guest access problem

John Blair jdblair at
Mon Oct 20 05:43:51 GMT 1997


I'm having a problem with guest access.  Either I'm misunderstanding how
the authentication process works, or this is a bug in Samba.  I wonder if
somebody would be able to tell me which is the case.

The problem concerns guest access to a share.  As I understand the
authentication process (as explained in the smb.conf man page), if a user
doesn't supply a correct password and a service is marked "guest ok", the
user should be granted access to the service as the guest user

I also understand that this should work regardless of whether or not
security = share, user, or server.  However, in practice this does not seem
to be the case.  In my experience, guest access is only properly granted in
when security = share.  Here's an example that isolates the problem:

First, I use this minimal smb.conf file:

        security = share

        path = /tmp
        guest ok = yes
        read only = yes

smbclient allows me to connect to the share w/o a password:

(/usr/local/samba/lib)$ smbclient '\\FRODO\tmp' -N
Added interface ip= bcast= nmask=
Server time is Sun Oct 19 23:41:33 1997
Timezone is UTC-5.0
Domain=[WORKGROUP] OS=[Unix] Server=[Samba 1.9.17p2]
smb: \>

Next, I change security to user:

        security = user

        path = /tmp
        guest ok = yes
        read only = yes

This time smbclient asks me for a password.  I enter a bad password, which
I think should have the effect of granting me guest access.  It doesn't.

(/usr/local/samba/lib)$ smbclient '\\FRODO\tmp' -N
Added interface ip= bcast= nmask=
Server time is Sun Oct 19 23:42:37 1997
Timezone is UTC-5.0
Password: <badpasswd>
Session setup failed for username=JDBLAIR myname=FRODO destname=FRODO
ERRSRV - ERRbadpw (Bad password - name/password pair in a Tree Connect or
Session Setup are invalid.)
You might find the -U, -W or -n options useful
Sometimes you have to use `-n USERNAME' (particularly with OS/2)
Some servers also insist on uppercase-only passwords

So... what am I missing?  Have I misunderstood the authentication process?

thanks in advance for any help,

.                                                                    .
.....John.D.Blair...   mailto:jdblair at   phoneto:205.975.7123 .
                   .  faxto:205.975.7129 .
 ..sys|net.admin....                                                 .
 .                     the university computer center            .....

More information about the samba mailing list