[Samba] smbpasswd -d nobody, listing still possible?

[julius Junghans]

hi,

i wondered why i can still list my shares with smbclient -NL localip, 
security = SHARE i just disable the user nobody?



the log:
[2005/11/27 12:05:48, 2] lib/interface.c:add_interface(81)
 added interface ip=192.168.10.66 bcast=192.168.10.255 nmask=255.255.255.0
[2005/11/27 12:05:48, 2] lib/interface.c:add_interface(81)
 added interface ip=127.0.0.1 bcast=127.255.255.255 nmask=255.0.0.0
[2005/11/27 12:05:48, 3] smbd/sec_ctx.c:push_sec_ctx(256)
 push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
[2005/11/27 12:05:48, 3] smbd/uid.c:push_conn_ctx(388)
 push_conn_ctx(0) : conn_ctx_stack_ndx = 0
[2005/11/27 12:05:48, 3] smbd/sec_ctx.c:set_sec_ctx(288)
 setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2005/11/27 12:05:48, 3] smbd/sec_ctx.c:pop_sec_ctx(386)
 pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
[2005/11/27 12:05:48, 3] smbd/sec_ctx.c:push_sec_ctx(256)
 push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
[2005/11/27 12:05:48, 3] smbd/uid.c:push_conn_ctx(388)
 push_conn_ctx(0) : conn_ctx_stack_ndx = 0
[2005/11/27 12:05:48, 3] smbd/sec_ctx.c:set_sec_ctx(288)
 setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2005/11/27 12:05:48, 3] smbd/sec_ctx.c:push_sec_ctx(256)
 push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
[2005/11/27 12:05:48, 3] smbd/uid.c:push_conn_ctx(388)
 push_conn_ctx(0) : conn_ctx_stack_ndx = 1
[2005/11/27 12:05:48, 3] smbd/sec_ctx.c:set_sec_ctx(288)
 setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
[2005/11/27 12:05:48, 3] smbd/sec_ctx.c:pop_sec_ctx(386)
 pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
[2005/11/27 12:05:48, 3] smbd/sec_ctx.c:push_sec_ctx(256)
 push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
[2005/11/27 12:05:48, 3] smbd/uid.c:push_conn_ctx(388)
 push_conn_ctx(0) : conn_ctx_stack_ndx = 1
[2005/11/27 12:05:48, 3] smbd/sec_ctx.c:set_sec_ctx(288)
 setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
[2005/11/27 12:05:48, 3] smbd/sec_ctx.c:pop_sec_ctx(386)
 pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
[2005/11/27 12:05:48, 3] smbd/sec_ctx.c:pop_sec_ctx(386)
 pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
[2005/11/27 12:05:48, 3] smbd/server.c:main(839)
 loaded services
[2005/11/27 12:05:48, 3] smbd/server.c:main(854)
 Becoming a daemon.
[2005/11/27 12:05:48, 2] lib/tallocmsg.c:register_msg_pool_usage(56)
 Registered MSG_REQ_POOL_USAGE
[2005/11/27 12:05:48, 2] lib/dmallocmsg.c:register_dmalloc_msgs(71)
 Registered MSG_REQ_DMALLOC_MARK and LOG_CHANGED
[2005/11/27 12:05:48, 3] printing/printing.c:start_background_queue(1321)
 start_background_queue: Starting background LPQ thread
[2005/11/27 12:05:48, 2] smbd/server.c:open_sockets_smbd(334)
 waiting for a connection
[2005/11/27 12:05:54, 3] smbd/oplock.c:init_oplocks(1380)
 open_oplock_ipc: opening loopback UDP socket.
[2005/11/27 12:05:54, 3] smbd/oplock_linux.c:linux_init_kernel_oplocks(309)
 Linux kernel oplocks enabled
[2005/11/27 12:05:54, 3] smbd/oplock.c:init_oplocks(1411)
 open_oplock ipc: pid = 5986, global_oplock_port = 32771
[2005/11/27 12:05:54, 3] smbd/process.c:process_smb(1114)
 Transaction 0 of length 183
[2005/11/27 12:05:54, 3] smbd/process.c:switch_message(900)
 switch message SMBnegprot (pid 5986) conn 0x0
[2005/11/27 12:05:54, 3] smbd/sec_ctx.c:set_sec_ctx(288)
 setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2005/11/27 12:05:54, 3] smbd/negprot.c:reply_negprot(466)
 Requested protocol [PC NETWORK PROGRAM 1.0]
[2005/11/27 12:05:54, 3] smbd/negprot.c:reply_negprot(466)
 Requested protocol [MICROSOFT NETWORKS 1.03]
[2005/11/27 12:05:54, 3] smbd/negprot.c:reply_negprot(466)
 Requested protocol [MICROSOFT NETWORKS 3.0]
[2005/11/27 12:05:54, 3] smbd/negprot.c:reply_negprot(466)
 Requested protocol [LANMAN1.0]
[2005/11/27 12:05:54, 3] smbd/negprot.c:reply_negprot(466)
 Requested protocol [LM1.2X002]
[2005/11/27 12:05:54, 3] smbd/negprot.c:reply_negprot(466)
 Requested protocol [DOS LANMAN2.1]
[2005/11/27 12:05:54, 3] smbd/negprot.c:reply_negprot(466)
 Requested protocol [Samba]
[2005/11/27 12:05:54, 3] smbd/negprot.c:reply_nt1(331)
 not using SPNEGO
[2005/11/27 12:05:54, 3] smbd/negprot.c:reply_negprot(559)
 Selected protocol NT LANMAN 1.0
[2005/11/27 12:05:54, 3] smbd/process.c:process_smb(1114)
 Transaction 1 of length 142
[2005/11/27 12:05:54, 3] smbd/process.c:switch_message(900)
 switch message SMBsesssetupX (pid 5986) conn 0x0
[2005/11/27 12:05:54, 3] smbd/sec_ctx.c:set_sec_ctx(288)
 setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2005/11/27 12:05:54, 3] smbd/sesssetup.c:reply_sesssetup_and_X(751)
 wct=13 flg2=0xc801
[2005/11/27 12:05:54, 3] smbd/sesssetup.c:reply_sesssetup_and_X(897)
 Domain=[MIDEARTH]  NativeOS=[Unix] NativeLanMan=[Samba 3.0.20b] 
PrimaryDomain=[null]

