Bug 236335 - User is not respected in samba url if guest account exists
Summary: User is not respected in samba url if guest account exists
Status: RESOLVED NOT A BUG
Alias: None
Product: kio
Classification: Frameworks and Libraries
Component: smb (show other bugs)
Version: unspecified
Platform: Ubuntu Linux
: NOR normal
Target Milestone: ---
Assignee: Unassigned bugs mailing-list
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2010-05-04 17:06 UTC by jens
Modified: 2018-06-28 18:13 UTC (History)
2 users (show)

See Also:
Latest Commit:
Version Fixed In:


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description jens 2010-05-04 17:06:25 UTC
Version:            (using KDE 4.4.2)
OS:                Linux
Installed from:    Ubuntu Packages

I have a Linux server running Samba so that everyone (guest) can read but you need to supply user and password to gain write access. When I'm trying to access the server using "smb://user@server/share/" in Konqueror or Dolphin I'm not asked for password and I'm silently logged in as guest (without write access).

I can use "smb://user:password@server/share/" to gain write access but then the password is displayed for all to see when i type it and it's also stored in the Konqueror's history.
Comment 1 Niccolo Rigacci 2011-01-02 18:40:07 UTC
Bug confirmed with KDE/Dolphin 4.4.5, on a Debian Squeeze box.

Setting a fake default user in "System Settings", "Sharing" does not help: after the default user logon failed, the guest logon is tried and succeed.

This is very annoying, because there is not a way to access a share as a non-guest user.

Storing the password in the URL exposes the passowrd in clear text to anyone doing "ps uax".
Comment 2 Nate Graham 2018-06-28 18:13:32 UTC
I'm afraid passwordless guess access is something that Samba no longer supports. :(