[Samba] help to get file from public share without authenticating

Rowland penny rpenny at samba.org
Thu Feb 4 12:13:10 UTC 2021


On 04/02/2021 08:57, jmpatagonia via samba wrote:
> Is still not working
>
> smbclient //10.11.37.62/netlogon -c 'get logon_linux.sh' -N -U\\jcbatman1
> Anonymous login successful
> Domain=[POLICIA2] OS=[] Server=[]
> tree connect failed: NT_STATUS_ACCESS_DENIED
>
> smb.conf
>
> [netlogon]
>          browseable = no
>          read list = "+POLICIA2\Domain Users"
>          path = /etc/samba/netlogon
>          comment = Script de logueo en la red
>          valid users = "+POLICIA2\Domain Users"
>          public = yes
>          writeable = no


OK, it works for myself:

rowland at devstation:~$ smbclient //raspberrypi/public -c 'get 
logon_linux.sh' -N -U\\rowland
getting file \logon_linux.sh of size 35 as logon_linux.sh (2.1 
KiloBytes/sec) (average 2.1 KiloBytes/sec)

pi at raspberrypi:~ $ cat /etc/samba/smb.conf
[global]
     ...........
     map to guest = bad user
     ...........

[public]
     path = /home/freeshare
     read only = no
     guest ok = yes

There is a big error with your share, you cannot use 'valid users' with 
'public = yes' (which is a synonym for 'guest ok'), Whatever user is 
attempting to access the share, the user is authenticated before it gets 
anywhere the share. This means that a guest user is mapped to 'nobody' 
and 'nobody' isn't a member of the 'Domain Users' group. Try removing 
the 'read list' & 'valid users' lines from your share.

Rowland





More information about the samba mailing list