[Samba] Re: guest share not working (for disabled/locked/machine accounts)

[Jeremy Allison]

On Tue, Oct 11, 2005 at 07:12:39AM -0500, Rex Dieter wrote:
> Rex Dieter wrote:
> >Rex Dieter wrote:
> 
> >>Unforatunately, it appears that when local machine try to use the 
> >>share for software deployment, they are also accessing it as the local 
> >>Administrator account. 
> 
> >More snooping determined this not to be the case, but that the "Local 
> >System" account is used for access creditials.
> 
> Turns out the machines in question attempt to access the samba share
> using their "machine" account in AD, and it appears samba has a problem
> with this based on the plethora of these entries I'm seeing in samba's logs:
> 
> [2005/10/09 15:30:24, 1] smbd/sesssetup.c:reply_spnego_kerberos(250)
>   Username DOMAIN\MACHINE-1$ is invalid on this system
> 
> Now to go off to look in smbd/sesssetup.c to see what criteria is used
> to determine if a username is "invalid" or not.

It's the local lookup of the unix password entry for that user that
is failing here.

This call :

	pw = smb_getpwnam( user, real_username, True );

is returning False.

Jeremy.