smb.conf.%U problem for NT (95 ok)

[Luke Kenneth Casson Leighton]

On Fri, 26 Mar 1999, Gerald Carter wrote:

> Syahrul Sazli Shaharir wrote:
> > 
> > Hi SMB'ers,
> > 
> > Summary: smb.conf.%U doesn't work on NT clients (Win 95 OK).
> 
> Are you referring to domain logons?  Windows NT and 95 
> handle things very differently.  Actually I mentioned this 
> problem to Luke back in August of last year.  The issue is that 
> during a domain logon, it is the machine that has the connection
> and not the user.  If I remember correctly, this is the case up 
> to the mounting of the user's home directory.

correct.  a "fix" for this is to reject anonymous ipc$ connections.
some clients then attempt an authenticated connection.

>  That is why you 
> see the %U being expanded to nobody.  I'm guesing what you 
> want to do is to use the include and %U to set things passed 
> by back in the USER_INFO_21 struct (is that the right one?)
> during logon.

yep.  i have to do a hack, and set a boolean "samlogon_in_ssb" to read
USER_INFO_21 user name not [null-session] IPC$ user name.