Bad machine accounts

[Luke Kenneth Casson Leighton]

On Thu, 21 May 1998, Andrew Perrin - Demography wrote:

> OK, here's the full info.  Background:
> 1.) BOSERUP, a Solaris 2.6 machine running Samba-1.9.19-prealpha as a PDC
> for domain SANDBOX.
> 2.) BLAKE, a Solaris 2.6 machine running Samba-1.9.18p7 as a member of the
> SANDBOX domain.
> 3.) KITAGAWA, a Windows NT 4.0(SP3) machine as a member of the SANDBOX
> domain.
> 
> KITAGAWA can log into the domain fine; however, it cannot:
> 	- get any shares whatsoever from BOSERUP (invalid password); or
> 	- browse BLAKE (but it *can* NET USE \\blake\homes).
> 
> BOSERUP:smb.conf:
> [global]

>         domain sid =  S-1-5-21-123-456-789 ; sorry to be so boring

there are going to be lots of these...

> [netlogon]
>         path = /usr/LOCAL/netlogon
>         writeable = no
>         guest ok = yes

guest ok = no.  always.  on [netlogon].

in fact, guest ok = no everywhere unless you really must.


looks fine to me, smb.conf-wise...