> All other system users will be allowed in, if they have a valid password
> when the smbpasswd is generated. I don't really see what's the need
> to have admin users like gdm, sshd, bin, daemon, sys, or identd (some
> of those are created by packages and are not default system users) allowed
> access through SMB. Granted, they don't have a valid password in most
> systems but it might be better off, just in case, to improve the postinst
> so that only local users (i.e. uid over FIRST_UID as defined in adduser.conf)
> are added to the smbpasswd file. 
> 
> That could be a debconf question if the user asked to automatically generate
> the smbpasswd file. Something like : "Do you want to add the admin users to
> smbpasswd?" (low priority defaulting to 'no') 


My own opinion: I agree with Javier on the main idea of the bug
report. However, I don't think that the system users automatic
addition deserves a debconf question. I really see no point in
allowing system users to have a SMB "account" in a default setup
(which is was the automatically ge)nerated smbpasswd file is).

So I think we should keep it simple and just remove system users from
the list.

Be aware that adduser is not necessarily installed on all systems, so
a backup value (1000 probably) for the lowest UID should probably be used.




-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Reply via email to