LFCS · Question #621
In the [global] section of the smb.conf file, the following parameter is set: map to guest = Bad Password Which of the following statements are true? (Select TWO correct answers.)
The correct answer is A. Users using an invalid password are treated as a guest account. D. This parameter is required to setup public shares on the samba server when the security parameter. The map to guest = Bad Password parameter in smb.conf causes users with invalid passwords to be treated as guest accounts, and it is essential for configuring public shares when security = user is enabled.
Question
Options
- AUsers using an invalid password are treated as a guest account.
- BUsers using an invalid password are rejected from accessing shares.
- CUsers will receive warning messages that they are using an incorrect password
- DThis parameter is required to setup public shares on the samba server when the security parameter
How the community answered
(58 responses)- A88% (51)
- B9% (5)
- C3% (2)
Why each option
The `map to guest = Bad Password` parameter in `smb.conf` causes users with invalid passwords to be treated as guest accounts, and it is essential for configuring public shares when `security = user` is enabled.
When `map to guest = Bad Password` is configured, any user attempting to authenticate to a Samba share with an incorrect password will not be denied access, but rather their session will be remapped to the guest account, allowing them to access resources available to anonymous users.
This statement is incorrect because `map to guest = Bad Password` explicitly maps invalid password attempts to a guest account, rather than rejecting them.
Samba typically does not provide explicit warning messages to clients about incorrect passwords when `map to guest = Bad Password` is active; it silently attempts to map the session to the guest account, which might result in direct access or a generic 'access denied' if guest access is not fully configured.
The `map to guest = Bad Password` parameter is necessary for setting up public or anonymous shares on a Samba server, especially when the global `security` parameter is set to `user`, as it allows unauthenticated users with incorrect passwords to be mapped to a guest account and gain access.
Concept tested: Samba guest access and authentication mapping
Source: https://www.samba.org/samba/docs/current/manpages/smb.conf.5.html
Topics
Community Discussion
No community discussion yet for this question.