Bug 13966 - account "nobody" become hidden guest
Summary: account "nobody" become hidden guest
Status: RESOLVED INVALID
Alias: None
Product: Samba 4.1 and newer
Classification: Unclassified
Component: File services (show other bugs)
Version: 4.8.3
Hardware: All All
: P5 normal (vote)
Target Milestone: ---
Assignee: Samba QA Contact
QA Contact: Samba QA Contact
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2019-05-24 07:22 UTC by tbskyd
Modified: 2020-12-23 14:02 UTC (History)
0 users

See Also:


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description tbskyd 2019-05-24 07:22:23 UTC
Hi:
   I am using rhel 7.6. the guest account of samba is default "nobody" user.
my ftp service use "nobody" account. I want a simple samba share with ftp. so both ftp/samba service will use nobody account to read/write files. I create user account for samba. and smb.conf like below:

==============================================
[global]
        security = user
        guest account = nfsnobody

[ftp]
        path = /share/ftp
        read only = Yes
        force user = nobody
        force group = nobody
===============================================

the ftp folder is owned by nobody with "0700" permission.

I change samba guest account to "nfsnobody" and hope now "nobody" become a normal unix account. but when user login, they can not access the folder with "0700" permission owned by nobody. I need to change the folder to "0755", or "force user = root" to access the folder.
Comment 1 Rowland Penny 2020-12-23 14:02:01 UTC
OK, by default, 'nobody' is the guest user, but it has been changed to 'nfsnobody'. This means that when a guest user tries to access the share, it is as 'nfsnobody' and the directory permissions only allow 'nobody' to connect. When the permissions where changed to '0755', this allowed 'nfsnobody' to access the share via 'others'. Not sure where 'force user' came into it, as this only takes affect once access is allowed.

This was not a bug, it was a misconfiguration, so closing.