samba - Dec 2010 - Can Samba “security = user” be used for guest share without a Windows login prompt?

Hello, I hope this is not a dumb question, but I just need some clarification.

I am trying to set up an Ubuntu Samba share for a lab with Windows
computers (Vista and XP). I have two shares that are supposed to
require authentication and one that is supposed to a public share with
no login. I understand from reading the smb.conf manual that "security
= user" makes Windows authenticate before accessing a share, whereas
"security = share" authenticates on a share-by-share basis. The latter
option sounds closest to what I am trying to achieve, but I have also
read that it is not a secure setting. So my question is, is "security
= share" really insecure (especially in a somewhat "safe"
environment), and if it is, is it possible to have a guest share under
"security = user" that does not make Windows ask for login
credentials?

Here's my smb.conf for reference :

[global]

??? workgroup = hsbclib
??? server string = %h server (Samba, Ubuntu)
??? dns proxy = no
??? log file = /var/log/samba/log.%m
??? max log size = 1000
??? syslog = 0
??? panic action = /usr/share/samba/panic-action %d
??? obey pam restrictions = yes
??? unix password sync = yes
??? passwd program = /usr/bin/passwd %u
??? passwd chat = *Enter\snew\s*\spassword:* %n\n
*Retype\snew\s*\spassword:* %n\n *password\supdated\ssuccessfully* .
??? pam password change = yes
??? map to guest = bad user
??? usershare allow guests = yes
??? security = user
??? guest ok = yes
??? guest account = publicuser
??? username map = /etc/samba/smbusers

[printers]

??? comment = All Printers
??? browseable = no
??? path = /var/spool/samba
??? printable = yes
??? create mask = 0700

[print$]

??? comment = Printer Drivers
??? path = /var/lib/samba/printers

[mabusclass]

??? path = /srv/smb/mabusclass
??? writeable = yes
??? valid users = magus, mabusclass

[yearbook]

??? path = /srv/smb/yearbook
??? writeable = yes
??? valid users = yearbook

[public]

??? comment = Free Public Storage
??? path = /srv/smb/public
??? writeable = yes
??? guest ok = yes


Many thanks in advance!
-Kenton

On Fri, Dec 10, 2010 at 12:08 AM, Kenton Tofte <kentontofte at gmail.com>
wrote:
> is it possible to have a guest share under
> "security = user" that does not make Windows ask for login
> credentials?
Asked and answered many times.

Decided to add the answer to my blog:
http://t.co/dZrqNb0

Chris

On Fri, Dec 10, 2010 at 12:48 AM, Chris Smith <smb_77 at chrissmith.org>
wrote:
> Asked and answered many times.
>
> Decided to add the answer to my blog:
> http://t.co/dZrqNb0
Maybe a better url shortener:
http://goo.gl/AKk0K