On Thu, 2005-02-24 at 21:20 -0600, Steve Cohen wrote: > Steve Cohen wrote: > > OK, let me ask this question another way, short and simple: > > In a security=SHARE samba network, is there any way for a computer > outside the workgroup to connect to and use (not talking about "see") a > printer shared by samba on that network? > > I've been reading logs, manpages, books, nothing I've seen deals with > that situation. This is a simple home network to which I want to > occasionally bring a company-owned laptop. > > Please don't answer with questions about drivers, etc. A driver has > been installed on the outside computer (a Windows 2K laptop owned by my > employer). I have administrative rights on that laptop. > > The error is "Access Denied". How can Samba be configured to get around > this given that security=SHARE is required? > > I just can't believe this is that hard. What am I missing? ---- If I recall correctly - you are using Red Hat 9 and samba 2.2.x
It's been a long time since I used 2.2.x and I've never used security = share. I have even noticed Gerry exclaiming that he wished that it were never made available. My understanding is that security = share represents a mode like windows 98 file & printer sharing where each share represents a different password/login. You problem would appear that your laptop is sending DOMAIN\username to the samba computer as login credentials and that is your problem. I would expect that if you had logging set up high enough, you would discover what is happening. Anyway, I was trying to encourage you to send the -U USERNAME%PASSWORD thinking that it would use those credentials instead of the DOMAIN \username since your computer is joined to a work domain. You could probably map the user DOMAIN\username to a 'local' user - see /etc/samba/smbusers for the concept. I know that Gerry has mentioned an alternative of map guest = bad user for 'guest' access but that has been with reference to samba 3 and I have no idea if that works for samba 2.2.x and have never done it myself. This is a question that comes up once a week and is certainly findable in the archives - probably in documentation for Samba 2.2.x too. In the end, I'm not convinced that security = share is all that different from security = user for your purposes. I would imagine that many people on this list are likewise using samba 3.x and their recollections of 2.2.x may be as hazy as mine. I do recall that 'Access Denied' was a common feature of samba 2.2.x when the user wasn't a member of the 'printer admin' group and I am sure that I have mentioned it previously - this message does not necessarily mean that you can't print to it. There should be logs in /var/log/samba/log.MACHINE_NAME or /var/log/samba/log.IP_ADDRESS_OF_LAPTOP that might show the problem with credentials. Craig -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
