[Samba] Question regarding guest account =

[Andrew Bartlett]

On Wed, Jan 14, 2004 at 02:41:49PM +0100, Tarjei Huse wrote:
> Hi, and thanks for a very quick answer!
> 
> A small followup:
> 
> >>b) It also seems that the guestuser must have a sambaSid that ends in 
> >>501, else samba will not find the user, correct?
> >>    
> >>
> >
> >We make up an account if you don't supply one, and we will get nasty
> >side-effects if you don't give it a RID of 501
> >  
> >
> I've seen the sideeffects :-(
> Where would the user be stored? I'm using a ldap sam, btw.

If you wnat to create the user (overriding our internal backup
creation) then put it into LDAP like any other user, justh with the
right name and SID.

> And how can I set the users password if he/she is not created ?

You never set the password (nor do you set a null password) on the
guest user.  We handle that internally

> Also, if the default guest account is set to nobody (without me using 
> the parameter), and I have a user nobody in my sam. will samba use this 
> user? Should I remove it?

If it is correctly setup, Samba will use it.

> >>c) Also, if I want a guest user that can log on to my domain without a 
> >>password, but who will not have any access to shares etc, should I then 
> >>use this "guest" user or should I create a special user for this?
> >>    
> >>
> >Use this account.  This is done (if you want to match win2k behaviour)
> >with the 'map to guest = bad user' parameter.
> >  
> >
> A bit many this there, you men the account I created, not the special 
> guest user , right?
> 
map to guest will use the 'guest account', specified in smb.conf.

Andrew Bartlett