Re: [Samba] Re: Cannot map guest shares in 'security = SERVER' mode onsamba-3.0.9

[Rene Kapeller]

Anybody out there, who has a samba server running in 'security = SERVER' 
mode, while providing a 'public/guest' share?


Again, this used to work on samba-2.2.9!!!

Could it be a bug in samba-3.0.9?
Is there something that has to be changed on XP?

I am willing to do more testing/trying/debugging 

Config and logs:
http://lists.samba.org/archive/samba/2006-January/116901.html

Thanks for any hint!
Rene

Gerald (Jerry) Carter wrote:

-BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Rene Kapeller wrote:



I'm running samba-3.0.9-1.3E.3 and the manpage for smb.conf does not
mention anything about 'map to guest = Bad Uid'.

However I did add the line 'map to guest = Bad Uid' an run 
'testparm /etc/samba/smb.conf'.



The 'Bad uid' option is only available in 3.0.20 and later iirc.
Also it is really only a supported option for security = {domain,ads}







cheers, jerry
=
I live in a Reply-to-All world---
Samba--- http://www.samba.org
Centeris ---  http://www.centeris.com

-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.2 (MingW32)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFD3h/nIR7qMdg1EfYRAssXAJ4lfLLClfMrl9Hk5Fp5MSzxztn/lwCfZp4o
nB6rfxPx2S/FpHl42lz7ijA=
=BSEq
-END PGP SIGNATURE-


--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Re: Cannot map guest shares in 'security = SERVER' mo de onsamba-3.0.9

[Rene Kapeller]

Adam Nielsen wrote:
I'm running samba-3.0.9-1.3E.3 and the manpage for smb.conf does not 
mention anything about 'map to guest = Bad Uid'.



Isn't it "map to guest = bad user"?


That's what I thought, but I failed to get it working in 'security = 
SERVER' mode.
Rex Dieter suggested to use 'Bad Uid', as this apparently was the 
behavior in 2.2.9


--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

[Samba] Re: Cannot map guest shares in 'security = SERVER' mode onsamba-3.0.9

[Rene Kapeller]

I'm running samba-3.0.9-1.3E.3 and the manpage for smb.conf does not 
mention anything about 'map to guest = Bad Uid'.


However I did add the line 'map to guest = Bad Uid' an run 'testparm 
/etc/samba/smb.conf'.
No complaines but 'testparm' removes the entire line 'map to guest = Bad 
Uid' from the config file.

H???


--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Re: Cannot map guest shares in 'security = SERVER' mode o nsamba-3.0.9

[Rene Kapeller]

I did read the man pages all through, but I'm lost! After struggling for 
4 days, I decided to step back to samba-2.2.9, where everything works fine!


Rex Dieter wrote:

Rene Kapeller wrote:


== problem =

'net use n: \\smbs1\public' on Windows XP, always asks for a password.

'smbmount //smbs1/public /mnt/public -o password=' does not.

This all used to work fine under Redhat-9 and Samba-2.2


...


   map to guest = Bad User



man smb.conf, read up on the options available for 'map to guest'.


-- Rex



--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

[Samba] Cannot map guest shares in 'security = SERVER' mode on samba-3.0.9

[Rene Kapeller]

== platform =

Linux version: RHEL-3 resp. Scientific Linux 305
Samba vesrion: 3.0.9-1.3E.3
Samba operating mode: security = SERVER

== problem =

'net use n: \\smbs1\public' on Windows XP, always asks for a password.

'smbmount //smbs1/public /mnt/public -o password=' does not.

This all used to work fine under Redhat-9 and Samba-2.2


== smb.conf =

[global]
workgroup = MSDOM
netbios name = SMBS1
interfaces = XXX.XXX.XXX.XXX/255.255.255.0, 127.0.0.1
bind interfaces only = Yes
security = SERVER
map to guest = Bad User
password server = pdc1.XXX.XXX
guest account = guest
log level = 3
socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
load printers = No
local master = No
domain master = No
dns proxy = No
wins server = wins00.XXX.XXX


