samba - Nov 2011 - Grant computer account access to share?

Hi,

I have a Microsoft application (SCCM) which I need to grant access to
a samba share, however the service which reads the files can only
authenticate using the computer account, there is option to configure
it to use a domain account.

Is there any way to grant a computer account access to a share? On
windows I can simply add computer$ to the permissions but this doesn't
seem to be possible.

Failing that might somebody suggest where the samba code could be
patched so that I could create a matching user account (computer with
$ stripped) and have samba grant that access instead.

Or a way to grant access based on the IP/name of the client?

Thanks
Andy

On Thu, Nov 10, 2011 at 2:24 AM, Andrew Lyon <andrew.lyon at gmail.com>
wrote:
> Hi,
>
> I have a Microsoft application (SCCM) which I need to grant access to
> a samba share, however the service which reads the files can only
> authenticate using the computer account, there is option to configure
> it to use a domain account.
do you mean to say that it's a windows service that's Log On tab is
set to local system?  because "authenticate using the computer
account" isn't a "thing".  A windows service running as local
system
does not have permissions to access network resources at all.  This is
a windows restriction, you have to have the account log on as a local
or domain user if you want it to be able to access the network.
>
> Is there any way to grant a computer account access to a share? On
> windows I can simply add computer$ to the permissions but this doesn't
> seem to be possible.
without reading "man smb.conf" again, there used to be an option that
you could set allowed and denied client IP addresses, and basically
make the share public otherwise.  I don't know if the option still
exists in recent versions, my understanding is that it is trivially
easy to spoof.