Are these possible ? I am trying to setup a guest access printer attached to a working fileserver that authenticates its users against a Windows AD. I keep getting authentication requests on attempting to connect to the printer. Before I post my smb.conf, I need to know if what I am trying to do is even possible, Thanks.
Seems pathetic to reply to my own message, but since I cannot find any working examples via Google, I have to ask this question. Should be simple enough for the resident gurus to answer ? On Mon, Oct 18, 2010 at 10:38 AM, Madhusudan Singh < singh.madhusudan at gmail.com> wrote:> Are these possible ? > > I am trying to setup a guest access printer attached to a working > fileserver that authenticates its users against a Windows AD. I keep getting > authentication requests on attempting to connect to the printer. > > Before I post my smb.conf, I need to know if what I am trying to do is even > possible, > > Thanks. >
On 20 October 2010 17:52, Madhusudan Singh <singh.madhusudan at gmail.com> wrote:> Seems pathetic to reply to my own message, but since I cannot find any > working examples via Google, I have to ask this question. > > Should be simple enough for the resident gurus to answer ?I would guess you need to enable to Guest user in Active Directory and then set up the share such that the Guest user has access.> On Mon, Oct 18, 2010 at 10:38 AM, Madhusudan Singh < > singh.madhusudan at gmail.com> wrote: > >> Are these possible ? >> >> I am trying to setup a guest access printer attached to a working >> fileserver that authenticates its users against a Windows AD. I keep getting >> authentication requests on attempting to connect to the printer. >> >> Before I post my smb.conf, I need to know if what I am trying to do is even >> possible,-- Michael Wood <esiotrot at gmail.com>
Hello, I have no control over the active directory. I just authenticate a subset of its members to give them access to the fileserver. Does this mean that there is no true guest access when using ADS ? On Wed, Oct 20, 2010 at 3:34 PM, Michael Wood <esiotrot at gmail.com> wrote:> On 20 October 2010 17:52, Madhusudan Singh <singh.madhusudan at gmail.com> > wrote: > > Seems pathetic to reply to my own message, but since I cannot find any > > working examples via Google, I have to ask this question. > > > > Should be simple enough for the resident gurus to answer ? > > I would guess you need to enable to Guest user in Active Directory and > then set up the share such that the Guest user has access. > > > On Mon, Oct 18, 2010 at 10:38 AM, Madhusudan Singh < > > singh.madhusudan at gmail.com> wrote: > > > >> Are these possible ? > >> > >> I am trying to setup a guest access printer attached to a working > >> fileserver that authenticates its users against a Windows AD. I keep > getting > >> authentication requests on attempting to connect to the printer. > >> > >> Before I post my smb.conf, I need to know if what I am trying to do is > even > >> possible, > > -- > Michael Wood <esiotrot at gmail.com> >
On 21 October 2010 20:54, Madhusudan Singh <singh.madhusudan at gmail.com> wrote:> Hello, > > I have no control over the active directory. I just authenticate a subset of > its members to give them access to the fileserver. > > Does this mean that there is no true guest access when using ADS ?I do not know enough about AD to answer your question. -- Michael Wood <esiotrot at gmail.com>
Ok. In my mind, guest access should be just that - no authentication. On Thu, Oct 21, 2010 at 3:51 PM, Michael Wood <esiotrot at gmail.com> wrote:> On 21 October 2010 20:54, Madhusudan Singh <singh.madhusudan at gmail.com> > wrote: > > Hello, > > > > I have no control over the active directory. I just authenticate a subset > of > > its members to give them access to the fileserver. > > > > Does this mean that there is no true guest access when using ADS ? > > I do not know enough about AD to answer your question. > > -- > Michael Wood <esiotrot at gmail.com> >
Thanks for clearing that up. I would not want the AD to get involved at all for this share anyways. On Fri, Oct 22, 2010 at 1:15 PM, Mike Leone <turgon at mike-leone.com> wrote:> On 10/22/2010 2:12 PM, Michael Wood wrote: > >> On 22 October 2010 19:36, Madhusudan Singh<singh.madhusudan at gmail.com> >> wrote: >> >>> Ok. >>> >>> In my mind, guest access should be just that - no authentication. >>> >> >> Well, I believe that it is. But that you need to enable the Guest >> account in AD for it to be allowed. >> > > AFAIK, the "Guest" account is disabled by default in AD (at least, the > later versions, 2003 onwards, possibly earlier). > > -- > Michael J. Leone, <mailto:turgon at mike-leone.com> > > PGP Fingerprint: 0AA8 DC47 CB63 AE3F C739 6BF9 9AB4 1EF6 5AA5 BCDF > Photo Gallery: <http://www.flickr.com/photos/mikeleonephotos> > > "You have become an avatar of woe and ire, and all of your deeds will > conduce to evil" > "Fatal Revenant", Stephen R. Donaldson > -- > To unsubscribe from this list go to the following URL and read the > instructions: https://lists.samba.org/mailman/options/samba >
So, is it correct to say that if we use ADS security, there is no possibility of having any unauthenticated shares at all ? On Fri, Oct 22, 2010 at 2:42 PM, Madhusudan Singh < singh.madhusudan at gmail.com> wrote:> Thanks for clearing that up. I would not want the AD to get involved at all > for this share anyways. > > > On Fri, Oct 22, 2010 at 1:15 PM, Mike Leone <turgon at mike-leone.com> wrote: > >> On 10/22/2010 2:12 PM, Michael Wood wrote: >> >>> On 22 October 2010 19:36, Madhusudan Singh<singh.madhusudan at gmail.com> >>> wrote: >>> >>>> Ok. >>>> >>>> In my mind, guest access should be just that - no authentication. >>>> >>> >>> Well, I believe that it is. But that you need to enable the Guest >>> account in AD for it to be allowed. >>> >> >> AFAIK, the "Guest" account is disabled by default in AD (at least, the >> later versions, 2003 onwards, possibly earlier). >> >> -- >> Michael J. Leone, <mailto:turgon at mike-leone.com> >> >> PGP Fingerprint: 0AA8 DC47 CB63 AE3F C739 6BF9 9AB4 1EF6 5AA5 BCDF >> Photo Gallery: <http://www.flickr.com/photos/mikeleonephotos> >> >> "You have become an avatar of woe and ire, and all of your deeds will >> conduce to evil" >> "Fatal Revenant", Stephen R. Donaldson >> -- >> To unsubscribe from this list go to the following URL and read the >> instructions: https://lists.samba.org/mailman/options/samba >> > >