[Samba] PDC operation allowing guest machines to log in ?

[Andrew Bartlett]

Gavin Hamill wrote:
> 
> Howdy :)
> 
> I just have a little question regarding PDC and domain logons... my setup
> is working nicely with roaming profiles, logging onto the Samba 2.2.3 PDC,
> but I find that I am still able to find the server from a new machine,
> supply a user/password and access the shares on the server.
> 
> Is this correct operation? Surely allowing this completely defeats the
> object of machine accounts and a 'trust list' of machines?

No.  The 'trust accounts' are to protect the username and password you
pass at the Ctrl+Alt+Del box, and connections to the workstation from
other machines.

Andrew Bartlett

-- 
Andrew Bartlett                                 abartlet at pcug.org.au
Manager, Authentication Subsystems, Samba Team  abartlet at samba.org
Student Network Administrator, Hawker College   abartlet at hawkerc.net
http://samba.org     http://build.samba.org     http://hawkerc.net