - - - -
>