On Sat, Dec 09, 2023 at 08:34:14PM -0500, Gordon Ross wrote:
> Does this kind of logon (empty user name) work for you with Windows?

Nope, it doesn't seem to work. But that's ok as the normal Windows
behaviour is actually working.

> When I tried it on a couple systems, I'm always prompted for a password.
> Do you know of protocol specifications defining this use case?
> Supporting this would probably require some changes in the SMB service.
> I guess it might be possible to (conditionally?) replace an empty user
> name with "guest".
> Meanwhile, can you configure your client to connect with user "guest"?

It seems to be related to Thunar. Although Caja also seems to send empty
Account. So that's probably in some librairies.

I've checked using a Samba server. And it seems to way to solve this is
by using the "map to guest = Bad User" directive. This maps the empty
account into guest.

I'll check to see if I can match this use case using idmap. If not, it
does not matter that much. When using a Linux / OpenBSD workstation, I
log in using SFTP or an smb user. Guest is used by IoT and they seem to
use Account=guest.

> 
> On Sat, Dec 9, 2023 at 5:46 PM Joel Carnat <[email protected]> wrote:
> >
> > Hi,
> >
> > I have configured a guest access to some smb shares which works properly 
> > from a Windows client or iOS app. But when trying to access the share using 
> > the "Anonymous" account on XFCE Thunar (from Linux or OpenBSD), I doesn't 
> > work. No connection is made. If I force using a "guest" account or another 
> > non-existing user, it does work and apply the guest permissions. Looking at 
> > the smb network exchange with wireshark, it seem that "anonymous" 
> > connection from Thunar sends an empty "User" value.
> >
> > I also have shares that needs authenticated access so I can't match '*' 
> > using idmap.
> >
> > Is there a way to solve this on the smb server side?
> >
> > Thanks.
> > illumos / illumos-discuss / see discussions + participants + delivery 
> > options Permalink

------------------------------------------
illumos: illumos-discuss
Permalink: 
https://illumos.topicbox.com/groups/discuss/T25e217c820328c7b-M340ca7ca46440ac260043aeb
Delivery options: https://illumos.topicbox.com/groups/discuss/subscription

Reply via email to