BAD PROBLEM: All users can access all shares! 3

[prophotodx]

I am setting up a server under FC3 with the stock version of Samba. The problem I am having is that all users are able to access all shares. This is bad and not intended. I am currently logged in as studiopc and I am able to access the crsuser shares. My smb.conf is below. PLEASE HELP! THANX!


[global]
workgroup = VISTECH
netbios name = KINGKONG
server string = KingKong File Server
interfaces = eth0, eth1, lo
security = user
bind interfaces only = yes
log file = /var/log/samba/%m


[LANPublicFiles]
path = /mnt/raid/lanpublicfiles/
comment = LAN Public Files
guest ok = Yes
read only = No
force user = guest
force group = guest
null passwords = yes

[Databases]
path = /mnt/raid/Databases/
force user = studiopc
comment = VTIDatabases
read only = No


[CRSDatabase]
path = /mnt/raid/CRSDatabase/
read only = no
force user = crsuser
comment = CRSDatabase


[VTIDocuments]
path = /mnt/raid/VTIDocuments/
read only = no
force user = studiopc
comment = VTIDocuments

DBX
(Try it my way, it might work...)

 

[smah]

Get rid of all the 'force user' lines. For each of the share's you're telling samba to force all connections to be that user (which it seems will likely have full write permissions).

 

[prophotodx]

That does not seem to have solved the problem. XP pro still does not ask me for un or pw.



DBX
(Try it my way, it might work...)

 

[cyoung]

look up the "valid users =" command, and then assign your users to groups

[CRSDatabase]
path = /mnt/raid/CRSDatabase/
read only = no
valid users = @crsusers
force user = crsuser
comment = CRSDatabase

Hope this helps

 

[prophotodx]

As soon as I added valid users = crsuser or invalid users = studiopc I get forced to Guest account.

(I do not need groups, I only have these two users that use the same login throughout the two offices that are sharing this server)

When I go to one of the CRS shares from an XP machine it will not let me type in a username. It forces the username to KingKong/Guest and asks for a password. How is this fixed?



DBX
(Try it my way, it might work...)

 

[PHV]

In the XP machine set the following registry value to 0 (ZERO) instead of 1 (ONE):
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\forceguest

Hope This Helps, PH.
Want to get great answers to your Tek-Tips questions? Have a look at FAQ219-2884 or FAQ181-2886

 

[smah]

Have you created samba users using smbpasswd?

 

[prophotodx]

NEVERMIND: I was stupid and forgot that I had changed the "security =" to "share" and not "user". Everything is peachy, thanx for your help!!



DBX
(Try it my way, it might work...)