Quoting Michal Suchanek <hramr...@centrum.cz> (michal.sucha...@ruk.cuni.cz): > Package: samba-common > Version: 2:3.2.5-4lenny2 > Severity: normal > File: smb.conf.5 > > > Hello > > There is a section on user validation in the smb.conf(5) man page. This > ends with point 6: if the user supplies the guest user name the user is > validated regardless of password. > > However, for setting up guest shares that are reasonably usable it is > required that user names are mapped to the guest account. > > Specifically, the security should be set to share or guest map to > Invalid User.
Sorry, I don't get your point. smb.conf: [global] workgroup = TEST security = user [public] browseable=yes comment=Public guest ok = yes path=/var/tmp/samba-test r...@mykerinos:~# smbclient -N //localhost/public Anonymous login successful Domain=[TEST] OS=[Unix] Server=[Samba 3.3.4] smb: \> dir . D 0 Thu Apr 23 23:40:48 2009 .. D 0 Wed May 6 05:32:32 2009 foo 5 Fri Apr 17 07:58:37 2009 bar 0 Tue Apr 21 21:12:29 2009 tmpdir0 D 0 Thu Apr 23 10:23:43 2009 tmpfile1 0 Thu Apr 23 10:23:45 2009 10filesdir D 0 Thu Apr 23 10:27:54 2009 testfile 0 Thu Apr 23 23:40:17 2009 testfile2 0 Thu Apr 23 23:40:48 2009 60675 blocks of size 32768. 28676 blocks available So, no need to specify "security = share" or "map to guest = Bad User". In don't see any bug in there....
signature.asc
Description: Digital signature