[Samba] AD DC and the Guest account
Bugblatterbeast
info at bugblatterbeast.de
Tue Jul 30 05:28:38 MDT 2013
Quoting Andrew Bartlett <abartlet at samba.org>:
> On Thu, 2013-07-25 at 17:07 +0200, info at bugblatterbeast.de wrote:
>> I'm using samba4.0.1 and it works very well in general. Unfortunately
>> I'm missing something like "map to guest = bad user" and I can't get
>> the Guest account to work. Is there any way to set up some public
>> shares on an AD DC ?
>>
>> [global]
>> workgroup = DOMAIN
>> realm = DOMAIN.LOCAL
>> netbios name = HOST
>> server role = active directory domain controller
>> server services = s3fs, rpc, nbt, wrepl, ldap, cldap, kdc,
>> drepl, winbind, ntp_signd, kcc, dnsupdate
>>
>> logon path = \\%L\profiles\%U
>> logon home = \\%L\%U\.9xprofile
>> logon drive = U:
>>
>> printcap name = /dev/null
>> load printers = no
>> printing = bsd
>>
>> interfaces = eth0
>> guest ok = yes
>> security = user
>> map to guest = bad user
>
> In general they are a bad idea on the DC, and I can't recall right now
> if we just talked about the patch to have it based on enabling the Guest
> account in the sam, or did the work. Certainly when matching windows
> (which I would like to do for this, but understand the desire to also
> have the smb.conf option work) the correct way is to see if Guest is
> enabled.
>
> Otherwise, it is a known issue, so at least don't feel bad about hitting
> it.
>
> Sorry,
>
> Andrew Bartlett
>
> --
> Andrew Bartlett
> http://samba.org/~abartlet/
> Authentication Developer, Samba Team http://samba.org
> Samba Developer, Catalyst IT http://catalyst.net.nz
>
>
>
Thanks for the reply. I will try the SAM-configuration one more time
(I'm not that good with windows), though I think I did all I could. If
the guest account won't work now, I'll wait patiently for the next
releases.
Please keep up the good work.
Regards, bbb
----------------------------------------------------------------
This message was sent using IMP, the Internet Messaging Program.
More information about the samba
mailing list