Topic: Ibay access for Guests - no logon required

[john56]

Hi,
i need to create a ibay (or better a sharefolder with the contrib) with write and execute permissions for computers from another domain without ask to log in.

I try this method from https://forums.koozali.org/index.php/topic,44889.msg216789.html#msg216789 (sme 7) with no success.

SME 10.1
A part of my smb.conf with add  "guest ok = yes" from the method above.
[nicspeed]
comment = nicspeed
path = /home/e-smith/files/ibays/nicspeed
read only = no
writable = yes
printable = no
inherit permissions = yes
create mode = 0664
guest ok = yes

I've tried with a virtual machine "linux mint" and this is ok with nautlius gui to give theses permissions on a folder.

Thanks for your help.

[ReetP]

I need to create a ibay..... with write and execute permissions for computers from another domain without ask to log in.

First question. Why would you want to do that?

Write and Execute?

You do understand it is very insecure?

Perhaps if we understand your needs we can help you.

[john56]

Hi,
i've created a batch (.bat) to know the speed of the auto negociation for the network cards.
(i have to investigate why sometines its 10 Mbits/s, sometimes 100, or 1000 about 300 computers)
This batch needs to write in a folder to see results (.txt) . It's ok with the network from sme but not from outside.
"Everyone" rights are for users from this network not the others. So i need to give rights to guest without account.

[ReetP]

Hi,
i've created a batch (.bat) to know the speed of the auto negociation for the network cards.
(i have to investigate why sometines its 10 Mbits/s, sometimes 100, or 1000 about 300 computers)

OK. Obvious questions - is all your networking equipment and cabling Gigabit compatible? Are you sure?

This batch needs to write in a folder to see results (.txt) . It's ok with the network from sme but not from outside.

Hmmm OK.

"Everyone" rights are for users from this network not the others. So i need to give rights to guest without account.

You do know that this is a massive security hole you are blowing in your server?

Someone else may chip in with a more sensible method than this as I am not sure it is a very good way to do it.

[john56]

I understand for security advertisment.  That's why i use a vm for the moment
But why not use a sme network share i "open" just to launch my script sometimes.

[Jean-Philippe Pialasse]

This batch needs to write in a folder to see results (.txt) . It's ok with the network from sme but not from outside.
"Everyone" rights are for users from this network not the others. So i need to give rights to guest without account.

you do not need guest access, you need to add access to the other network.

your manual configured linux mint was not taking into account the network filtering, which is also a security issue.

[john56]

jpp ! you haven't read (you've told me enough for me to be able to tell you  )
The other network have already access this share, but with login ...

[Jean-Philippe Pialasse]

jpp ! you haven't read (you've told me enough for me to be able to tell you  )
The other network have already access this share, but with login ...

your previous quote says the opposite.
if the other network has access then you just need to have the connected user to have the write access on the needed folder, not a guest access that would allow any script kiddies in the school to mess with your results or to full your disk to 100% which could stop a few services on your server. 

[john56]

Yes jpp, the second quote is less clear thant the first one where i explain it

My script is launched with nobody login, it's more easy to do it in a school because all computers are not always used.
It's launched manually when i decide.

That's the machine account who write the information in the folder (i see it on the file .txt
That's why i want to use guests in my case.

[ReetP]

Take JPs advice.

You are asking for a mountain of problems (kids......  ), and then you will be back here asking for a fix.....

Fix the problem properly. Don't bodge around it.

[john56]

Ok, i always follow jpp since 2003 ... 
I just keep linux mint in vm for that and i turni it on only to launch that script.

Thanks to everyone.