Ivorde Unix/Linux/Database/Web/Mail Forum

View unanswered posts
View active topics
It is currently Thu Feb 23, 2012 7:11 am


Ftp, sftp, scp, rsync and other data transfer daemons.

Bookmark this article:

Author Message
debuser
Post  Post subject: How to disable anonymous access in samba 3  |  Posted: Sat Dec 10, 2011 12:08 am

Joined: Thu Aug 06, 2009 9:48 am
Posts: 90

Offline
Save on Delicious
By default, samba on debian allows anonymous limited access (user doesn't provide a password can see public shares).

man samba:
Quote:
restrict anonymous (G)

The setting of this parameter determines whether user and group list information is returned for an anonymous connection. and mirrors the effects of the

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\
Control\LSA\RestrictAnonymous

registry key in Windows 2000 and Windows NT. When set to 0, user and group list information is returned to anyone who asks. When set to 1, only an authenticated user can retrive user and group list information. For the value 2, supported by Windows 2000/XP and Samba, no anonymous connections are allowed at all. This can break third party and Microsoft applications which expect to be allowed to perform operations anonymously.

The security advantage of using restrict anonymous = 1 is dubious, as user and group list information can be obtained using other means.


To disable anonymous access, set the above option to "2" in smb.conf file:
Code:
restrict anonymous = 2


Top
Display posts from previous:  Sort by  
Print view
Who is online
Users browsing this forum: No registered users and 0 guests
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot post attachments in this forum
Jump to:  
cronNews News Site map Site map SitemapIndex SitemapIndex RSS Feed RSS Feed Channel list Channel list


Delete all board cookies | The team | All times are UTC + 2 hours [ DST ]

Powered by phpBB © 2000, 2002, 2005, 2007 phpBB Group
DAJ Glass 2 template created by Dustin Baccetti

phpBB SEO