[public]
comment = Public share
path = /export/public
guest ok = Yes
hosts allow = XXX.XXX., 127.0.0.1



 also tested, but no success =


#null passwords = yes
#max protocol = LANMAN1
#client use spnego = no


== log when Windows XP tries 

[2006/01/25 09:48:14, 3] smbd/process.c:process_smb(1091)
  Transaction 1 of length 137
[2006/01/25 09:48:14, 3] smbd/process.c:switch_message(886)
  switch message SMBnegprot (pid 770) conn 0x0
[2006/01/25 09:48:14, 3] smbd/sec_ctx.c:set_sec_ctx(288)
  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2006/01/25 09:48:14, 3] smbd/negprot.c:reply_negprot(461)
  Requested protocol [PC NETWORK PROGRAM 1.0]
[2006/01/25 09:48:14, 3] smbd/negprot.c:reply_negprot(461)
  Requested protocol [LANMAN1.0]
[2006/01/25 09:48:14, 3] smbd/negprot.c:reply_negprot(461)
  Requested protocol [Windows for Workgroups 3.1a]
[2006/01/25 09:48:14, 3] smbd/negprot.c:reply_negprot(461)
  Requested protocol [LM1.2X002]
[2006/01/25 09:48:14, 3] smbd/negprot.c:reply_negprot(461)
  Requested protocol [LANMAN2.1]
[2006/01/25 09:48:14, 3] smbd/negprot.c:reply_negprot(461)
  Requested protocol [NT LM 0.12]
[2006/01/25 09:48:14, 3] smbd/negprot.c:reply_nt1(333)
  using SPNEGO
[2006/01/25 09:48:14, 3] smbd/negprot.c:reply_negprot(549)
  Selected protocol NT LM 0.12
[2006/01/25 09:48:14, 3] smbd/process.c:process_smb(1091)
  Transaction 2 of length 240
[2006/01/25 09:48:14, 3] smbd/process.c:switch_message(886)
  switch message SMBsesssetupX (pid 770) conn 0x0
[2006/01/25 09:48:14, 3] smbd/sec_ctx.c:set_sec_ctx(288)
  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2006/01/25 09:48:14, 3] smbd/sesssetup.c:reply_sesssetup_and_X(655)
  wct=12 flg2=0xc807
[2006/01/25 09:48:14, 2] smbd/sesssetup.c:setup_new_vc_session(608)
  setup_new_vc_session: New VC == 0, if NT4.x compatible we would close 
all old resources.

[2006/01/25 09:48:14, 3] smbd/sesssetup.c:reply_sesssetup_and_X_spnego(535)
  Doing spnego session setup
[2006/01/25 09:48:14, 3] smbd/sesssetup.c:reply_sesssetup_and_X_spnego(566)
  NativeOS=[Windows 2002 Service Pack 2 2600] NativeLanMan=[Windows 
2002 5.1] PrimaryDomain=[]

[2006/01/25 09:48:14, 3] smbd/sesssetup.c:reply_spnego_negotiate(444)
  Got OID 1 3 6 1 4 1 311 2 2 10
[2006/01/25 09:48:14, 3] smbd/sesssetup.c:reply_spnego_negotiate(447)
  Got secblob of size 40
[2006/01/25 09:48:14, 3] libsmb/ntlmssp.c:debug_ntlmssp_flags(62)
  Got NTLMSSP neg_flags=0xe2088297
[2006/01/25 09:48:14, 3] lib/util_sock.c:open_socket_out(752)
  Connecting to XXX.XXX.230.102 at port 445
[2006/01/25 09:48:14, 3] auth/auth_server.c:server_cryptkey(75)
  connected to password server D.XXX.CH
[2006/01/25 09:48:14, 3] auth/auth_server.c:server_cryptkey(100)
  got session
[2006/01/25 09:48:14, 3] auth/auth_server.c:server_cryptkey(133)
  password server OK
[2006/01/25 09:48:14, 3] auth/auth_server.c:auth_get_challenge_server(183)
  using password server validation
[2006/01/25 09:48:14, 3] smbd/process.c:process_smb(1091)
  Transaction 3 of length 274
[2006/01/25 09:48:14, 3] smbd/process.c:switch_message(886)
  switch message SMBsesssetupX (pid 770) conn 0x0
[2006/01/25 09:48:14, 3] smbd/sec_ctx.c:set_sec_ctx(288)
  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2006/01/25 09:48:14, 3] smbd/sesssetup.c:reply_sesssetup_and_X(655)
  wct=12 flg2=0xc807
[2006/01/25 09:48:14, 2] smbd/sesssetup.c:setup_new_vc_session(608)
  setup_new_vc_session: New VC == 0, if NT4.x compatible we would close 
all old resources.

[2006/01/25 09:48:14, 3] smbd/sesssetup.c:reply_sesssetup_and_X_spnego(535)
  Doing spnego session setup
[2006/01/25 09:48:14, 3] smbd/sesssetup.c:reply_sesssetup_and_X_spnego(566)
  NativeOS=[Windows 2002 Service Pack 2 2600] NativeLanMan=[Windows 
2002 5.1] PrimaryDomain=[]

[2006/01/25 09:48:14, 3] libsmb/ntlmssp.c:ntlmssp_server_auth(615)
  Got user=[] domain=[] workstation=[PC3247] len1=1 len2=0
[2006/01/25 09:48:14, 3] auth/auth.c:chec