How to make samba to NOT ask for password

Discussion in 'Linux Networking' started by Ignoramus30238, Apr 15, 2008.

  1. I have a ubuntu based server and a windows client. I have some SMB shares
    that I want to be read only and available without password (for anyone
    coming from legitimate IPs).

    My issue is that the ubuntu server insists on authenticating the user,
    even for read only shares. How can I make it acept anyone, without

    NFS works great for linux clients though.

    Ignoramus30238, Apr 15, 2008
    1. Advertisements

  2. Have you tried "guest ok = yes"?
    Josef Moellers, Apr 15, 2008
    1. Advertisements

  3. Yes, at share level.

    Ignoramus15568, Apr 15, 2008
  4. I recall that some registry entry is required for this, but can't
    remember which.
    Maybe this triggers someone else's mind.
    Josef Moellers, Apr 15, 2008
  5. Registry entry??????

    Ignoramus15568, Apr 15, 2008
  6. Yes, ISTR that I had to tell Windows on the client that *a* server *may*
    be satisfied with any user name and no password.
    Else Windows will demand some password to connect to the share although
    this is not needed.

    That was some time ago that I had to do that: W98SE ...
    Haven't been using Windows a lot since then.

    Josef Moellers, Apr 15, 2008
  7. Some more information from my investigation. If I connect to that
    samba server using smbclient, from a Linux box, smbclient asks me for
    a password. It lets me in if I hit ENTER and therefore submit a blank
    for the password.

    However, Windows does ask for a username and password.

    Ignoramus15568, Apr 15, 2008
  8. Ignoramus30238

    Larry Finger Guest

    I have a similar setup with an openSUSE server and Windows clients. My
    share definition section has the following:

    force user = usamba
    force group = gsamba
    read only = No
    guest ok = Yes
    nt acl support = No

    Note that gsamba and usamba are a special group and user created just
    for this purpose.

    Larry Finger, Apr 15, 2008
  9. Thanks. I think that force user and force group are the relevant
    statements here. I will try it and report tonight.

    Ignoramus15568, Apr 15, 2008
  10. Ignoramus30238

    Roger Blake Guest

    I recently set up a Ubuntu/samba server this way, essentially mimicing
    Windows "simple file sharing." It works through a "guest" account that
    was created for this purpose, with no Samba password, but it should work
    just as well using the "nobody" account for guest access. Setting readonly
    for the files is just a matter of setting appropriate permissions.

    Here is the smb.conf file, you may need to modify details for your own

    # Samba server configuration for "simple" file sharing


    ; For debugging problems set to 2 or 3
    debug level = 1

    ; Basic server settings
    netbios name = SERVER1
    workgroup = WORKGROUP
    server string = Samba Server

    ; we should act as the local master browser
    os level = 64
    preferred master = yes
    local master = yes

    ; security settings
    security = share
    guest account = guest

    ; Oplocks are more trouble than they're worth...
    kernel oplocks = no
    oplocks = no
    level2 oplocks = no

    ; use encrypted passwords
    encrypt passwords = yes

    ; Samba log files
    log file = /var/log/samba/log.%m
    max log size = 100

    ; Password database
    passdb backend = tdbsam:/usr/local/samba/lib/passdb.tdb

    ; Case Preservation
    preserve case = yes
    short preserve case = yes
    default case = upper
    case sensitive = no

    ; Printing
    load printers = yes
    printing = cups
    printcap name = /var/run/cups/printcap

    # Shared files (read/write)
    comment = "Shared files"
    path = /home/SHARED
    valid users = guest
    public = no
    guest ok = yes
    browseable = yes
    writeable = yes
    force group = users
    create mode = 0770
    force create mode = 0770
    directory mask=1777
    directory mode = 0770
    force directory mode = 0770
    Roger Blake, Apr 15, 2008
  11. Roger thanks. I think that guest account and security settings are
    what I need.

    I do plan on having one read write share, that would belong to one
    specific user, but that should not be a problem, I think.

    I saved your post and will try tonight.

    Ignoramus15568, Apr 15, 2008
  12. Ignoramus30238

    Jurgen Haan Guest

    Back when we were still using a windows domain, I used to change
    registry on the new XP workstations to skip authentication, but I think
    it's machine authentication, and not so much user authentication (for


    Not sure if that is what you're looking for.
    Jurgen Haan, Apr 16, 2008
  13. No. I am done. Everything works now. I had to specify:

    guest account = sambauser
    security = share

    and create a fake user sambauser with /bin/false as shell. I am very

    There are read only shares. So I could use a real account, but out of
    abundance of paranoia, I created a fake user, and ALSO made shares
    read only.

    Ignoramus12441, Apr 16, 2008
    1. Advertisements

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments (here). After that, you can post your question and our members will help you out.