What are the ramifications of changing security = share from sercurity = ads ? I was using security = domain before. Looking at the docs/manpages I'm unclear how other shares will be affected (for the sections that match UNIX == Windows for IT staff). From reading the manpage, it sounds like if guest ok = yes then it skips checking, but does it fall back to ADS if there's no guest ok directive?
-- Jason -----Original Message----- From: John H Terpstra <[EMAIL PROTECTED]> To: Jason McCormick <[EMAIL PROTECTED]> Cc: [EMAIL PROTECTED] Date: Thu, 4 Mar 2004 22:28:26 +0000 (GMT) Subject: Re: [Samba] Samba 3 "public" Access > On Thu, 4 Mar 2004, Jason McCormick wrote: > > > Hello all, > > > > I've upgraded to Samba 3.0 and I'm having problems replicating some > > behavior I relied on in Samba 2.2. Here's my scenario: I have a > > Windows Active Directory domain. All users have a windows login > > account. No users have a "UNIX" login account on any of my Linux > > boxes. With Samba 2.2 I could specify a share like so: > > > > [public] > > path=/path/to/public/files > > public = yes > > writable = no > > force user = nobody > > Add: > guest ok = yes > > And in [globals] set: > security = share > > - John T. > > > > > And have any user that was logged into their Windows workstation > browse > > to \\SERVER and then be able to open the "Public" folder (i.e. the > > \\SERVER\PUBLIC location). If public=yes was not set, then you could > > specify Windows->UNIX mapping in smbusers, etc.. > > > > However with Samba 3.0, a Windows user with no UNIX account is unable > to > > even open \\SERVER. They are immediately prompted for a login and a > > password. The Samba log shows: > > > > [2004/03/04 17:00:28, 1] smbd/sesssetup.c:reply_spnego_kerberos(218) > > Username tjohnson is invalid on this system > > > > The few IT workers with 1:1 Windows to Linux user account mappings > work > > fine so the account logins are happening successfully. I need to get > > back to a state where Windows users with no UNIX account can see > > "public" type folders. Any help? > > > > Much appreciated!! > > > > -- Jason > > > > > > -- > John H Terpstra > Email: [EMAIL PROTECTED] -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
