Why is Win98 looking for user "nobody"?

[Tony Ricker]

Steve,
    Funny you should mention the nobody user. I have the same entry in my logs
except that somehow the user nobody was created and allowed a connection to be
made to IPC$. I have no guest accounts enabled in smb and have no idea as to
how this connection was allowed. I was working from home and did a netstat -an
and saw a connection being made on port 138 by an address at work (yet the smb
server is not in production and nobody knows the IPs). I shut down smb and
after perusing the logs, found the nobody entries. I am on the hunt for an
answer to this and will share any info I get on this matter. I would appreciate
if you would do the same.

Cheers,

Tony

Steve Snyder wrote:

> Using Samba v2.0.10 on a RedHat v7.1 box, I see that the Win98 clients on
> our network are making sporatic requests for user "nobody" (as shown
> below).  Anyone know what's going on here?
>
> My network has both Linux and Win98 clients, but only the Win98 clients are
> showing this behavior.  Both the Linux and Win98 clients access the same
> shared drives, but only the Win98 clients use shared printers.
>
> Also, the requests are bursty.  The log entries below are the entire log
> file for this week and are copied on Tuesday morning.  So after about
> 48hours of silence (logs are rotated on Sunday) all of a sudden this client
> (Win98 SE + all MS updates) is seeking user "nobody".   Hmm.
>
> Note that I actually do *not* have "nobody" defined in my smb_passwd file,
> so the messages are strictly accurate.  Note also that I have "guest ok =
> yes" on a couple of shares, though these log entries are from machines with
> actual users, not guests, logged in.
>
> Any thoughts on this?  Thanks.
>
> -------------------------------
>
> [2001/09/18 07:17:47, 1] smbd/password.c:pass_check_smb(505)
>   Couldn't find user 'nobody' in smb_passwd file.
> [2001/09/18 07:18:19, 1] smbd/password.c:pass_check_smb(505)
>   Couldn't find user 'nobody' in smb_passwd file.
> [2001/09/18 07:18:37, 1] smbd/password.c:pass_check_smb(505)
>   Couldn't find user 'nobody' in smb_passwd file.
> [2001/09/18 07:18:50, 1] smbd/password.c:pass_check_smb(505)
>   Couldn't find user 'nobody' in smb_passwd file.
> [2001/09/18 07:19:10, 1] smbd/password.c:pass_check_smb(505)
>   Couldn't find user 'nobody' in smb_passwd file.
> [2001/09/18 07:19:32, 1] smbd/password.c:pass_check_smb(505)
>   Couldn't find user 'nobody' in smb_passwd file.
> [2001/09/18 07:19:50, 1] smbd/password.c:pass_check_smb(505)
>   Couldn't find user 'nobody' in smb_passwd file.
> [2001/09/18 07:20:07, 1] smbd/password.c:pass_check_smb(505)
>   Couldn't find user 'nobody' in smb_passwd file.
> [2001/09/18 07:20:19, 1] smbd/password.c:pass_check_smb(505)
>   Couldn't find user 'nobody' in smb_passwd file.
> [2001/09/18 07:20:41, 1] smbd/password.c:pass_check_smb(505)
>   Couldn't find user 'nobody' in smb_passwd file.
> [2001/09/18 07:21:00, 1] smbd/password.c:pass_check_smb(505)
>   Couldn't find user 'nobody' in smb_passwd file.
> [2001/09/18 07:21:18, 1] smbd/password.c:pass_check_smb(505)
>   Couldn't find user 'nobody' in smb_passwd file.
> [2001/09/18 07:21:41, 1] smbd/password.c:pass_check_smb(505)
>   Couldn't find user 'nobody' in smb_passwd file.
> [2001/09/18 07:22:22, 1] smbd/password.c:pass_check_smb(505)
>   Couldn't find user 'nobody' in smb_passwd file.
> [2001/09/18 07:22:39, 1] smbd/password.c:pass_check_smb(505)
>   Couldn't find user 'nobody' in smb_passwd file.
> [2001/09/18 07:22:46, 1] smbd/password.c:pass_check_smb(505)
>   Couldn't find user 'nobody' in smb_passwd file.
> [2001/09/18 07:23:03, 1] smbd/password.c:pass_check_smb(505)
>   Couldn't find user 'nobody' in smb_passwd file.
> [2001/09/18 07:23:21, 1] smbd/password.c:pass_check_smb(505)
>   Couldn't find user 'nobody' in smb_passwd file.
> [2001/09/18 07:23:32, 1] smbd/password.c:pass_check_smb(505)
>   Couldn't find user 'nobody' in smb_passwd file.
> [2001/09/18 07:23:50, 1] smbd/password.c:pass_check_smb(505)
>   Couldn't find user 'nobody' in smb_passwd file.
> [2001/09/18 07:24:04, 1] smbd/password.c:pass_check_smb(505)
>   Couldn't find user 'nobody' in smb_passwd file.
>
> --
> To unsubscribe from this list go to the following URL and read the
> instructions:  http://lists.samba.org/mailman/listinfo/samba