Have set up a Windows-domain-integrated samba server. Sharing files is working pretty well but failing to set up a guest share as long the
security is set to
ads. This is a shortened version of the configuration containing a share free to a certain domain group and a non working share for non authenticated users. I've attached the smb.conf for reference.
[global] workgroup = MYDOMAIN dns proxy = no netbios name = myshare clustering = yes security = ads realm = mydomain.com password server = 220.127.116.11 winbind enum users = yes winbind enum groups = yes winbind cache time = 10 winbind use default domain = yes client use spnego = yes client ntlmv2 auth = yes encrypt passwords = yes restrict anonymous = 2 domain master = no local master = no preferred master = no os level = 0 idmap uid = 100000-109999 idmap gid = 100000-109999 log file = /var/log/samba/log log level = 3 max log size = 1000 syslog = 0 panic action = /usr/share/samba/panic-action %d server role = standalone server passdb backend = tdbsam unix password sync = yes pam password change = yes map to guest = bad user guest account = nobody [public] browsable = yes create mask = 0666 directory mask = 0777 writeable = yes path = /share/public guest ok = yes [temp] browsable = yes valid users = root, @"share users" create mask = 0666 directory mask = 0777 writeable = yes path = /share/temp guest ok = no
guest ok = yes does not seem to have any effect (temp is working as expected writable by root and users of the group). The user
nobody which should be mapped to has the rwx right's for share folder.
So what is also needed to grant guest access to a specific share when security generally is