On Tue, 2002-11-12 at 13:16, John E. Malmberg wrote: > Andrew Bartlett wrote: > > > Because the Guest account is a 'well known' account, and as such > > should have a fixed RID. This is enforced via the passdb backend > > because to do otherwise would have nasty consequences when mapping > > back and forth between uids and RIDs. (We are working hard to ensure > > that there is only one point at which uids and RIDs are mapped, and > > currently this is in the passdb.) > > On a related note, does SAMBA still use the guest account in place of > the (unkown) internal user for enumerating shares? > > An NT client can not browse a SAMBA server with the guest account > disabled, but having a guest account enabled is not required on an NT > account to do the same thing.
A Samba server must have a guest account, and (now) it must have RID 501. I'm not sure the guest account is 'disabled' on NT, it is just that the groups it is given membership of changes. IE on NT, the restrictanonymous setting can remove 'guest' from domain users, and 'everyone'. Andrew Bartlett -- Andrew Bartlett [EMAIL PROTECTED] Manager, Authentication Subsystems, Samba Team [EMAIL PROTECTED] Student Network Administrator, Hawker College [EMAIL PROTECTED] http://samba.org http://build.samba.org http://hawkerc.net
signature.asc
Description: This is a digitally signed message part
