ldap_nua requires guest exist and have rid 501?
abartlet at samba.org
Tue Nov 12 02:50:02 GMT 2002
On Tue, 2002-11-12 at 13:16, John E. Malmberg wrote:
> Andrew Bartlett wrote:
> > Because the Guest account is a 'well known' account, and as such
> > should have a fixed RID. This is enforced via the passdb backend
> > because to do otherwise would have nasty consequences when mapping
> > back and forth between uids and RIDs. (We are working hard to ensure
> > that there is only one point at which uids and RIDs are mapped, and
> > currently this is in the passdb.)
> On a related note, does SAMBA still use the guest account in place of
> the (unkown) internal user for enumerating shares?
> An NT client can not browse a SAMBA server with the guest account
> disabled, but having a guest account enabled is not required on an NT
> account to do the same thing.
A Samba server must have a guest account, and (now) it must have RID
501. I'm not sure the guest account is 'disabled' on NT, it is just
that the groups it is given membership of changes. IE on NT, the
restrictanonymous setting can remove 'guest' from domain users, and
Andrew Bartlett abartlet at pcug.org.au
Manager, Authentication Subsystems, Samba Team abartlet at samba.org
Student Network Administrator, Hawker College abartlet at hawkerc.net
http://samba.org http://build.samba.org http://hawkerc.net
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Size: 189 bytes
Desc: This is a digitally signed message part
Url : http://lists.samba.org/archive/samba-technical/attachments/20021112/020e496e/attachment.bin
More information about the samba-technical