ldap_nua requires guest exist and have rid 501?

[Andrew Bartlett]

On Tue, 2002-11-12 at 13:16, John E. Malmberg wrote:
> Andrew Bartlett wrote:
> 
> > Because the Guest account is a 'well known' account, and as such 
> > should have a fixed RID.  This is enforced via the passdb backend 
> > because to do otherwise would have nasty consequences when mapping 
> > back and forth between uids and RIDs.  (We are working hard to ensure
> > that there is only one point at which uids and RIDs are mapped, and 
> > currently this is in the passdb.)
> 
> On a related note, does SAMBA still use the guest account in place of 
> the (unkown) internal user for enumerating shares?
> 
> An NT client can not browse a SAMBA server with the guest account 
> disabled, but having a guest account enabled is not required on an NT 
> account to do the same thing.

A Samba server must have a guest account, and (now) it must have RID
501.  I'm not sure the guest account is 'disabled' on NT, it is just
that the groups it is given membership of changes.  IE on NT, the
restrictanonymous setting can remove 'guest' from domain users, and
'everyone'.

Andrew Bartlett

-- 
Andrew Bartlett                                 abartlet at pcug.org.au
Manager, Authentication Subsystems, Samba Team  abartlet at samba.org
Student Network Administrator, Hawker College   abartlet at hawkerc.net
http://samba.org     http://build.samba.org     http://hawkerc.net
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: This is a digitally signed message part
Url : http://lists.samba.org/archive/samba-technical/attachments/20021112/020e496e/attachment.bin