Re: [cobalt-users] Qube3 and Windows XP user volumes

[Parker Morse <morse@xxxxxxxxxxx>]

>> We've recently discovered that users with Windows XP don't get prompted for
>> passwords when they connect to user file space on our Qube3. That is, if I
>> fire up a WinXP machine in my office, I can see files in the "Private"
>> directories of any other user on our Qube, without being prompted for a
>> password. In fact, I can read and write to those files and directories.
> 
> As whom are you logged in on the XP machine?

When I reproduced this... I am the only user set up on this XP box, login
name "morse" which is also my (unprivileged) login name on the Qube. The XP
box had no reason to believe (or claim) that it was the admin user.

In other words, any unprivileged user could see any other unprivileged
user's network volumes on the Qube, with full rights. That's how the issue
came to my attention, from an unprivileged user.
 
> Sounds to me like a Samba misconfig.  You might have a domain
> trust relationship where Samba says, "Hi, XP machine, if you say
> that they're admin, it must be so!"

This is entirely likely. I doubt it's a MISconfiguration - the Qube's got
more seniority here than I do, and I've never mucked with Samba on it - and
everything works "fine" (that is, as expected) with Win<XP machines, and my
Mac. 
 
> Domain controller issues are my gut feel.

Again, possible, but my feeble grasp of our Windows network included the
suggestion that we don't have a domain controller at all - unless the Qube
is playing that role.

Looks like I need to learn some Samba.

pjm