[Samba] help to get file from public share without authenticating

Rowland penny rpenny at samba.org
Thu Feb 4 12:13:10 UTC 2021

On 04/02/2021 08:57, jmpatagonia via samba wrote:
> Is still not working
> smbclient // -c 'get logon_linux.sh' -N -U\\jcbatman1
> Anonymous login successful
> Domain=[POLICIA2] OS=[] Server=[]
> tree connect failed: NT_STATUS_ACCESS_DENIED
> smb.conf
> [netlogon]
>          browseable = no
>          read list = "+POLICIA2\Domain Users"
>          path = /etc/samba/netlogon
>          comment = Script de logueo en la red
>          valid users = "+POLICIA2\Domain Users"
>          public = yes
>          writeable = no

OK, it works for myself:

rowland at devstation:~$ smbclient //raspberrypi/public -c 'get 
logon_linux.sh' -N -U\\rowland
getting file \logon_linux.sh of size 35 as logon_linux.sh (2.1 
KiloBytes/sec) (average 2.1 KiloBytes/sec)

pi at raspberrypi:~ $ cat /etc/samba/smb.conf
     map to guest = bad user

     path = /home/freeshare
     read only = no
     guest ok = yes

There is a big error with your share, you cannot use 'valid users' with 
'public = yes' (which is a synonym for 'guest ok'), Whatever user is 
attempting to access the share, the user is authenticated before it gets 
anywhere the share. This means that a guest user is mapped to 'nobody' 
and 'nobody' isn't a member of the 'Domain Users' group. Try removing 
the 'read list' & 'valid users' lines from your share.


More information about the samba mailing list