Re: ldap_nua requires guest exist and have rid 501?

2002-11-12 Thread Andrew Bartlett
On Wed, 2002-11-13 at 16:35, John E. Malmberg wrote: > Andrew Bartlett wrote: > > > On Tue, 2002-11-12 at 16:10, John E. Malmberg wrote: > > > > The exception is much more than that - all sorts of things go over > > IPC$, and they are protected by their individual ACLs. Enumerating > > users,

Re: ldap_nua requires guest exist and have rid 501?

2002-11-12 Thread John E. Malmberg
Andrew Bartlett wrote: On Tue, 2002-11-12 at 16:10, John E. Malmberg wrote: The exception is much more than that - all sorts of things go over IPC$, and they are protected by their individual ACLs. Enumerating users, all sorts of things. Domain logons are a particular thing that occour init

Re: ldap_nua requires guest exist and have rid 501?

2002-11-11 Thread Andrew Bartlett
On Tue, 2002-11-12 at 16:10, John E. Malmberg wrote: > Andrew Bartlett wrote: > > In Samba, access by the guest user is determined per-share, so I'm > > not sure exactly what you mean here. > > The NT behavior is that if the guest account is enabled, than if any > shares have the "everyone" grou

Re: ldap_nua requires guest exist and have rid 501?

2002-11-11 Thread John E. Malmberg
Andrew Bartlett wrote: In Samba, access by the guest user is determined per-share, so I'm not sure exactly what you mean here. The NT behavior is that if the guest account is enabled, than if any shares have the "everyone" group associated with them, then the shares can be accessed from any LA

Re: ldap_nua requires guest exist and have rid 501?

2002-11-11 Thread Andrew Bartlett
On Tue, 2002-11-12 at 14:48, John E. Malmberg wrote: > Andrew Bartlett wrote: > > > On Tue, 2002-11-12 at 13:16, John E. Malmberg wrote: > > > >> On a related note, does SAMBA still use the guest account in place > >> of the (unkown) internal user for enumerating shares? > >> > >> An NT client

Re: ldap_nua requires guest exist and have rid 501?

2002-11-11 Thread John E. Malmberg
Andrew Bartlett wrote: On Tue, 2002-11-12 at 13:16, John E. Malmberg wrote: On a related note, does SAMBA still use the guest account in place of the (unkown) internal user for enumerating shares? An NT client can not browse a SAMBA server with the guest account disabled, but having a guest

Re: ldap_nua requires guest exist and have rid 501?

2002-11-11 Thread Andrew Bartlett
On Tue, 2002-11-12 at 13:16, John E. Malmberg wrote: > Andrew Bartlett wrote: > > > Because the Guest account is a 'well known' account, and as such > > should have a fixed RID. This is enforced via the passdb backend > > because to do otherwise would have nasty consequences when mapping > > b

Re: ldap_nua requires guest exist and have rid 501?

2002-11-11 Thread John E. Malmberg
Andrew Bartlett wrote: Because the Guest account is a 'well known' account, and as such should have a fixed RID. This is enforced via the passdb backend because to do otherwise would have nasty consequences when mapping back and forth between uids and RIDs. (We are working hard to ensure tha

Re: ldap_nua requires guest exist and have rid 501?

2002-11-11 Thread Andrew Bartlett
On Tue, 2002-11-12 at 10:59, Bradley W. Langhorst wrote: > Is that statement true? Yes, or also use the unixsam backend > if so why? Because the Guest account is a 'well known' account, and as such should have a fixed RID. This is enforced via the passdb backend because to do otherwise would ha