[Samba] guest account beyond my grasp

[Frederick C. Damen]

Craig White wrote:

>On Wed, 2006-03-15 at 18:09 -0500, Peter wrote:
>  
>
>>--- Craig White <craigwhite at azapple.com> wrote:
>>
>>    
>>
>>>On Wed, 2006-03-15 at 17:45 -0500, Peter wrote:
>>>      
>>>
>>>>Hi, I'm using 3.0.21b and I cannot get the guest account to work.
>>>>
>>>>some of smb.conf:
>>>>
>>>>------------------------------
>>>>   security = user
>>>>   hosts allow = 192.168.2. 127.
>>>>   guest account = visiteur
>>>>   log level = 2
>>>>   log file = /var/log/samba/samba.%m
>>>>   max log size = 1024
>>>>   socket options = TCP_NODELAY
>>>>
>>>>[publique]
>>>>   path = /vol2/samba/publique
>>>>   browseable = yes
>>>>   guest ok = yes
>>>>------------------------------
>>>>
>>>># grep visiteur /etc/passwd 
>>>>visiteur:*:1009:1013:Samba guest user:/home/visiteur:/bin/sh
>>>>
>>>>When on Win2k when I click the server icon the pop-up box appears
>>>>        
>>>>
>>>and I
>>>      
>>>
>>>>put in "visiteur" for user and a blank for password the server's
>>>>        
>>>>
>>>log
>>>      
>>>
>>>>says:
>>>>
>>>>------------------------------
>>>>[2006/03/14 21:19:33, 2] smbd/sesssetup.c:setup_new_vc_session(772)
>>>>  setup_new_vc_session: New VC == 0, if NT4.x compatible we would
>>>>        
>>>>
>>>close
>>>      
>>>
>>>>all old resources.
>>>>[2006/03/14 21:19:33, 2] smbd/sesssetup.c:setup_new_vc_session(772)
>>>>  setup_new_vc_session: New VC == 0, if NT4.x compatible we would
>>>>        
>>>>
>>>close
>>>      
>>>
>>>>all old resources.
>>>>[2006/03/14 21:19:33, 2] auth/auth.c:check_ntlm_password(317)
>>>>  check_ntlm_password:  Authentication for user [My Name] -> [My
>>>>        
>>>>
>>>Name]
>>>      
>>>
>>>>FAILED with error NT_STATUS_NO_SUCH_USER
>>>>[2006/03/14 21:19:33, 2] smbd/sesssetup.c:setup_new_vc_session(772)
>>>>  setup_new_vc_session: New VC == 0, if NT4.x compatible we would
>>>>        
>>>>
>>>close
>>>      
>>>
>>>>all old resources.
>>>>[2006/03/14 21:19:33, 2] smbd/sesssetup.c:setup_new_vc_session(772)
>>>>  setup_new_vc_session: New VC == 0, if NT4.x compatible we would
>>>>        
>>>>
>>>close
>>>      
>>>
>>>>all old resources.
>>>>[2006/03/14 21:19:33, 2] auth/auth.c:check_ntlm_password(317)
>>>>  check_ntlm_password:  Authentication for user [My Name] -> [My
>>>>        
>>>>
>>>Name]
>>>      
>>>
>>>>FAILED with error NT_STATUS_NO_SUCH_USER
>>>>[2006/03/14 21:19:37, 2] smbd/sesssetup.c:setup_new_vc_session(772)
>>>>  setup_new_vc_session: New VC == 0, if NT4.x compatible we would
>>>>        
>>>>
>>>close
>>>      
>>>
>>>>all old resources.
>>>>[2006/03/14 21:19:37, 2] smbd/sesssetup.c:setup_new_vc_session(772)
>>>>  setup_new_vc_session: New VC == 0, if NT4.x compatible we would
>>>>        
>>>>
>>>close
>>>      
>>>
>>>>all old resources.
>>>>[2006/03/14 21:19:37, 2] auth/auth.c:check_ntlm_password(317)
>>>>  check_ntlm_password:  Authentication for user [visiteur] ->
>>>>[visiteur] FAILED with error NT_STATUS_WRONG_PASSWORD
>>>>------------------------------
>>>>
>>>>"My Name" is the logon name to this windows box that comes up
>>>>automatically when the system is booted.
>>>>
>>>>But I am successful when I try from the command line on the server
>>>>itself:
>>>>
>>>># smbclient \\\\nemex\\publique
>>>>Password: 
>>>>Anonymous login successful
>>>>Domain=[PLATEAU] OS=[Unix] Server=[Samba 3.0.21b]
>>>>smb: \> exit
>>>>
>>>>------------------------------
>>>># tail -15 /var/log/samba/nemex
>>>>
>>>>[2006/03/15 17:42:53, 2] auth/auth.c:check_ntlm_password(317)
>>>>  check_ntlm_password:  Authentication for user [super] -> [super]
>>>>FAILED with error NT_STATUS_NO_SUCH_USER
>>>>[2006/03/15 17:42:53, 2] lib/access.c:check_access(324)
>>>>  Allowed connection from  (192.168.2.213)
>>>>[2006/03/15 17:42:53, 1] smbd/service.c:make_connection_snum(693)
>>>>  nemex (192.168.2.213) connect to service publique initially as
>>>>        
>>>>
>>>user
>>>      
>>>
>>>>visiteur (uid=1009, gid=1013) (pid 667)
>>>>[2006/03/15 17:42:54, 1] smbd/service.c:close_cnum(885)
>>>>  nemex (192.168.2.213) closed connection to service publique
>>>>[2006/03/15 17:42:54, 2] smbd/server.c:exit_server(614)
>>>>  Closing connections
>>>>------------------------------
>>>>
>>>>How can I get access to the guest account from the windows box?
>>>>        
>>>>
>>>----
>>>man smb.conf
>>>
>>>/map to guest
>>>
>>>map to guest = Bad User
>>>      
>>>
>>Thanks but why should I need to use this hack?
>>    
>>
>----
>why do I bother directing people to information that they don't seem to
>want to read?
>
>man smb.conf
>
>/map to guest
>
>Craig
>
>  
>
After reading the section in the man page I suspect that your response 
is not
the correct, at least not complete answer, to his confusion.

It is stated that a specific account was created on the samba server and
used by the windows client.  Which according to the man page setting
'map to guest = Bad User' should reject the access request when a valid 
existing
account is specified and the password is incorrect, which is the action 
he is seeing.
Note that no account is specified in the smbclient case and thus should 
map to
the 'Guest Account'.  So by only specifying this parameter how does it 
solve his problem?

I suspect what he wants to do is specify a different 'Guest Account = ' 
value and
specifically not have the account 'visiteur' exist
and have his users use visiteur to access the share thus hitting the 
'Bad User'
condition and not the 'Bad Password' condition.  Or try setting a 
empty/Null password
to the account visiteur, see man smbpasswd -n.

Hope this helps,

Fred