Koozali.org: home of the SME Server

Obsolete Releases => SME Server 7.x => Topic started by: comstech on March 23, 2008, 03:58:42 PM

Title: access to i-bay with no password and not a user
Post by: comstech on March 23, 2008, 03:58:42 PM: We get computers in which we often need to backup or move files off to our server. I have not been able to work out how to access a public i-bay with out the SME requesting a username or password.
I would like to be able to simply type the ip address and share name in to start run and just land in the share ie \\192.168.1.1\general but when I do this I am prompted with a username and password logon window even thow the i-bay is marked for everyone.

I have seached and seached and it does not seem anyone has needed this as yet
Title: Re: access to i-bay with no password and not a user
Post by: e[nt]e on March 23, 2008, 04:52:22 PM: Hi comstech,

Have a look at this thread:
http://forums.contribs.org/index.php?topic=39261.0 (http://forums.contribs.org/index.php?topic=39261.0)

Niklas
Title: Re: access to i-bay with no password and not a user
Post by: comstech on March 24, 2008, 07:12:17 AM: Thanks for the post, but my problem seems to be the same as the poster of that topic and it does not seem he has an answer either. I need to be able to bring up SME 192.168.1.1 and be able to see and use a public style folder with out it asking for a user name and password. I know this is possible as my previous unix box had it working but I did not set it up

Thanks Troy
Title: Re: access to i-bay with no password and not a user
Post by: comstech on March 24, 2008, 08:33:34 AM: Ok I have seen lots and lots of people are trying to do this. I think I have sorted it
you need to make these changes to smb.conf

#guest account = guest
guest account = nobody

#security = user
security = share

#guest ok = no
guest ok = yes

[public]
comment = public
writable = yes
path = /home/e-smith/files/ibays/public/files
public = yes
guest ok = yes
guest only = yes
guest account = nobody
browsable = yes

But I now have two questions when I do a $ testparm I get the following errors
Global parameter guest account found in service section!
Server's Role (logon server) conflicts with share-level security
Should I worry about these?

Also I know I can not leave these settings in the smb.conf file, how do I move these to a template?

Thanks Troy
Title: Re: access to i-bay with no password and not a user
Post by: comstech on March 24, 2008, 10:18:56 AM: Ok for everyone else I worked out how to do the templates from the following posts

http://forums.contribs.org/index.php?topic=37202.0

http://forums.contribs.org/index.php?topic=37258.0

http://forums.contribs.org/index.php?topic=21731.0

Thanks Troy
Title: Re: access to i-bay with no password and not a user
Post by: pfloor on March 24, 2008, 04:11:43 PM: Quote from: comstech on March 24, 2008, 08:33:34 AM
Ok I have seen lots and lots of people are trying to do this. I think I have sorted it
you need to make these changes to smb.conf

...

#security = user
security = share

...

NOTE: (Maybe this should even be a WARNING!) Changing the security model from "user" based to "share" based has not been tested on SME (AFAIK). This is a major change in samba security and may or may not be secure with the current samba settings in SME.

Share based security may have advantages over user based security but until a full audit on the security implications by changing SME to share based with the current samba settings has been done (and any necessary adjustments have been figured out), it is highly advised that you don't use this setting in a production environment.
Title: Re: access to i-bay with no password and not a user
Post by: erroneus on April 04, 2010, 11:04:40 PM: Just for the record, I have applied the "security = share" thing and it works... but I lost the authentication for other shares. Or more correctly, authentication is just sort of screwed up. (I also added "guest ok = yes" as well.)

I am using SME 7.x fully updated and installed the advanced samba stuff.

My purpose for wanting to do this is so that my Argossy HV335T media box can access files form my SME server without too much trouble. That part is working...but it breaks too many other things.

Anyone know if this is possible in SME 8.x? I was testing it before but not with this purpose in mind. And the time that SME8 has been in beta has been frustrating to say the very least.
Title: Re: access to i-bay with no password and not a user
Post by: janet on April 05, 2010, 02:33:08 AM: Dear All

Anonymous read only access to a Web enabled ibay has always been possible via
a browser
http://yourserverdomain/ibayname

No need to introduce security issues by changing samba settings.
Title: Re: access to i-bay with no password and not a user
Post by: erroneus on April 05, 2010, 02:38:40 PM: The http method is not one that will work with my media box. It needs to be SMB.
Title: Re: access to i-bay with no password and not a user
Post by: Stefano on April 05, 2010, 05:12:13 PM: well.. you can't have everything :-)

you have to choose between using your media box and using SME as it's designed

I think that such a feature will not be on SME 8