Comment 73 for bug 32067

It's much worse than user vs. share.

Something must do name resolution. Probably the simplest way is hosts with
server names (not FQDN). Without it, the Gnome browser refuse to display
anything and gives no useful error message other than I can't do that.

The fastest route to a behind a gateway Windows Network is share. That only
requires running the Windows network wizard, setting up fixed IP addresses,
setting up a hosts file on all the computers on the network and replacing
smb.conf with a very simple configuration (but not one obvious to any but a
fairly sophisticated user).

Of course it is insecure. Running Windows file sharing without a gateway
router is insane in the first place. Of course, one of the Windows boxes may
be hooked. Is there any reason to protect Windows users beyond a warning?

Jim

On 2/3/08, Ralf Nieuwenhuijsen <email address hidden> wrote:
>
> @soren
>
> I am sorry for my tone of voice.
> I was getting upset, not by the bug itself, but how it is dealt with.
>
> For years now, there is broken GUI functionality in the desktop. No user
> understands why it is broken.
> If you would ask the user 'what do you expect?' .. they would say: 'i
> chose to share folder X, but it does not work'
> What did they _expect_? They expected it to work _without_ requiring a
> password.
>
> During all those years people have complained about this. We are told it
> is insecure. None of _us_ understand _why_.
>
> You, being the expert, obviously does understand it. But could please
> communicate why the behavior a desktop-user expects is bad?
>
> We can all imagine this behavior would be the wrong default for a
> server. But I didn't install server. I installed a desktop. I didn't
> share all my files, the GUI already had me pick which folder(s) to
> share. I choose things like my music and my photo's.
>
> Again, my apologies for my tone. Could you please give us an official
> statement what is wrong with us, wanting to share files without a
> password? Why shouldn't we do this?
>
> Thank you in advance, in name of all frustated desktop-users that as
> this point. We would really like an explenation.
>
> --
> the security parameter must be set to share, not user, in smb.conf -
> Smb/Gnome sharing broken
> https://bugs.launchpad.net/bugs/32067
> You received this bug notification because you are a member of Ubuntu
> Server Team, which is a bug contact for samba in ubuntu.
>