[Samba] DM: samba 4.5 -> 4.8, guest access and machine account access troubles.

Marco Gaiarin gaio at sv.lnf.it
Tue Oct 2 16:39:54 UTC 2018


Mandi! Rowland Penny via samba
  In chel di` si favelave...

> OK, Windows 'Guest' != Unix 'nobody'
> It might seem if it does, but it doesn't

Rowland, clearly i know that. But you sayed:

> > > Also 'Guest' doesn't
> > > exist on a Unix domain member, you would have to map it to the Unix
> > > domain user 'nobody'

and i'm simply saying that this (seems) not completely true, because
windows 'Guest' user are mapped 'by default' to UNIX 'nobody' user.

If i create the user 'idontexistonthedomain' on a local workstation and
i try to access to a share (and supposing DOMINIQUE is the
workstation...) DOMINIQUE\idontexistonthedomain get mapped to guest and
i can access to the share. So guest access works.


> The line removes the domain name and just leaves the username. You can
> use 'winbind use default domain = yes' in smb.conf if you only have one
> DOMAIN set, if you set another trusted DOMAIN, you must not use it.

Perfectly clear. But still seems me a bit strange that samba strip the
domain also from users like DOMINIQUE\Administrator, where DOMINIQUE is
a workstation.

-- 
dott. Marco Gaiarin				        GNUPG Key ID: 240A3D66
  Associazione ``La Nostra Famiglia''          http://www.lanostrafamiglia.it/
  Polo FVG   -   Via della Bontà, 7 - 33078   -   San Vito al Tagliamento (PN)
  marco.gaiarin(at)lanostrafamiglia.it   t +39-0434-842711   f +39-0434-842797

		Dona il 5 PER MILLE a LA NOSTRA FAMIGLIA!
      http://www.lanostrafamiglia.it/index.php/it/sostienici/5x1000
	(cf 00307430132, categoria ONLUS oppure RICERCA SANITARIA)



More information about the samba mailing list