[Samba] Could not access a share as a guest

[Neelakantan Kannappa (nkannapp)]

Hi Group,

I have mentioned the details of the Samba and the Smb.conf.

When I access the the configured share from a windows server 2019 server machine.

I am getting the following error on the samba server side. Your help will be greatly appreciated.


[2020/06/07 12:45:28.833238,  1] ../../source3/smbd/service.c:348(create_connection_session_info)
  create_connection_session_info: guest user (from session setup) not permitted to access this share (IPC$)
[2020/06/07 12:45:28.833257,  1] ../../source3/smbd/service.c:531(make_connection_snum)
  create_connection_session_info failed: NT_STATUS_ACCESS_DENIED


Samba Version 4.11.6.

Smb.conf/testparam -s

# Global parameters
[global]
        add share command = /hidden-path/cifs_add_share.sh
        async smb echo handler = Yes
        deadtime = 120
        delete share command = /hidden-path/cifs_delete_share.sh
        disable spoolss = Yes
        domain master = No
        getwd cache = No
        hostname lookups = Yes
        kerberos method = system keytab
        load printers = No
        local master = No
        log file = /var/log/hidden-path/%m.log
        machine password timeout = 0
        map to guest = Bad User
        max log size = 10240
        max smbd processes = 132
        preferred master = No
        printcap name = /dev/null
        restrict anonymous = 2
        security = USER
        server min protocol = SMB2
        server string = XXX.
        socket options = TCP_NODELAY IPTOS_LOWDELAY SO_RCVBUF=4194304 SO_SNDBUF=1048576
        template homedir = /home/%U
        template shell = /sbin/nologin
        unix extensions = No
        username map = /hidden-path/etc/samba/smbusers
        workgroup = MYGROUP
        idmap config * : backend = tdb
        block size = 4096
        cups options = raw
        smb encrypt = No


[OrBackupDevice]
        follow symlinks = No
        force unknown acl user = Yes
        guest ok = Yes
        guest only = Yes
        hosts allow = 169.254.183.198 10.230.135.160 10.230.135.111 127.0.0.1
        include = /hidden-path/OrbBackupDevice.inc
        level2 oplocks = No
        mangled names = no
        oplocks = No
        path = /containers/OrbBackupDevice/OrbBackupRoot/
        read only = No
        strict locking = No
        vfs objects = streams_depot acl_xattr customvfs
        acl_xattr:ignore hashes = yes


--

$ cat /hidden-path/ etc/samba/smbusers
nobody = guest
$
$ /samba/usr/bin/pdbedit -L
administrator:1004: xxx administrator
$
$ cat /etc/passwd
..
nobody:x:65534:65534:Kernel Overflow User:/:/sbin/nologin
...
$

--

NOTE: Tried with "force user (S) & force group(S_ to be that of the administrator" . That too did not help resolve the issue.


Thanks,
Neelakantan K.