'guest only = yes' broken?

[Gerald (Jerry) Carter]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Moving to the tech list....

Jeremy Allison wrote:
> On Mon, May 15, 2006 at 02:30:20PM -0500, Gerald (Jerry) Carter wrote:
>> -----BEGIN PGP SIGNED MESSAGE-----
>> Hash: SHA1
>>
>> Jeremy Allison wrote:
>>
>>>> according to the manpage entry for 'guest only = yes' I
>>>> would expect that I can not log in to [tmp] when having
>>>> authenticated.
>>>>
>>>> But...:
>>>>
>>>> vlendec at delphin:~> smbclient //192.168.234.1/tmp -Uvl%asdf
>>>> Domain=[DELPHIN] OS=[Unix] Server=[Samba 3.0.22]
>>>> smb: \> 
>>>>
>>>> What should we change? Docs or code? The docs right now say
>>> Fix the code I think. I'll try and take a look....
>> I think the code is right.  I always took it as a short
>> hand for 'force user = guest_account'.  If we change the
>> code, it has the potential to break installations. If
>> no one complained, I'd just fix the docs.
> 
> Hmmm. So are we sure it's forcing the logged on user
> to guest ? We need to check that (IMHO).

ok.  So here's a question.  Do we really need this
parameter?  I think it was originally more for share
mode security.  Really you could get the same behavior
if we set 'valid users = guest_account' and 'guest ok = yes'
I think.  So do we really need a separate short
hand parameter for this ?





jerry
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.2 (GNU/Linux)
Comment: Using GnuPG with SUSE - http://enigmail.mozdev.org

iD8DBQFEaNfuIR7qMdg1EfYRAl/ZAJ4weHkP+eIxmspF7Nxx2mp4KWgD1QCffdC2
W4JUearser5eH7ucT0m9J6c=
=OCGi
-----END PGP SIGNATURE-----