summaryrefslogtreecommitdiff
path: root/docs/smbdotconf/security
diff options
context:
space:
mode:
authorJeremy Allison <jra@samba.org>2007-04-11 21:00:50 +0000
committerGerald W. Carter <jerry@samba.org>2008-04-23 08:47:31 -0500
commit9729d43b53e7183f80c8b41dd8ed91e10421f71e (patch)
tree251f82dac025272feebd4caa613d0e20ec3bc463 /docs/smbdotconf/security
parent6683280eb85e358c4a5ddf7e533af4b85b3318d2 (diff)
downloadsamba-9729d43b53e7183f80c8b41dd8ed91e10421f71e.tar.gz
samba-9729d43b53e7183f80c8b41dd8ed91e10421f71e.tar.bz2
samba-9729d43b53e7183f80c8b41dd8ed91e10421f71e.zip
Document the fact this doesn't work with "security=server".
Fixes bug #4475. Jeremy. (This used to be commit 4931390610baa77e0881dcdf3dd1b25a3ea12776)
Diffstat (limited to 'docs/smbdotconf/security')
-rw-r--r--docs/smbdotconf/security/maptoguest.xml12
1 files changed, 8 insertions, 4 deletions
diff --git a/docs/smbdotconf/security/maptoguest.xml b/docs/smbdotconf/security/maptoguest.xml
index 2dc6605b39..0f680ae71c 100644
--- a/docs/smbdotconf/security/maptoguest.xml
+++ b/docs/smbdotconf/security/maptoguest.xml
@@ -6,8 +6,8 @@
<description>
<para>This parameter is only useful in <smbconfoption name="SECURITY">
security</smbconfoption> modes other than <parameter moreinfo="none">security = share</parameter>
- - i.e. <constant>user</constant>, <constant>server</constant>,
- and <constant>domain</constant>.</para>
+ and <parameter moreinfo="none">security = server</parameter>
+ - i.e. <constant>user</constant>, and <constant>domain</constant>.</para>
<para>This parameter can take four different values, which tell
<citerefentry><refentrytitle>smbd</refentrytitle>
@@ -56,11 +56,15 @@
<para>Note that this parameter is needed to set up &quot;Guest&quot;
share services when using <parameter moreinfo="none">security</parameter> modes other than
- share. This is because in these modes the name of the resource being
+ share and server. This is because in these modes the name of the resource being
requested is <emphasis>not</emphasis> sent to the server until after
the server has successfully authenticated the client so the server
cannot make authentication decisions at the correct time (connection
- to the share) for &quot;Guest&quot; shares.</para>
+ to the share) for &quot;Guest&quot; shares. This parameter is not useful with
+ <parameter moreinfo="none">security = server</parameter> as in this security mode
+ no information is returned about whether a user logon failed due to
+ a bad username or bad password, the same error is returned from a modern server
+ in both cases.</para>
<para>For people familiar with the older Samba releases, this
parameter maps to the old compile-time setting of the <constant>