[2005/11/27 12:05:54, 3] smbd/sesssetup.c:reply_sesssetup_and_X(912)
 sesssetupX:[EMAIL PROTECTED]
[2005/11/27 12:05:54, 3] smbd/sesssetup.c:check_guest_password(115)
 Got anonymous request
[2005/11/27 12:05:54, 3] auth/auth.c:check_ntlm_password(219)
 check_ntlm_password:  Checking password for unmapped user [EMAIL PROTECTED] 
with the new password interface

[2005/11/27 12:05:54, 

RE: [Samba] smbpasswd -d nobody, listing still possible?

[Jeroen van Meeuwen]

Julius,

Set 'security = user'.

Kind regards,

Jeroen van Meeuwen

--
kanarip



 -Original Message-
 Subject: [Samba] smbpasswd -d nobody, listing still possible?
 
 hi,
 
 i wondered why i can still list my shares with smbclient -NL localip,
 security = SHARE i just disable the user nobody?

 my conf:
 
 [global]
 workgroup = MIDEARTH
 netbios name = GANDALF
 security = SHARE
 message command = sh -c '/usr/kde/3.4/bin/winpopup-send.sh %s %m' 
 
 
 bind interfaces only = yes
 interfaces = eth0 lo
 
 passdb backend = tdbsam
 guest account = nobody
 
 #logging
 log file = /tmp/samba.log
 log level = 3
 
 
 [data]
 comment = Data
 path = /home/metalfan/Windows
 guest only = Yes
 writeable = Yes
 
 
 and the smbclient  -NL localip output:
 
 Domain=[MIDEARTH] OS=[Unix] Server=[Samba 3.0.20b]
 
 Sharename   Type  Comment
 -     ---
 dataDisk  Data
 data2   Disk
 IPC$IPC   IPC Service (Samba 3.0.20b)
 ADMIN$  IPC   IPC Service (Samba 3.0.20b)
 Domain=[MIDEARTH] OS=[Unix] Server=[Samba 3.0.20b]
 
 Server   Comment
 ----
 GANDALF  Samba 3.0.20b
 
 WorkgroupMaster
 ----
 MIDEARTH
 
 
 
 shouldnt i just get some error like..no user.. ?
 
 greets
 Julius
 --
 To unsubscribe from this list go to the following URL and read the
 instructions:  https://lists.samba.org/mailman/listinfo/samba

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba