[cifs-discuss] Solaris CIFS equivalent toSAMBA guest ok = yes

[David Collier-Brown]

  I'd suggest that as long as the users log on to the Windows or AD domain,
then CIFS will use their windows authentication tokens to let them on
to CIFS shares.  This is what one does with Samba as normal practice.
  If this isn't the case, something weird is happening...

--dave

Tim Thomas wrote:
> I understand why you did it this way...but I do ISV 
> testing/certification work and this will make Solaris CIFS harder to use 
> for at least one of my ISV's when compared with SAMBA based solutions I 
> have tested and our 5320 NAS (and other NAS appliances probably) which 
> allow unauthenticated access.
> 
> It is not a show stopper by any means...but it makes things more 
> complicated.
> 
> It would be nice to give users the choice of unauthenticated access.
> 
> Afshin Salek said the following :
> 
>> In the old share-mode, users could see the list of shares
>> on a server and each share could have an optional read-write
>> or read-only password. In user-mode, users have to be
>> authenticated before they can see the list of shares.
>>
>> Solaris CIFS, intentionally does not provide the old share-mode
>> because of its inherent weak security. It only provides the
>> user-mode which means everyone should be authenticated before
>> they can see the shares exported by the server.
>>
>> Afshin
>>
>> David Collier-Brown wrote:
>>  
>>
>>> cifs-discuss-request at opensolaris.org wrote:
>>>    
>>>
>>>> From: Tim Thomas <Tim.Thomas at Sun.COM>
>>>> Thanks Jeff
>>>>
>>>> I have been told that we do not support access to shares by 
>>>> unauthenticated users.
>>>>
>>>> Rgds
>>>>
>>>> Tim
>>>>       
>>>
>>>   Guest OK in Samba conveniently reproduces the very old "public 
>>> share" behavior of SMB 0.1 on a token-ring (;-))
>>>
>>>   Perhaps a better question is how do we create a share
>>> in CIFS which is easily found by everyone and has rwx +t
>>> permissions for them?
>>>
>>>
>>> --dave
>>>     
>>
>>
>> _______________________________________________
>> cifs-discuss mailing list
>> cifs-discuss at opensolaris.org
>> http://mail.opensolaris.org/mailman/listinfo/cifs-discuss
>>   
> 
> 

-- 
David Collier-Brown            | Always do right. This will gratify
Sun Microsystems, Toronto      | some people and astonish the rest
davecb at sun.com                 |                      -- Mark Twain
(905) 943-1983, cell: (647) 833-9377, (800) 555-9786 x56583
bridge: (877) 385-4099 code: 506 9191#