From d7bb961859a3501aec4d28842bfffb6190d19a73 Mon Sep 17 00:00:00 2001 From: Andrew Bartlett Date: Fri, 3 Feb 2012 18:03:10 +1100 Subject: s3-auth: Remove security=share (depricated since 3.6). This patch removes security=share, which Samba implemented by matching the per-share password provided by the client in the Tree Connect with a selection of usernames supplied by the client, the smb.conf or guessed from the environment. The rationale for the removal is that for the bulk of security=share users, we just we need a very simple way to run a 'trust the network' Samba server, where users mark shares as guest ok. This is still supported, and the smb.conf options are documented at https://wiki.samba.org/index.php/Public_Samba_Server At the same time, this closes the door on one of the most arcane areas of Samba authentication. Naturally, full user-name/password authentication remain available in security=user and above. This includes documentation updates for username and only user, which now only do a small amount of what they used to do. Andrew Bartlett -------------- / \ / REST \ / IN \ / PEACE \ / \ | SEC_SHARE | | security=share | | | | | | 5 March | | | | 2012 | *| * * * | * _________)/\\_//(\/(/\)/\//\/\///|_)_______ --- libds/common/roles.h | 21 +++++++++++++++++++-- 1 file changed, 19 insertions(+), 2 deletions(-) (limited to 'libds/common/roles.h') diff --git a/libds/common/roles.h b/libds/common/roles.h index 19ea1c4dab..90281ba788 100644 --- a/libds/common/roles.h +++ b/libds/common/roles.h @@ -42,9 +42,26 @@ enum server_role { */ #define ROLE_DOMAIN_CONTROLLER ROLE_DOMAIN_BDC -/* security levels for 'security =' option */ +/* security levels for 'security =' option + + -------------- + / \ + / REST \ + / IN \ + / PEACE \ + / \ + | SEC_SHARE | + | security=share | + | | + | | + | 5 March | + | | + | 2012 | + *| * * * | * + _________)/\\_//(\/(/\)/\//\/\///|_)_______ + + */ enum security_types {SEC_AUTO = 0, - SEC_SHARE = 1, SEC_USER = 2, SEC_SERVER = 3, SEC_DOMAIN = 4, -- cgit