When I do net groupmap add rid=514 ntgroup="Domain Guests"
unixgroup=nobody type=d and then try to connect to a share called share
which only allows guest connections with the following permissions:
[global]
guest account = nobody
map to guest = bad user
map to guest = bad password
[share]
path = /samba/admin
force directory mode = 777
writeable = Yes
create mode = 777
force create mode = 777
directory mode = 777
force group = admin
guest ok = Yes
guest only = Yes
I get the error in the samba log:
[2008/04/13 22:27:26, 2] passdb/pdb_ldap.c:init_group_from_ldap(2162)
init_group_from_ldap: Entry found for group: 65534
[2008/04/13 22:27:26, 1] auth/auth_util.c:create_token_from_username(1110)
nobody is a Domain Group, not a user
however, if I run net groupmap delete ntgroup="Domain Guests" then I
can
connect to the share fine. Why is this? Why can't samba connect as the
user nobody when the nobody group is mapped? nobody is loaded into ldap:
[root@roark samba]# ldapsearch -D
'cn=Manager,dc=mdah,dc=state,dc=ms,dc=us' -b
"uid=nobody,ou=People,dc=mdah,dc=state,dc=ms,dc=us" -w xxxxxxxxxxxx -x
# extended LDIF
#
# LDAPv3
# base <uid=nobody,ou=People,dc=mdah,dc=state,dc=ms,dc=us> with scope
subtree
# filter: (objectclass=*)
# requesting: ALL
#
# nobody, People, mdah.state.ms.us
dn: uid=nobody,ou=People,dc=mdah,dc=state,dc=ms,dc=us
uid: nobody
cn: Nobody
sn: Nobody
mail: nobody@mdah.state.ms.us
objectClass: person
objectClass: organizationalPerson
objectClass: inetOrgPerson
objectClass: posixAccount
objectClass: top
objectClass: shadowAccount
objectClass: hostObject
userPassword:: xxxxxxxxxxxxxxxx
shadowLastChange: 13966
shadowMax: 99999
shadowWarning: 7
loginShell: /bin/sh
uidNumber: 65534
gidNumber: 65534
host: roark
host: archives3
host: arrowhead
host: preshs
host: wmounds
host: manship
host: welty
homeDirectory: /home
gecos: Nobody
# search result
search: 2
result: 0 Success
# numResponses: 2
# numEntries: 1
[root@roark samba]#
[root@roark samba]# ldapsearch -D
'cn=Manager,dc=mdah,dc=state,dc=ms,dc=us' -b
"cn=nobody,ou=Group,dc=mdah,dc=state,dc=ms,dc=us" -w xxxxxxxxxx -x
# extended LDIF
#
# LDAPv3
# base <cn=nobody,ou=Group,dc=mdah,dc=state,dc=ms,dc=us> with scope
subtree
# filter: (objectclass=*)
# requesting: ALL
#
# nobody, Group, mdah.state.ms.us
dn: cn=nobody,ou=Group,dc=mdah,dc=state,dc=ms,dc=us
objectClass: posixGroup
objectClass: top
cn: nobody
userPassword:: xxxxxxxxxxxxxx
gidNumber: 65534
# search result
search: 2
result: 0 Success
# numResponses: 2
# numEntries: 1
