David Walluck wrote: > Are we sure we want the printer to default to being accessible by the > guest account? Samba also doesn't appear to use tcpwrappers, and since > no hosts are blocked by default in the config file, this leaves the > printer open to everyone on the net by default. That can't be good. >
It is not trivial blocking hosts in the smb.conf file. If you try this without having revers dns lookups working, the chances are that you won't easily even be able to see if samba is running. Many users have problems when they try hosts allow = 192.168.0/24, because smbd times out doing reverse dns, and by the time smbd returns, windows has timed out. This may be improved by using WINS and nss_wins, but I am not sure, and haven't had a chance to test this. Note of course, that you can also apply ACLs to the printers (from win2k,winnt,winxp) if you are a printer admin, and thus limit who can print. Just for reference, the most common question relating to samba on mandrake expert is "how do I get samba to share out my printer so everyone can print without needing account, like windows does it". Ideally, there should be a tool for setting up all the services on a lan, including dns, dynamic dns (dchp + dns), and then apply hosts allow limits on samba. btw, please read through the un-swat-mangled smb.conf before requesting changes, you should notice pretty good comments and example configs there which should be pretty easy to use. In the meantime we will continue seeing if we can get the last few real (ie non-config) problems with samba sorted out ... Buchan -- |----------------Registered Linux User #182071-----------------| Buchan Milne Mechanical Engineer, Network Manager Cellphone * Work +27 82 472 2231 * +27 21 8828820x202 Stellenbosch Automotive Engineering http://www.cae.co.za GPG Key http://ranger.dnsalias.com/gpg.key
