[Samba] How to map locked user Administrator in AD domain to guest ?

Buozis, Martynas martynas at ti.com
Wed Apr 19 12:51:06 GMT 2006


 Hello

So maybe somebody can advice if it is possible to configure SAMBA so,
that user Administrator would map to guest even if it is locked in
domain ? Or it is definitely not possible ?

Also it is strange, that without password it is working, while it is not
working when password is specified ! 

# smbclient //smb/admin$ -U Administrator%
Anonymous login successful
Domain=[DOM] OS=[Unix] Server=[Samba 3.0.20]
smb: \> 

# smbclient //smb/admin$ -U Administrator%dummy
session setup failed: NT_STATUS_ACCOUNT_LOCKED_OUT
dfrsec02:~/dumps#

Why second case can't be handled as first one ?


With best regards
Martynas 
 
-----Original Message-----
From: samba-bounces+martynas=ti.com at lists.samba.org
[mailto:samba-bounces+martynas=ti.com at lists.samba.org] On Behalf Of
Buozis, Martynas
Sent: Tuesday, April 18, 2006 2:30 PM
To: samba at samba.org
Subject: [Samba] How to map locked user Administrator in AD domain to
guest ?

Hello

I have Samba running as AD member. In addition there is a support of
quest user connections to shares, that allow guest connections to
shares, where access is restricted on IP addresses base. 

Problem is, that Administrator is not mapped to guest, because
Administrator in AD domain is locked. Samba gets respond
NT_STATUS_ACCOUNT_LOCKED_OUT and denies connection. While computers,
that are not AD members want use Samba shares that are guest allowed and
can't do that while logged in as Administrator. If Administrator is
unlocked - option map to guest on bad password is working perfect.

Is there a way to say, that user Administrator must be guest even if it
is locked ?


With best regards
Martynas Buozis
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


More information about the samba mailing list