[Samba] samba 3.2.5 PDC guest access lost

Alexander harlampov at yandex.ru
Mon Apr 11 06:00:41 MDT 2011


I've logged https://bugzilla.samba.org/show_bug.cgi?id=8069


On 06.04.2011 17:39, Alexander wrote:
> it seems the problem lays here:
> auth/auth_server.c
>
> /* if logged in as guest then reject */
>     if ((SVAL(cli->inbuf,smb_vwv2)&  1) != 0) {
>         DEBUG(1,("password server %s gave us guest only\n", 
> cli->desthost));
>         nt_status = NT_STATUS_LOGON_FAILURE;
>     }
>
>
> question is why ?
> another domain member (samba 3.2.5) get guest access OK through this 
> same PDC.
>
> any help please
>
> On 04.04.2011 17:30, Alexander wrote:
>> Hi all,
>>
>> I had linux samba 3.0.10 running as PDC of my domain which does only 
>> authentication
>> for other linux samba boxes which are providing access to shares.
>> After upgrade of PDC to Debian Lenny + samba 3.2.5 I've lost guess 
>> access to the shares which are run by samba 3.0.x boxes,
>> while it works on samba 3.2.5 samba box. the scheme is like following :
>>
>>
>>                                                   _      [samba box 
>> 3.0.10] <-------  (not working)
>>                                     (auth)   /                       
>>                                             \
>> <<----- 
>> /                                                                     \
>> PDC [samba 3.5.2] 
>>                                                                                       
>> client (guest access)
>> <<-----                                                                     
>>   /
>>                                                
>> \                                                                    /
>>                                      (auth)  \_       [samba box 
>> (3.5.2] <------- (working)
>>
>>
>>
>> on PDC in smb.conf regarding guest access i have :
>> map to guest = Bad User
>> guest account = pcguest
>> and pcguest unix account does exist.
>>
>> on samba box's guest ok = yes is set .
>>
>> in the logs of samba box  where it's working (3.0.10) , among many 
>> things , i could find :
>>
>> [2011/03/16 20:37:41, 1] 
>> auth/auth_server.c:check_smbserver_security(373)
>>   password server * gave us guest only
>>
>> which is not reported from 3.2.5 box.
>>
>>
>> Any help / advice would be highly appreciated.
>>
>> -- 
>> best regards,
>> Alexander
>



More information about the samba mailing list