[Samba] Anonymous connection to Samba PDC?

[John H Terpstra]

On Wednesday 03 September 2008 09:43:14 Richard Foltyn wrote:
> Hi,
> is there a way to anonymously connect a Windows client to a Samba PDC? I
> have some random clients which I currently don't want to add to the domain,
> but would still like them to have access to one share.
>
> For example, I have:
>
> [skener]
>         path = /var/spool/scanner/scans
>         browseable = yes
>         writable = yes
>         force user = scanner
>         force group = scanner
>         guest ok = yes
>         guest only = yes
>
> When I connect with smbclient (either from localhost or any other Linux
> host) this works:
> [root at fundus-srv ~]# smbclient //fundus-srv/skener -N
> Anonymous login successful
> Domain=[FUNDUS] OS=[Unix] Server=[Samba 3.2.3]
> smb: \>
>
> >From the logs:
>
>   fundus-srv (::ffff:192.168.1.4) connect to service skener initially as
> user scanner (uid=1019, gid=516) (pid 1380)
> [2008/09/03 16:34:03,  1] smbd/service.c:close_cnum(1401)
>
> However, if I connect from a Windows machine (which is not a domain
> member), this does not work as Windows/Samba insists on using the currently
> logged in user. This of course fails since these users do not exist in the
> domain: [2008/09/03 16:28:02,  2] auth/auth.c:check_ntlm_password(318)
>   check_ntlm_password:  Authentication for user [richi] -> [richi] FAILED
> with error NT_STATUS_NO_SUCH_USER
>
>
> Is there a way to connect anonymously from Windows as well?
>
> Thanks,
> Richard

In your smb.conf [global] section add:
	map to guest = bad user

- John T.
-- 
John H Terpstra

"Don't do as I do; Show me better!" - Anonymous.