Andrew Bartlett wrote: > > [EMAIL PROTECTED] wrote: > > > > Dear all, > > > > I find that for smbpasswd to work it is necessary to include "nobody" (or the > > guest account) in the "valid users" list under section [Global]. This > > requirement is not mentioned in documentations (or I've overlooked). Is this > > absolutely necessary ? > > For a number of things, yes. Many basic functions of a Samba server - > partiulcarly as a PDC or master browser - must occour as guest. This > setting is really only of value on a per-share basis.
To clarify this further, when smbpasswd is invoked as a normal user, it does not modify the smbpasswd file directly. Instead, (and to avoid all the issues surrounding setuid root binaries) it contacts the local samba server on 127.0.0.1. The remote 'change password' call is invoked by logging into the server as guest - allowing expired passwords etc to be changed. Andrew Bartlett -- Andrew Bartlett [EMAIL PROTECTED] Manager, Authentication Subsystems, Samba Team [EMAIL PROTECTED] Student Network Administrator, Hawker College [EMAIL PROTECTED] http://samba.org http://build.samba.org http://hawkerc.net -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
