[Samba] Re: Connections always mapped to guest

[Andrew Bartlett]

"Van Sickler, Jim" wrote:
> 
> Ryan,
> 
>   Take a look at the "restrictanonymous" registry
> setting in the working/nonworking Win2k PCs.
> See if they are different.
> 
> I've seen SMBtconX errors related to that setting
> in the past. "1" worked ok, "2" caused problems.

I find it odd that this *server* setting (when the workstation is acting
as a server, what type of connections will it accept) would affect
this.  It would affect the printing notification backchannel, but this
is quite odd...

I would start by removing any 'guest ok' line from services you don't
want people to attach as guest.  But this code is a mess, and I would
suggest trying Samba HEAD (from CVS: pserver.samba.org) as I cleaned
this code up *a lot*.

Andrew Bartlett

> > -----Original Message-----
> > From: Ryan Novosielski [mailto:novosirj at UMDNJ.EDU]
> > Sent: Friday, August 02, 2002 1:04 PM
> > To: Samba Mailing List
> > Cc: dan_thibadeua at hp.com
> > Subject: [Samba] Re: Connections always mapped to guest
> >
> >
> > > I have setup Samba 2.2.4 on HPUX 11.0.  I'm using it only as a print
> > > server. It appears that ALL connections are being mapped to
> > "pcguest"
> > > regardless whether they are valid or not.  I do not have a "username
> > > map" defined, "guest ok = yes" is set for my printer share.  I am
> > > running winbindd, which seems to be working correctly.  I ran the
> > > following command 5 times, changing the "map to guest"
> > parameter, and
> > > typing my password correctly and incorrectly.
> >
> > I am having almost exactly the same problem. I am running
> > Samba v2.2.5 on
> > HP-UX 11.0, and two of my Win2k machines (that I've found so far) are
> > exhibiting this behavior on the shared [homes] volume. The
> > others seem to
> > be working properly. Here's a brief excerpt of a debug = 3
> > chat between
> > the working machine and the server and then the non working machine:
> >
> > --- working machine
> > [2002/08/02 12:11:55, 3] smbd/sec_ctx.c:(162)
> >   get_current_groups: user is in 3 groups: 200, 331, 529
> > [2002/08/02 12:11:55, 3] smbd/password.c:(336)
> >   uid 2543 registered to name massonga
> > [2002/08/02 12:11:55, 3] smbd/password.c:(338)
> >   Clearing default real name
> > [2002/08/02 12:11:55, 3] smbd/password.c:(340)
> >   User name: massonga   Real name: Gary Masson
> > [2002/08/02 12:11:55, 3] smbd/process.c:(1022)
> >   Chained message
> > [2002/08/02 12:11:55, 3] smbd/process.c:(684)
> >   switch message SMBtconX (pid 17580)
> > [2002/08/02 12:11:55, 3] smbd/sec_ctx.c:(313)
> >   setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
> > [2002/08/02 12:11:55, 3] lib/access.c:(318)
> >   check_access: no hostnames in host allow/deny list.
> > [2002/08/02 12:11:55, 2] lib/access.c:(327)
> >   Allowed connection from  (130.219.34.247)
> > [2002/08/02 12:11:55, 3] smbd/password.c:(735)
> >   authorise_login: ACCEPTED: validated uid ok as non-guest
> > (user=massonga)
> >
> > --- non-working machine
> >
> > [2002/08/02 13:05:41, 3] smbd/reply.c:(1039)
> >   Registered username massonga for guest access
> > ...
> > [2002/08/02 13:05:41, 3] smbd/password.c:(336)
> >   uid 2543 registered to name massonga
> > [2002/08/02 13:05:41, 3] smbd/password.c:(338)
> >   Clearing default real name
> > [2002/08/02 13:05:41, 3] smbd/password.c:(340)
> >   User name: massonga   Real name: Gary Masson
> > [2002/08/02 13:05:41, 3] smbd/process.c:(1022)
> >   Chained message
> > [2002/08/02 13:05:41, 3] smbd/process.c:(684)
> >   switch message SMBtconX (pid 21679)
> > [2002/08/02 13:05:41, 3] smbd/sec_ctx.c:(313)
> >   setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
> > [2002/08/02 13:05:41, 3] lib/access.c:(318)
> >   check_access: no hostnames in host allow/deny list.
> > [2002/08/02 13:05:41, 2] lib/access.c:(327)
> >   Allowed connection from  (130.219.34.113)
> > [2002/08/02 13:05:42, 3] smbd/password.c:(854)
> >   authorise_login: ACCEPTED: guest account and guest ok (lmguest)
> >
> > ...why on earth did it decide that he was a guest? There is no logical
> > reason for it. I have 'map to guest' set to "bad user."
> > Doesn't make sense
> > to me. I am willing to send more data if you require, of
> > course. Thank you
> > very much -- this is stressing me out here! :)
> >
> > ---- _  _ _  _ ___  _  _  _
> > |Y#| |  | |\/| |  \ |\ |  |  | Ryan Novosielski - Jr. UNIX
> > Systems Admin
> > |$&| |__| |  | |__/ | \| _|  | novosirj at umdnj.edu -
> > 973/972.0922 (2-0922)
> > \__/ Univ. of Med. and Dent. | IST/ACS - New Jersey Medical
> > School - C630
> >
> >
> >
> > --
> > To unsubscribe from this list go to the following URL and read the
> > instructions:  http://lists.samba.org/mailman/listinfo/samba
> >
> 
> --
> To unsubscribe from this list go to the following URL and read the
> instructions:  http://lists.samba.org/mailman/listinfo/samba

-- 
Andrew Bartlett                                 abartlet at pcug.org.au
Manager, Authentication Subsystems, Samba Team  abartlet at samba.org
Student Network Administrator, Hawker College   abartlet at hawkerc.net
http://samba.org     http://build.samba.org     http://hawkerc.net