[Samba] Bringing a laptop to a Samba Network

[Craig White]

On Thu, 2005-02-24 at 21:20 -0600, Steve Cohen wrote:
> Steve Cohen wrote:
> 
> OK, let me ask this question another way, short and simple:
> 
> In a security=SHARE samba network, is there any way for a computer 
> outside the workgroup to connect to and use (not talking about "see") a 
> printer shared by samba on that network?
> 
> I've been reading logs, manpages, books, nothing I've seen deals with 
> that situation.  This is a simple home network to which I want to 
> occasionally bring a company-owned laptop.
> 
> Please don't answer with questions about drivers, etc.  A driver has 
> been installed on the outside computer (a Windows 2K laptop owned by my 
> employer).  I have administrative rights on that laptop.
> 
> The error is "Access Denied".  How can Samba be configured to get around 
> this given that security=SHARE is required?
> 
> I just can't believe this is that hard.  What am I missing?
----
If I recall correctly - you are using Red Hat 9 and samba 2.2.x

It's been a long time since I used 2.2.x and I've never used security =
share. I have even noticed Gerry exclaiming that he wished that it were
never made available.

My understanding is that security = share represents a mode like windows
98 file & printer sharing where each share represents a different
password/login.

You problem would appear that your laptop is sending DOMAIN\username to
the samba computer as login credentials and that is your problem. I
would expect that if you had logging set up high enough, you would
discover what is happening.

Anyway, I was trying to encourage you to send the -U USERNAME%PASSWORD
thinking that it would use those credentials instead of the DOMAIN
\username since your computer is joined to a work domain.

You could probably map the user DOMAIN\username to a 'local' user -
see /etc/samba/smbusers for the concept.

I know that Gerry has mentioned an alternative of map guest = bad user
for 'guest' access but that has been with reference to samba 3 and I
have no idea if that works for samba 2.2.x and have never done it
myself. This is a question that comes up once a week and is certainly
findable in the archives - probably in documentation for Samba 2.2.x
too. 

In the end, I'm not convinced that security = share is all that
different from security = user for your purposes.

I would imagine that many people on this list are likewise using samba
3.x and their recollections of 2.2.x may be as hazy as mine. I do recall
that 'Access Denied' was a common feature of samba 2.2.x when the user
wasn't a member of the 'printer admin' group and I am sure that I have
mentioned it previously - this message does not necessarily mean that
you can't print to it.

There should be logs in /var/log/samba/log.MACHINE_NAME
or /var/log/samba/log.IP_ADDRESS_OF_LAPTOP that might show the problem
with credentials.

Craig