[Samba] If in [global] <guest ok = yes> why do I get an authentication sc reen when accessing from NT box?

[Andrew Bartlett]

Larry Engleman wrote:
> 
> To force guest access to a share, you need both
> 
> guest ok = yes
> guest only = yes
> 
> Otherwise it will try and authenticate you first before
> dropping you to guest.  If this doesn't work, possibly
> you don't have a valid guest account set.  If no account
> is set as the guest account (on the linux machine) it will
> use the user "nobody".

However, it still needs to 'log in' to the server.  This is what causes
the dialog box.  This can be avoided by setting 'security=share', which
removes the while concept of users and logins.  NT will try and access
the share without a password (or with any password, it doesn't matter)
and becouse we now know what share we are using, we can let the user in.

Andrew Bartlett

> > -Larry Engleman
> > The Burgiss Group
> > 201-795-5144
> 
> -----Original Message-----
> From: Clay, John [mailto:John.Clay at lfr.com]
> Sent: Friday, July 26, 2002 2:41 PM
> To: Samba. Org (E-mail)
> Subject: [Samba] If in [global] <guest ok = yes> why do I get an
> authentication sc reen when accessing from NT box?
> 
> > My simple samba file is:
> >
> > [global}
> >       workgroup = LFRG-TLH
> >       netbios name = HUMPHRY
> >       guest ok = yes
> >
> > [test]
> >       path = palmdata
> >       read only = no
> >       guest ok = yes
> >
> > When I try to access HUMPHRY from my NT-SP6a box I am confronted with a
> > login dialog requesting username and password. I'm sure this isn't
> > supposed to happen - I should get access without any credentials.
> >
> > If, again from my NT-SP6a box, I then enter a root level username and
> > password then I get access. That's doesn't seem right either 'cause I have
> > commented out the encrypt password = yes line.
> >
> > If I do the same from a different NT-SP6a box I get rejected. Seems to me
> > that that's the only correct operation so far except that if I add the
> > encrypt password = yes line I still get rejected.
> >
> > Can anyone shed some light this?? I'm baffled.
> >
> > Puzzled Pengin in the Panhandle
> >
> > John Clay
> > Tallahassee, FL
> >
> >
> 
> --
> To unsubscribe from this list go to the following URL and read the
> instructions:  http://lists.samba.org/mailman/listinfo/samba
> 
> --
> To unsubscribe from this list go to the following URL and read the
> instructions:  http://lists.samba.org/mailman/listinfo/samba

-- 
Andrew Bartlett                                 abartlet at pcug.org.au
Manager, Authentication Subsystems, Samba Team  abartlet at samba.org
Student Network Administrator, Hawker College   abartlet at hawkerc.net
http://samba.org     http://build.samba.org     http://hawkerc.net