How to enable guest access to a Solaris CIFS share

A new share property, guestok, has been added (snv_118) to control whether or not guest access is allowed on a share.
If guestok is set to true, guest access will be allowed on the specified share. If the guestok share property is not defined or
is set to false, guest access will not be permitted on that share. By default, the guestok property is not defined, i.e. guest
access is disabled by default.

Examples to set guestok using sharemgr(1M) and zfs(1M):

# sharemgr set -P smb -p guestok=true -r myshare mygroup
# zfs set sharesmb=name=myshare,guestok=true mydataset

When a user attempts to connect to an SMB server, the request is interpreted as a guest connection if an account name is
not specified or the specified user account does not exist. Guest connections are not authenticated except when the guest
account has a password (more details below). Windows systems typically use a predefined local account called Guest to
represent guest connections, although this account can be renamed. On Solaris, the system administrator can define an
idmap name-based rule to map Guest to any local Solaris username, such as guest or nobody. For example:

# idmap add winname:Guest unixuser:guest

If the local account has a SMB password in /var/smb/smbpasswd the guest connection will be authenticated against
that password. Any connection over SMB made using an account that maps to the local guest account will be designated as
a guest connection. In the absence of an idmap rule for Guest, an ephemeral ID will be generated for this Windows account
by idmap service.

Comments:

Great! It was the only reason for using samba instead of cifs on my home fileserver.

Posted by pepelac on August 07, 2009 at 12:12 AM PDT #

This recipe to enable the guest account doesn't work as of OpenSolaris snv_124. Is there a way to increase log verbosity or debug the built-in server?

BTW, doing web searches to get information about the Sun SMB/CIFS implementation is difficult. Sun should have chosen a unique name for their implementation because "smb" or "smbs" or "smbd" were all already used by other products.

Posted by dajhorn on October 11, 2009 at 11:31 AM PDT #

post any questions/problems about the product in cifs-discuss@opensolaris.org

Posted by guest on October 21, 2009 at 06:12 AM PDT #

Post a Comment:
  • HTML Syntax: NOT allowed
About

Afshin Salek

Search

Categories
Archives
« April 2014
SunMonTueWedThuFriSat
  
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
   
       
Today
Feeds