Browsing a standalone server without authenticating

[Dos_Box]

I should know the answer to this but dammed if I can remember. My problem is this:

 

I have a server spanning 2 seperate networks with shares to be accessed from both via dual homing. I've entred the server into DNS on both networks and I can see it fine. Some of the shares need to be browsed by users without authenticating against the stand alone server i.e. entering a username and password to access the share. How do I allow this to happen? I'm having a dumb day so please bare with me.

[_Bob_]

If i understood the question correctly you'll want to set up a trust between the two networks. You can then create groups in each network which have access to the files on your server. Not quite sure what you mean by 'standalone server'?

[ChrisH]

I assume he means a server without AD. I would have thought you would have got a box requesting authentication when you tried to access the shares but since you ahve posted this I assume not.... ?

[_Bob_]

oh as in not a member of either domain? Er, not sure on that one actually. I would just make it a member of one of the domains so that i could use the trust method. I suppose there must be a way to this tho.

[Dos_Box]

Trusts are out of the question. It must be visable to both seperate LANS, but allow easy access to either.

I installed the server, setup the shares and went looking for the relevent security options...and looking....and looking. Surely somewhere there must be a 'Allow unauthenticated users to view this folder\share' box\setting somewhere!!

 

P.S. No AD. All I want is a simple box.

[E1uSiV3]

What about the "everyone" group?

[ChrisH]

Enable guest, add the everyone group or authenticated users ? They will need to authenticate with some accounts on that box so you either need to copy all the user accounts from the main network or set up group user accounts and passwords.

[pooley]

Not sure about the security implications but enabling the "guest2 account will allow unauthenticated users access to your shares

[ChrisH]

I didnt mean specifically add guest to the ACL just enable the account. Im sure in an XP Peer to Peer enabling the guest account is the only way to access some shares with a different account etc or something like that.

[Dos_Box]

Bugger..Workgroup user limit....Hadn't thought of that!

[ChrisH]

Your using Server though right? If not I have seen seen a file on one of the websites that deals with intergrating all the patches into you source files that increases concurrent connections.

[SimpleSi]

If you convert the box to Linux then you can create a simple share using samba that does not require any authentication.

 

(I've done it this this week so I know it works :-) )

 

I've never put in two network cards into a Linux box but I'd presume that bit would be easy peasy :-)

 

regards

Simon

[Dos_Box]

Java problems with the RAID controller interface have negated this as an option. I spent 3 days trying to get Fedora and Mandrake working with my Adaptec RAID card to no avail

[SimpleSi]

Well- there's always the Win98SE option

 

Simon

[Geoff]

Java problems with the RAID controller interface have negated this as an option. I spent 3 days trying to get Fedora and Mandrake working with my Adaptec RAID card to no avail

 

Which Adaptec RAID controller? AFAIK they are all fairly well supported.

[Ric_]

@Dos_box: You should have tried a distro more geared towards servers than workstations (e.g. Debian - my favourite!)

[Dos_Box]

It's the Adaptec RAID monitring software. It's Java based :/

[Geoff]

Adaptec have Linux versions of their raid monitoring tools on their website. Without telling me which card you have I can't give you a direct link.

[Frazer]

DB this was mentioned in the lancsngfl forums under xp sp2 peer to peer problems and eventually fixed!

I hope this still applies to whatever os youre running (you didnt say, although im guessing server 2003 without ad? so this should apply)

 

Annnnyway, heres a repost:

Problem: Unable to browse to machines running windows xp over the network without creating accounts with same user/password. (we want to use guest/no password!)

 

Solution: Enable Guest account with a blank password then,

control pannel->administrative tools->local security policy->local policies->user right assignment, find 'Deny access to this computer from the network', double click. Guest will be part of the list, remove it, Apply/ok.

 

Not sure if thats a good idea for server tho :/ perhaps double check shares&permissions of everything else to make sure guest cant play around.

[tarquel]

er.....

 

Anonymous Logon > add that to the share / NTFS permissions of whatever shared folders you want to access without user authentication

 

I had to do something like this for a really [formerly] mixed up admin network lol

 

And theres no reason why it shouldn't work with hidden shared too

 

Cheers

N.