smb.conf contains valid users = %S in [global]

Bug #131419 reported by Nick S
2
Affects Status Importance Assigned to Milestone
samba (Ubuntu)
Fix Released
High
Mathias Gug

Bug Description

Binary package hint: samba-common

In Ubuntu 7.10 (Gutsy Gibbon) as of Friday 10 August 2007, /etc/samba/smb.conf contains the following line:

valid users = %S

which is clearly intended (as per the comment) to be underneath the line:

[homes]

however, [homes] is, by default, commented out. This makes valid users = %S global, meaning that were I to name a share "share", presumably this would result in only the user "share" being allowed to access it.

The oddest thing about it is that there is not only this in the commented [homes]:

# Restrict access to home directories
# to the one of the authenticated user
# This might need tweaking when using external authentication schemes
   valid users = %S

But also this which has been present in previous versions and is not problematic:

# By default, \\server\username shares can be connected to by anyone
# with access to the samba server. Un-comment the following parameter
# to make sure that only "username" can connect to \\server\username
; valid users = %S

Hence the first is a duplicate of the second and is placed incorrectly and for seemingly no reason, causing an inability to login with the status code NT_STATUS_LOGON_FAILURE. Without it, samba operates normally - the best course of action, therefore, would be to remove it.

Related branches

Mathias Gug (mathiaz)
Changed in samba:
importance: Undecided → High
status: New → Triaged
Revision history for this message
Mathias Gug (mathiaz) wrote :

I've added a debdiff that fixes this problem. It merges the two paragraphs about valid users and comments out the valid users option.

Changed in samba:
status: Triaged → In Progress
assignee: nobody → mathiaz
Revision history for this message
Mathias Gug (mathiaz) wrote :

samba (3.0.25b-1ubuntu2) gutsy; urgency=low

  * debian/smb.conf:
    - Fix 'valid users =' option in smb.conf. LP: #131419.

 -- Mathias Gug <email address hidden> Thu, 09 Aug 2007 21:39:54 -0400

Changed in samba:
status: In Progress → Fix Released
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.