[SOLVED] Samba 3.10 config for anonymous Windows XP access?

[uhcafigdc]

Client computers from LAN and run Windows XP Home, with no domain controller.

They need to be able to browse/read/write to the samba share at any time without having to enter some kind of password.

This is the configuration I used for samba 2.6, and it works like this just fine:

[global]

        workgroup = workgroup
        netbios name = files3
        server string = files3

        level2 oplocks = no
        oplocks = no

        hosts allow = 192.168.1. 127.
        load printers = no
        guest account = aip
        log file = /var/log/samba/%m.log
        max log size = 50

        security = share
        encrypt passwords = yes

        socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192

[share]
        path = /home0/share
        writeable = yes
        guest ok = yes
        public = yes

However, since upgrading to Samba 3.10, this configuration does not work. The Windows XP clients can not access the share because it says they do not have permission.

What changed? How can I make this work again?

[uhcafigdc]

Still working on this... here is my smb.conf now:

[global]
     workgroup = WORKGROUP
     security = user
     map to guest = bad user
     guest account = someuser
     restrict anonymous = 0

[share]
     path = /share
     guest ok = yes

Here is my /etc/sysconfig/iptables:

# Firewall configuration written by system-config-firewall
# Manual customization of this file is not recommended.
*filter
:INPUT ACCEPT [0:0]
:FORWARD ACCEPT [0:0]
:OUTPUT ACCEPT [0:0]
-A INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT
-A INPUT -p icmp -j ACCEPT
-A INPUT -i lo -j ACCEPT
-A INPUT -m state --state NEW -m udp -p udp --dport 5404 -j ACCEPT
-A INPUT -m state --state NEW -m udp -p udp --dport 5405 -j ACCEPT
-A INPUT -m state --state NEW -m tcp -p tcp --dport 11111 -j ACCEPT
-A INPUT -m state --state NEW -m tcp -p tcp --dport 21064 -j ACCEPT
-A INPUT -m state --state NEW -m tcp -p tcp --dport 443 -j ACCEPT
-A INPUT -m state --state NEW -m tcp -p tcp --dport 22 -j ACCEPT
-A INPUT -m state --state NEW -m tcp -p tcp --dport 139 -j ACCEPT
-A INPUT -m state --state NEW -m tcp -p tcp --dport 445 -j ACCEPT
-A INPUT -m state --state NEW -m udp -p udp --dport 137 -j ACCEPT
-A INPUT -m state --state NEW -m udp -p udp --dport 138 -j ACCEPT
-A INPUT -j REJECT --reject-with icmp-host-prohibited
-A FORWARD -j REJECT --reject-with icmp-host-prohibited
COMMIT

This is a test machine and I set permissions for /share to 777.
Here is the output of ls -aldZ /share:

drwxrwxrwx. someuser someuser unconfirmed_u:object_r:default_t:s0 /share

When I click on the share from a Windows XP Home station on the same workgroup, I get the error

"\\sambashare\share" is not accessible. You might not have permission to use this network resource. Contact the administrator of this server to find out if you have access permissions. Access is denied.

I want to allow any computer on the LAN to read/write to this share, without being prompted for a username/password. There is no domain controller, or any other form of centralized user authentication on this network.

[uhcafigdc]

Problem solved. Turns out the selinux was running, and preventing samba from working.

Add "read only = no" to the [share] section, and I get the results I want.