Posts Tagged samba security

One of the easiest way to do so is by changing ‘security=user’ to ‘security=share’ in global configurations of Samba in /etc/samba/smb.conf. But this raises security concern in case if many shares could have restricted access. Samba maps Windows ‘guest’ account to Linux’s ‘nobody’ account so this is how I enabled it.

Added nobody’s account but seemed it was already there!

[root@ToughGuy ~]# useradd -s /sbin/nologin nobody
useradd: user nobody exists
[root@ToughGuy ~]# grep nobody /etc/passwd
nobody:*:99:99:Nobody:/:/sbin/nologin
nfsnobody:!!:65534:65534:Anonymous NFS User:/var/lib/nfs:/sbin/nologin

Assured that sweet Windows’ “guests” have access to my share

[root@ToughGuy ~]# chown -R root:nobody /Raid/
[root@ToughGuy ~]# chmod -R 775 /Raid/

Mapped guest user to login without a need of having a password prompt in smb.conf’s global settings!

[root@ToughGuy ~]# grep 'map to guest' /etc/samba/smb.conf
	map to guest = Bad Password

Btw, here’s my share:

[root@ToughGuy ~]# grep -A 5 Raid /etc/samba/smb.conf
	path=/Raid
	browseable=yes
	writeable=yes
	guest ok=yes
	public=yes

Restarted the service and look