On Tuesday 27 January 2015 16:30:18 Jeremy Allison wrote:> On Mon, Jan 26, 2015 at 02:14:20PM +0000, Gary Stainburn wrote: > > Hi folks, > > > > Still trying to get security = share working, which it appears means I > > need to install Samba 3. As the server is pretty much goverened by this, > > I can > > You don't need Samba3.x, 4.x is no different in terms of > security levels. > > Replacement for share level security: > > security = user > map to guest = Bad PasswordJeremy, With CentOS 6.3 and Samba 3.6.23 I now have access to "security = share" which is what I wanted. Unfortunately, it still doesn't work. When I try to connect to the new server using the WinXP and Win7 clients that are using the old server they just fail to connect. I understand that the work-around you quote is how people are getting round the fact that share security doesn't work any more. However, I can't use that method as I need to retain password protection. Gary
On Tue, Jan 27, 2015 at 10:51 AM, Gary Stainburn < gary.stainburn at ringways.co.uk> wrote:> On Tuesday 27 January 2015 16:30:18 Jeremy Allison wrote: > > On Mon, Jan 26, 2015 at 02:14:20PM +0000, Gary Stainburn wrote: > > > Hi folks, > > > > > > Still trying to get security = share working, which it appears means I > > > need to install Samba 3. As the server is pretty much goverened by > this, > > > I can > > > > You don't need Samba3.x, 4.x is no different in terms of > > security levels. > > > > Replacement for share level security: > > > > security = user > > map to guest = Bad Password > > Jeremy, > > With CentOS 6.3 and Samba 3.6.23 I now have access to "security = share" > which > is what I wanted. > > Unfortunately, it still doesn't work. When I try to connect to the new > server > using the WinXP and Win7 clients that are using the old server they just > fail > to connect. > > I understand that the work-around you quote is how people are getting round > the fact that share security doesn't work any more. However, I can't use > that > method as I need to retain password protection. > > Gary > -- > To unsubscribe from this list go to the following URL and read the > instructions: https://lists.samba.org/mailman/options/samba >Gary, I think what he is trying to say is that this functionality still exists, but you need to use different samba config options to make it work. Please see the following wiki (which I referenced for you on the samba mailing list). https://wiki.samba.org/index.php/Public_Samba_Server If you post your config (you can use XXX as masking if you need to hide parts of it) and explain how it works currently or how you expect it to work, I am sure someone would give you advice on how to get there. As far as I know all the functionality of "security = share" still exists, though it works a bit differently now. Ricky
On Wednesday 28 January 2015 18:13:07 Ricky Nance wrote:> Gary, I think what he is trying to say is that this functionality still > exists, but you need to use different samba config options to make it work. > Please see the following wiki (which I referenced for you on the samba > mailing list). > > https://wiki.samba.org/index.php/Public_Samba_Server > > > If you post your config (you can use XXX as masking if you need to hide > parts of it) and explain how it works currently or how you expect it to > work, I am sure someone would give you advice on how to get there. As far > as I know all the functionality of "security = share" still exists, though > it works a bit differently now. > > RickyHi Ricky, I am aware of the setup as described. I have already looked at that WIKI as well as a large number of similar posts elsewhere. The problem with this setup is that all shares become unprotected - i.e. passwords not required. As I server wages information and customer data details this is unacceptable. I know that it is a short sighted option and ultimately I will have to pay for it, but I am now investing my efforts into repairing my Fedora 8 server. If anyone can give me anything like the same functionality I would appreciate it. My current config is: [global] workgroup = LEEDS server string = Combined Larry/Eddie Leeds showroom server hosts allow = 127. 10. log file = /var/log/samba/log.%m max log size = 50 security = share passdb backend = tdbsam local master = yes os level = 33 preferred master = yes wins support = yes remote browse sync = 10.2.1.255 remote announce = 10.1.255.255/LEEDS 10.6.255.255/MOTORPARK 10.7.255.255/LEEDS 10.8.255.255/LEEDS debug pid = yes debug uid = yes debug timestamp = yes debug hires timestamp = yes client lanman auth = yes load printers = yes cups options = raw [homes] comment = Home Directories browseable = no writable = yes valid users = %S force user = %S path = /home/%S [printers] comment = All Printers path = /var/spool/samba browseable = no guest ok = no writable = no printable = yes [tmp] comment = Temporary work area path = /tmp/samba writeable = yes browseable = yes public = yes read only = no force user = gary printable = no [scanner] comment = Document holding area path = /user/remote/scanner writeable = yes browseable = yes public = yes read only = no force user = gary printable = no etc.......