[Samba] Not working with Windows clients where "Digitally sign communications (always)" is enabled

Rowland Penny rpenny at samba.org
Mon Oct 29 16:30:36 UTC 2018


On Tue, 30 Oct 2018 00:19:23 +0800
Jyunhao Shih via samba <samba at lists.samba.org> wrote:

> Commenting out 'map to guest' works. Now Windows asks me for correct
> username/password.
> Thank you very much.
> Though I can't help thinking what if one day I'm demanded to set up an
> additional guest share on the same server...
> 

Adding just 'map to guest = Bad User' doesn't allow guest access to the
shares, you also need 'guest ok = yes' in the shares. Doing this is
very insecure, especially with 'wide links = yes'.

I cannot recommend allowing guest access unless there is NOTHING
valuable stored on the computer.

Rowland




More information about the samba mailing list