password problem -- or bug?

[Carsten Nordstrøm Jensen]

>>However, if the user has an empty Windows password, he is
>>able to log in to the nework and gain writing privilegies to the
>>shares at the linux-server without ever supplying any password.
>>This is both on his own profile share and for the common >>shares
>>on the server.

>Look for the permissions of all dirs in the path to the share.
>Check with smbstatus if the users logs on with his uid or as >guest.

Even though no password is supplied, the user logs in with his uid:
[cn at esc /home/cn] $smbstatus

Samba version 2.0.6
Service      uid      gid      pid     machine
----------------------------------------------
data         common   common    2375   cnj      (192.168.0.2) Wed Mar 29
10:23:31 2000
cnj          cn       cn        2375   cnj      (192.168.0.2) Wed Mar 29
10:23:32 2000
.......

"data" is a common share, where everybody logged in is forced
to be the user "common" with the parameter setting in smb.conf:
force user = common
Only user and group member have writing privilegies (-- even
without supplying passwords :-o  )

"cnj" is a share belonging to user cn. Nobody else has writing
privilegies.

I cannot reproduce the no-password login with smbclient:
[cn at esc /home/cn] $smbclient '\\esc\cnj' -Ucn%tmppass
smb: \>
[cn at esc /home/cn] $smbclient '\\esc\cnj' -Ucn%
session setup failed: ERRSRV - ERRbadpw


Other ideas to diagnose this problem?

- Carsten