[Samba] SMB share access for machines which are not joined to the domain?

[Gregory Sloop]

Are these clients Windows machines? [I suppose it doesn't matter.]

You can always connect to the SMB share using a domain user/password credential set, even if you're not a member of the domain.
Something like - Connect as: User: "somedomain\pat" with Pat's password.

But perhaps I'm missing something?

-Greg

GPGvs> Samba 4.7.6 running on Ubuntu 18.04, with host joined to an AD domain as
GPGvs> a domain member.

GPGvs> I have all this working perfectly for SMB clients which are joined to 
GPGvs> the domain, however I need to provide SMB access (if possible) to a 
GPGvs> handful of machines that are not domain members and can't be made domain
GPGvs> members.  Is there any way to do this?

GPGvs> I thought configuring "allow hosts" in smb.conf with the IP addresses of
GPGvs> the 2-4 machines in question might work, but this seems to restrict all
GPGvs> access, in particular blocking domain-joined clients when configured.