Bug 236335

Summary:	User is not respected in samba url if guest account exists
Product:	[Frameworks and Libraries] kio	Reporter:	jens
Component:	smb	Assignee:	Unassigned bugs mailing-list <unassigned-bugs>
Status:	RESOLVED NOT A BUG
Severity:	normal	CC:	nate, niccolo
Priority:	NOR
Version:	unspecified
Target Milestone:	---
Platform:	Ubuntu
OS:	Linux
Latest Commit:		Version Fixed In:

Description jens 2010-05-04 17:06:25 UTC

Version:            (using KDE 4.4.2)
OS:                Linux
Installed from:    Ubuntu Packages

I have a Linux server running Samba so that everyone (guest) can read but you need to supply user and password to gain write access. When I'm trying to access the server using "smb://user@server/share/" in Konqueror or Dolphin I'm not asked for password and I'm silently logged in as guest (without write access).

I can use "smb://user:password@server/share/" to gain write access but then the password is displayed for all to see when i type it and it's also stored in the Konqueror's history.

Comment 1 Niccolo Rigacci 2011-01-02 18:40:07 UTC

Bug confirmed with KDE/Dolphin 4.4.5, on a Debian Squeeze box.

Setting a fake default user in "System Settings", "Sharing" does not help: after the default user logon failed, the guest logon is tried and succeed.

This is very annoying, because there is not a way to access a share as a non-guest user.

Storing the password in the URL exposes the passowrd in clear text to anyone doing "ps uax".

Comment 2 Nate Graham 2018-06-28 18:13:32 UTC

I'm afraid passwordless guess access is something that Samba no longer supports. :(