[Samba] security=ADS, and 'guest' access?

Kirk Marple kirk-public at agnostic-media.com
Wed Jun 23 18:07:50 GMT 2004

I've attached an Apple XServe to our Windows domain, and have successfully
setup all the Active Directory integration.  

I've been able to expose a file share to Windows via Samba from the XServe,
but it's still requring a guest account login.  For example, when i try and
open  \\xserve\AppStorage from the Windows Explorer, it shows a username/pwd
dialog.  If i type in 'guest', it lets me in.

Problem is, i don't want to have to provide authentication when accessing
the UNC path.  The subfolders of the file share will use NTFS ACLs to
provide access, so i'm OK with this file share having 'everyone' access.

Anybody know if there's a way to not require that authentication popup, and
just default to 'guest' access?

I've pasted the relevant pieces of smb.conf below.  (I replaced the actual
domain and volume name with DOMAIN and VOLUME.)

Thanks for any help/pointers!
         log level = 3
         display charset = UTF-8-MAC
         print command = /usr/sbin/PrintServiceAccess printps %p %s
         lprm command = /usr/sbin/PrintServiceAccess remove %p %j
         security = ADS
         guest account = unknown
         encrypt passwords = yes
         printing = BSD
         allow trusted domains = no
         preferred master = no
         lppause command = /usr/sbin/PrintServiceAccess hold %p %j
         netbios name = xserve
         wins support = no
         max smbd processes = 0
         printcap =
         server string = Mac OS X
         lpresume command = /usr/sbin/PrintServiceAccess release %p %j
         client ntlmv2 auth = no
         domain logons = no
         lpq command = /usr/sbin/PrintServiceAccess jobs %p
         passdb backend = opendirectorysam guest
         dos charset = CP437
         unix charset = UTF-8-MAC
         socket options = SO_RCVBUF=64240
         auth methods = guest opendirectory
         local master = yes
         use spnego = yes
         map to guest = Bad User
         domain master = yes
         printer admin = @admin, @staff
         workgroup = DOMAIN
         oplocks = 0
         map archive = no
         path = /Volumes/VOLUME/AppStorage
         read only = no
         inherit permissions = 1
         strict locking = 0
         comment = macosx
         create mask = 0664
         guest ok = 1
         directory mask = 0775

More information about the samba mailing list