[Pkg-samba-maint] Bug#423971: cifs: -o guest yields root login

[Christian Perrier]

Quoting martin f krafft (madduck at debian.org):
> Package: smbfs
> Version: 3.0.24-6
> Severity: normal
> File: /sbin/mount.cifs
> 
> I cannot mount cifs as guest:
> 
>   piper:~# mount -t cifs -o guest //wall/pub /mnt --verbose
>   parsing options: rw,guest
> 
>   mount.cifs kernel mount options unc=//wall\pub,ip=192.168.14.1,user=root,ver=1,rw 
>   mount error 13 = Permission denied
> 
> see the user=root. The server logs at debuglevel 3 also show that
> it's root trying to log in.
> 
>   [2007/05/15 00:20:07, 3] smbd/sesssetup.c:reply_sesssetup_and_X(1010)
>     sesssetupX:name=[CIFS_LINUX_DOM]\[root]@[192.168.14.3]
> 


OK, trying to reproduce your bug without wrong assumptions:

root at mykerinos:~> mount -t cifs -o guest //localhost/public /mnt --verbose
parsing options: rw,guest

mount.cifs kernel mount options unc=//localhost\public,ip=127.0.0.1,user=root,ver=1,rw,guest
root at mykerinos:~> mount
.../...
//localhost/public on /mnt type cifs (rw,mand)


and the samba logs:

[2007/06/15 14:23:12, 1] smbd/service.c:make_connection_snum(1033)
  127.0.0.1 (127.0.0.1) connect to service public initially as user nobody (uid=65534, gid=65534) (pid 26564)



smb.conf:

[global]
   message command = /bin/sh -c '/usr/bin/linpopup "%f" "%m" %s; rm %s' &
   load printers = no
   workgroup =  DRIS
   os level = 0
   local master = no
   server string = Portable Christian Perrier 34438
   security =  user
   map to guest = Bad User                   
   printing = cups

[public]
directory mask=0700
browseable=yes
comment=Public
read only=no
create mask=0770
public=yes
path=/var/tmp/samba-test




Do you still reproduce that problem?

If so, we need to track down the differences between our systems.

Can you post your smb.conf file and, eventually, try to reduce it top
the very minimum?

The bug was reported against 3.0.24, so forst attempt would be to try
reproducing with 3.0.25a from unstable.

The, eventually, use another kernel version if you can.


-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: Digital signature
Url : http://lists.alioth.debian.org/pipermail/pkg-samba-maint/attachments/20070615/7fb87857/attachment.pgp