[Samba] "security = share" is deprecated? (a simple question for a newbie)

TAKAHASHI Motonobu monyo at monyo.com
Sun Dec 26 06:03:34 MST 2010


2010/12/26 François Patte <francois.patte at mi.parisdescartes.fr>:
> As far as I understand from Chris blog, " map to guest = bad user" is to
> be used because the mode security=share is now deprecated. In my version
> of samba-swat  (samba-swat-3.2.15-0.36) this security share mode is
> still there. Do I have to change the configuration?
>
> Thanks.

Although "security = share" is not explicitly marked as "deprecated"
in SWAT (or loadparm.c), this is same security mode as Windows 9x and will be
deprecated sooner or later.

At least smb signing is not supported with share level security, because of
the specification of SMB.

[Samba] reply_nt1: smb signing is incompatible with share level security !
http://lists.samba.org/archive/samba/2008-June/141368.html

And even if there will be a severe bug, that will not be fixed or fixed but not
rapidly.

BUG#1254 write list not working under share-level security
https://bugzilla.samba.org/show_bug.cgi?id=1254

For example, BUG#1254 was first found at Samba 3.0.3, reported several
times and was fixed at Samba 3.2.6 at last.

Anyway, if you like to use "security = share", you have to write it explicitly
 in global section of your smb.conf.

---
TAKAHASHI Motonobu <monyo at samba.gr.jp>


More information about the samba mailing list