What value should we use for %U for anonymous logins?

[Andrew Bartlett]

While confirming the behaviour of my auth changes Tridge proposed, I
tested the value of %U as seen from various logins in the source3/ file
server.  Using this patch to echo the value back to our caller, I see
that:

For guest logins using old-style session setup (NTLM), username = "" we
map %U == "nobody" (guest user)

For guest logins using NTLMSSP, username = "" we map %U == ""

For 'map to guest logins using NTLMSSP, username = "nothere" we map %U
== "nothere"

It seems to me that the old-style session setup case is inconsistent,
and I would like to change it to map to "" as well.

Once the behaviour we want to have here is sorted out, I'll use a patch
like this to write a test to verify this using smbclient -L across NTLM,
NTLMSSP, and Kerberos.

--- a/selftest/target/Samba3.pm
+++ b/selftest/target/Samba3.pm
@@ -922,6 +922,7 @@ sub provision($$$$$$$)
        print CONF "
 [tmp]
        path = $shrdir
+        comment = smb username is [%U]
 [tmpguest]
        path = $shrdir
         guest ok = yes


Andrew Bartlett

-- 
Andrew Bartlett                                http://samba.org/~abartlet/
Authentication Developer, Samba Team           http://samba.org
-------------- next part --------------
A non-text attachment was scrubbed...
Name: 0001-s3-smbd-Be-consistent-with-U-subs-on-guest-logins.patch
Type: text/x-patch
Size: 846 bytes
Desc: not available
URL: <http://lists.samba.org/pipermail/samba-technical/attachments/20110727/306c8947/attachment.bin>