RE: Restrict Anonymous

2003-03-06 Thread MCCALL,DON (HP-USA,ex1)
06, 2003 11:52 > To: '[EMAIL PROTECTED]' > Subject: Restrict Anonymous > > > Hello list, > > Has anybody coded some sort of workaround for joining domains with > RestrictAnonymous set? The typical behavior I see is for NT4 > domains we're > able to loo

RE: Restrict Anonymous

2003-03-06 Thread Richard Sharpe
> -Original Message- > From: Richard Sharpe [mailto:[EMAIL PROTECTED] > Sent: Thursday, March 06, 2003 9:52 AM > To: Marc Kaplan > Cc: '[EMAIL PROTECTED]' > Subject: Re: Restrict Anonymous > > > On Thu, 6 Mar 2003, Marc Kaplan wrote: > > > Hello

RE: Restrict Anonymous

2003-03-06 Thread Marc Kaplan
EMAIL PROTECTED]' Subject: Re: Restrict Anonymous On Thu, 6 Mar 2003, Marc Kaplan wrote: > Hello list, > > Has anybody coded some sort of workaround for joining domains with > RestrictAnonymous set? The typical behavior I see is for NT4 domains we're > able to look up

Re: Restrict Anonymous

2003-03-06 Thread Richard Sharpe
On Thu, 6 Mar 2003, Marc Kaplan wrote: > Hello list, > > Has anybody coded some sort of workaround for joining domains with > RestrictAnonymous set? The typical behavior I see is for NT4 domains we're > able to look up sequence, but never enumerate users and groups. For ADS > domains, it seems th

Restrict Anonymous

2003-03-06 Thread Marc Kaplan
Hello list, Has anybody coded some sort of workaround for joining domains with RestrictAnonymous set? The typical behavior I see is for NT4 domains we're able to look up sequence, but never enumerate users and groups. For ADS domains, it seems that even looking up sequence from the domain fails.

[patch] winbindd: try to fix 'restrict anonymous=1'

2003-01-20 Thread Martin Pool
hp CR1501 and friends This patch tries to make winbindd cope with the security option 'restrict anonymous=1' on NT4 and W2kS. When this option is set, the DC disallows SAMR calls on unauthenticated connections, but does allow LSA translations between names and sids. Obviously winb

Re: NULL sessions - Listing shares anonymously - restrict anonymous

2002-11-17 Thread Andrew Bartlett
On Fri, 2002-11-15 at 19:40, Tim Potter wrote: > On Fri, Nov 15, 2002 at 07:32:06PM +1100, Andrew Bartlett wrote: > > > > In the Samba HEAD and 3.0 branches however the parameter behaves more > > > like the RestrictAnonymous registry setting. Only 'restrict anony

Re: NULL sessions - Listing shares anonymously - restrict anonymous

2002-11-16 Thread Christopher R. Hertel
Yannick Mercier wrote: : > Unfortunately, Ill have to back out to samba 2.2 because I'm using this > samba server as a PDC also, and when I logon with my WinXP workstation, > the PC reboots during "Loading desktop settings" > I guess its a bug in the alpha version of samba If the XP system reb

Re: NULL sessions - Listing shares anonymously - restrict anonymous

2002-11-15 Thread Tim Potter
On Fri, Nov 15, 2002 at 07:32:06PM +1100, Andrew Bartlett wrote: > > In the Samba HEAD and 3.0 branches however the parameter behaves more > > like the RestrictAnonymous registry setting. Only 'restrict anonymous = 1' > > is currently supported though. > >

Re: NULL sessions - Listing shares anonymously - restrict anonymous

2002-11-15 Thread Yannick Mercier
I installed the samba-3.0alpha20 (latest I think) and "restrict anonymous = 1" works for denying the shares Listing from non-authentified users. As what Ive read, the restrict anonymous = 2 is not implemented yet, but when it will be, it is supposed to deny all rpc calls, which wil

Re: NULL sessions - Listing shares anonymously - restrict anonymous

2002-11-15 Thread Andrew Bartlett
On Fri, 2002-11-15 at 15:08, Tim Potter wrote: > On Thu, Nov 14, 2002 at 08:50:47PM -0500, Yannick Mercier wrote: > > > I am running 2.2.5 and I would like to know if the > > "restrict anonymous" as been implemented correctly, as it was supposed > > to behav

Re: NULL sessions - Listing shares anonymously - restrict anonymous

2002-11-14 Thread Tim Potter
On Thu, Nov 14, 2002 at 08:50:47PM -0500, Yannick Mercier wrote: > I am running 2.2.5 and I would like to know if the > "restrict anonymous" as been implemented correctly, as it was supposed > to behave from the start, in order to deny > ALL anonymous connection

NULL sessions - Listing shares anonymously - restrict anonymous

2002-11-14 Thread Yannick Mercier
Hi, I am running 2.2.5 and I would like to know if the "restrict anonymous" as been implemented correctly, as it was supposed to behave from the start, in order to deny ALL anonymous connections as stated in the man : "When restrict anonymous is yes, all anonymous connection

Re: taking back the 'restrict anonymous' parameter

2002-05-30 Thread abartlet
On Thu, May 30, 2002 at 05:13:20PM +1000, Tim Potter wrote: > I'm thinking about taking back the restrict anonymous parameter and > using it to do Good Things. Previously in HEAD and currently in 2.2 it > stops people connecting to shares anonymously but I think Mr Bartlett > r

Re: taking back the 'restrict anonymous' parameter

2002-05-30 Thread Tim Potter
On Thu, May 30, 2002 at 04:37:59PM -0700, Jeremy Allison wrote: > > I propose that this parameter act like the RestrictAnonymous registry > > setting, i.e it prevents anonymous access to the SAMR pipe and anonymous > > access to the NetShareEnum RPC when set to 1. When set to 2, it > > disallows

Re: taking back the 'restrict anonymous' parameter

2002-05-30 Thread Jeremy Allison
On Thu, May 30, 2002 at 05:13:20PM +1000, Tim Potter wrote: > I'm thinking about taking back the restrict anonymous parameter and > using it to do Good Things. Previously in HEAD and currently in 2.2 it > stops people connecting to shares anonymously but I think Mr Bartlett > r

taking back the 'restrict anonymous' parameter

2002-05-30 Thread Tim Potter
I'm thinking about taking back the restrict anonymous parameter and using it to do Good Things. Previously in HEAD and currently in 2.2 it stops people connecting to shares anonymously but I think Mr Bartlett removed it because it was either buggy or didn't do anything useful. I pr