Restrict Anonymous

2003-03-06 Thread Marc Kaplan
Hello list, Has anybody coded some sort of workaround for joining domains with RestrictAnonymous set? The typical behavior I see is for NT4 domains we're able to look up sequence, but never enumerate users and groups. For ADS domains, it seems that even looking up sequence from the domain fails.

Re: Restrict Anonymous

2003-03-06 Thread Richard Sharpe
On Thu, 6 Mar 2003, Marc Kaplan wrote: Hello list, Has anybody coded some sort of workaround for joining domains with RestrictAnonymous set? The typical behavior I see is for NT4 domains we're able to look up sequence, but never enumerate users and groups. For ADS domains, it seems that

RE: Restrict Anonymous

2003-03-06 Thread Marc Kaplan
PROTECTED]' Subject: Re: Restrict Anonymous On Thu, 6 Mar 2003, Marc Kaplan wrote: Hello list, Has anybody coded some sort of workaround for joining domains with RestrictAnonymous set? The typical behavior I see is for NT4 domains we're able to look up sequence, but never enumerate users

RE: Restrict Anonymous

2003-03-06 Thread MCCALL,DON (HP-USA,ex1)
:52 To: '[EMAIL PROTECTED]' Subject: Restrict Anonymous Hello list, Has anybody coded some sort of workaround for joining domains with RestrictAnonymous set? The typical behavior I see is for NT4 domains we're able to look up sequence, but never enumerate users and groups. For ADS

[patch] winbindd: try to fix 'restrict anonymous=1'

2003-01-20 Thread Martin Pool
hp CR1501 and friends This patch tries to make winbindd cope with the security option 'restrict anonymous=1' on NT4 and W2kS. When this option is set, the DC disallows SAMR calls on unauthenticated connections, but does allow LSA translations between names and sids. Obviously winbindd can't

Re: NULL sessions - Listing shares anonymously - restrict anonymous

2002-11-17 Thread Andrew Bartlett
On Fri, 2002-11-15 at 19:40, Tim Potter wrote: On Fri, Nov 15, 2002 at 07:32:06PM +1100, Andrew Bartlett wrote: In the Samba HEAD and 3.0 branches however the parameter behaves more like the RestrictAnonymous registry setting. Only 'restrict anonymous = 1' is currently supported

Re: NULL sessions - Listing shares anonymously - restrict anonymous

2002-11-16 Thread Christopher R. Hertel
Yannick Mercier wrote: : Unfortunately, Ill have to back out to samba 2.2 because I'm using this samba server as a PDC also, and when I logon with my WinXP workstation, the PC reboots during Loading desktop settings I guess its a bug in the alpha version of samba If the XP system reboots

Re: NULL sessions - Listing shares anonymously - restrict anonymous

2002-11-15 Thread Andrew Bartlett
On Fri, 2002-11-15 at 15:08, Tim Potter wrote: On Thu, Nov 14, 2002 at 08:50:47PM -0500, Yannick Mercier wrote: I am running 2.2.5 and I would like to know if the restrict anonymous as been implemented correctly, as it was supposed to behave from the start, in order to deny ALL

Re: NULL sessions - Listing shares anonymously - restrict anonymous

2002-11-15 Thread Yannick Mercier
I installed the samba-3.0alpha20 (latest I think) and restrict anonymous = 1 works for denying the shares Listing from non-authentified users. As what Ive read, the restrict anonymous = 2 is not implemented yet, but when it will be, it is supposed to deny all rpc calls, which will be great

Re: NULL sessions - Listing shares anonymously - restrict anonymous

2002-11-14 Thread Tim Potter
On Thu, Nov 14, 2002 at 08:50:47PM -0500, Yannick Mercier wrote: I am running 2.2.5 and I would like to know if the restrict anonymous as been implemented correctly, as it was supposed to behave from the start, in order to deny ALL anonymous connections as stated in the man : When

taking back the 'restrict anonymous' parameter

2002-05-30 Thread Tim Potter
I'm thinking about taking back the restrict anonymous parameter and using it to do Good Things. Previously in HEAD and currently in 2.2 it stops people connecting to shares anonymously but I think Mr Bartlett removed it because it was either buggy or didn't do anything useful. I propose

Re: taking back the 'restrict anonymous' parameter

2002-05-30 Thread Tim Potter
On Thu, May 30, 2002 at 04:37:59PM -0700, Jeremy Allison wrote: I propose that this parameter act like the RestrictAnonymous registry setting, i.e it prevents anonymous access to the SAMR pipe and anonymous access to the NetShareEnum RPC when set to 1. When set to 2, it disallows