How can I enable anonymous access to a Samba share under ADS security mode?

Posted by hemp on Super User See other posts from Super User or by hemp
Published on 2010-05-24T21:48:25Z Indexed on 2010/05/24 21:51 UTC
Read the original article Hit count: 313

Filed under:

network-shares

|

samba

|

redhat

|

anonymous

I'm trying to enable anonymous access to a single service in my Samba config. Authorized user access is working perfectly, but when I attempt a no-password connection, I get this message:

Anonymous login successful
Domain=[...] OS=[Unix] Server=[Samba
3.3.8-0.51.el5] tree connect failed: NT_STATUS_LOGON_FAILURE

The message log shows this error:

... smbd[21262]: [2010/05/24 21:26:39,  0] smbd/service.c:make_connection_snum(1004)
... smbd[21262]:   Can't become connected user!

The smb.conf is configured thusly:

[global]
   security = ads
   obey pam restrictions = Yes
   winbind enum users = Yes
   winbind enum groups = Yes
   winbind use default domain = true
   valid users = "@domain admins", "@domain users"
   guest account = nobody
   map to guest = Bad User

[evilshare]
   path = /evil/share
   guest ok = yes
   read only = No
   browseable = No

Given that I have 'map to guest = Bad User' and 'guest ok' specified, I don't understand why it is trying to "become connected user". Should it not be trying to "become guest user"?

© Super User or respective owner

Related posts about network-shares

Network shares do not mount.

as seen on Super User - Search for 'Super User'
My network shares were mounting fine yesterday.. suddenly they are not. They were mounting fine for the last two weeks or however long since I added them. When I run sudo mount -a I get the following error: topsy@monolyth:~$ sudo mount -a mount error(12): Cannot allocate memory Refer to the mount… >>> More
Windows user account just for accessing network shares on a Windows 7 machine

as seen on Super User - Search for 'Super User'
I would like my Xbox (Xbmc) to access my Windows 7 shares without having Guest accounts enabled and without using my Administrator account login details. I have tried making it an account called Xbox and this works fine but the Xbox account appears on the login page for Windows. Is there a way to… >>> More
Cannot access Network Shares on Windows Server 2008 running VisualSVN Server

as seen on Server Fault - Search for 'Server Fault'
Hi, I have installed VisualSVN server on Windows Server 2008. The server is part of a domain but not the domain controller, it is just a data server and now an SVN server. VisualSVN uses port 80 and can only be access from inside the network (i do i by going to the dns name of the server). However… >>> More
Cannot browse to network shares but can ping and RDP into machines on LAN

as seen on Super User - Search for 'Super User'
I am using Windows XP SP3. I cannot browse to network shares via explorer, using machine name or IP. I can ping all machines by name and connect via RDP by name with no problem. I have changed nothing on the LAN or any network settings on any machine since it was working ok. Does anyone have any suggestions… >>> More
Leopard Network Shares and browsing are unreliable

as seen on Super User - Search for 'Super User'
I have two macs, running Leopard 10.5.8. One is the 13" MBP connected via WiFi, and the other is a 24" 2008 iMac, connected via ethernet. There are at least another 6-10 machines (windows and mac) awake on the network (with shares) at any given time, yet there are plenty of times where I cannot see… >>> More

Related posts about samba

Unable to connect to Samba printer

as seen on Ask Ubuntu - Search for 'Ask Ubuntu'
I have a headless Ubuntu 12.04 server for files and printers. It shares files via Samba just fine. However, the HP PSC-750xi connected to the server via USB is not accessible from my Ubuntu 12.04 laptop. I can browse for it in the Printing control panel, but any attempt to authenticate my ID to the… >>> More
Samba folder is gone

as seen on Ask Ubuntu - Search for 'Ask Ubuntu'
I seem to have some issues sharing folders from my Ubuntu 12.04 machine to a Win7 machine. After playing around with the settings, I decided to revert to Samba's original setting by reinstalling it: sudo apt-get purge samba sudo rm -rf /etc/samba/ /etc/default/samba sudo apt-get install samba just… >>> More
Samba on OS X 10.6.4

as seen on Server Fault - Search for 'Server Fault'
I just updated from 10.6.3 to 10.6.4, and now my Samba shares won't mount and won't allow access into the directories. In the logs, I've started to get the following errors, any idea what might have gone wrong? 2010/06/25 15:54:27, 0, pid=13848] /SourceCache/samba/samba-235.4/samba/source/passdb/secrets… >>> More
OpenLDAP and Samba, can't log onto Samba share from Windows

as seen on Server Fault - Search for 'Server Fault'
The former jackass IT-guy that I'm taking over for had a Samba share setup on a Fedora server that uses our OpenLDAP server to authenticate users who want to log in from Windows. We recently added a new employee and I jumped through the LDAP hoops to add them to the system. However, I can't seem… >>> More
Windows 7 Samba issue

as seen on Server Fault - Search for 'Server Fault'
We have a strange samba issue affecting only one user. Our samba setup is as follow : Red Hat Enterprise Linux Server release 5.4 (Tikanga) - Samba Server Samba version 3.0.33-3.14.el5 - Samba version Domain Controller WIN2008R2 Standard -… >>> More