Bug 7653 - When SMB2 is on, Windows 7 clients can not connect as guest to a share
When SMB2 is on, Windows 7 clients can not connect as guest to a share
Status: RESOLVED FIXED
Product: Samba 3.6
Classification: Unclassified
Component: SMB2
unspecified
Other Windows 7
: P3 major
: ---
Assigned To: Jeremy Allison
Samba QA Contact
:
Depends on:
Blocks:
  Show dependency treegraph
 
Reported: 2010-08-27 07:46 UTC by Francois Lepretre
Modified: 2010-11-01 13:55 UTC (History)
1 user (show)

See Also:


Attachments
sample case : log.nmb (863.60 KB, text/plain)
2010-08-27 07:48 UTC, Francois Lepretre
no flags Details
sample case : log.smbd (1st part) (5.07 KB, text/plain)
2010-08-27 07:49 UTC, Francois Lepretre
no flags Details
sample case : log.smbd (2nd part) (114.01 KB, text/plain)
2010-08-27 07:50 UTC, Francois Lepretre
no flags Details
sample case : log of Windows 7 client (5.12 KB, application/octet-stream)
2010-08-27 07:51 UTC, Francois Lepretre
no flags Details
sample case : log of Windows 7 client (same one) (60.22 KB, text/plain)
2010-08-27 07:52 UTC, Francois Lepretre
no flags Details
sample case : smb.conf (569 bytes, text/plain)
2010-08-27 07:52 UTC, Francois Lepretre
no flags Details
Fix I've applied to master and v3-6-test (705 bytes, patch)
2010-08-27 17:29 UTC, Jeremy Allison
no flags Details

Note You need to log in before you can comment on or make changes to this bug.
Description Francois Lepretre 2010-08-27 07:46:33 UTC
Steps to reproduce :

- in smb.conf, set 'security = share'
- enable SMB2 : 'max protocol = smb2'
- define a share with guest access ( 'guest ok = yes', 'browseable = yes') 
(see below for a full smb.conf)

- with a Window 7 client, try to browse your server ( \\samba_ip_address  in the explorer)
-> it fails to connect. Same thing when trying directly the share (\\samba_ip_address\share_name )
- try the same access from an XP machine -> it works fine

- final test : comment out 'max protocol' line in smb.conf, relaunch samba -> Windows 7 can connect now !


Example of smb.conf :
-------------------------------------
global]
   workgroup = WIZZ
   server string = Prod1bis File Server %v
   log file = /var/log/samba/log.%m
   max log size = 5000
   max protocol = smb2
   log level = 10
   security = share
   encrypt passwords = yes
   dns proxy = no
   guest account = root
   load printers = no
   printing = bsd
   printcap name = /dev/null
   disable spoolss = yes
   getwd cache = yes

[partage]
   comment = Partage
   browseable = yes
   writable = yes
   path = /space/partage
   guest ok = yes
-------------------------------------
Comment 1 Francois Lepretre 2010-08-27 07:48:46 UTC
Created attachment 5935 [details]
sample case :  log.nmb
Comment 2 Francois Lepretre 2010-08-27 07:49:30 UTC
Created attachment 5936 [details]
sample case :  log.smbd  (1st part)
Comment 3 Francois Lepretre 2010-08-27 07:50:01 UTC
Created attachment 5937 [details]
sample case :  log.smbd  (2nd part)
Comment 4 Francois Lepretre 2010-08-27 07:51:26 UTC
Created attachment 5938 [details]
sample case : log of Windows 7 client
Comment 5 Francois Lepretre 2010-08-27 07:52:08 UTC
Created attachment 5939 [details]
sample case : log of Windows 7 client   (same one)
Comment 6 Francois Lepretre 2010-08-27 07:52:46 UTC
Created attachment 5940 [details]
sample case :  smb.conf
Comment 7 Jeremy Allison 2010-08-27 17:29:23 UTC
Created attachment 5943 [details]
Fix I've applied to master and v3-6-test

This fakes up "security = share" for SMB2 by mapping it to "security=user", "map to guest = Bad User". It's enough not to break people's old setups.

Jeremy.
Comment 8 Jeremy Allison 2010-11-01 13:55:09 UTC
Closing this as fixed. No review feedback on the patch.
Jeremy.