NETGEAR is aware of a growing number of phone and online scams. To learn how to stay safe click here.
Forum Discussion
Solved
Guest User and Group
On my newly installed RND31400 and recently upgraded to OS 6.5 I appear to have a Guest user (uid=99) and Guest group (gid=99). admin@NAS02-24Devon:~$ id guest
uid=99(guest) gid=99(guest) groups=99...
It is true that by default you can see all the shares with SMB (even ones you can't access).. That's because the permissions on the data volume itself allow this. As you know, "home" and "data" are set up differently (so they aren't shown unless you use admin credentials).
You can hide a share so it isn't shown,but then it isn't visible to anyone (unless they set up their PC to show hidden files).
I'm not sure why AFP isn't consistent.
ReadyNASNVUser wrote:
Suggestion: Wouldn't it be good, for transparency, if user and group guest were visible in FrontView?
It would be useful if all built-in accounts were listed (as read-only), so you'd know those accounts existed.
ReadyNASNVUser wrote:
Oughtn't you be able to use the "guest" user to create "anonymous" access - rather than having two differnt terms guest and anoymous in the UI?
Perhaps, though I'm not sure we need two ways to do this.
Thanks StephenB.
None of the shares are mountable by user guest. As per the 2nd screenshot above - when trying to mount they all give this error.
What I'm surprised about is that although "anonymous" is unchecked in Network Access for all the shares in the 1st screenshot I can still see a list shares when connecting via SMB as guest.
Compare this to connecting using AFP - when I can't get any list of shares. Selecting "Guest" in the login dialog for AFP and clicking OK gets a "connection failed" message. With SMB selecting "Guest" in the login dialog gets a "successsful login" and displays the list of shares in the 1st screenshot - even though you can't then mount any of the shares.
As requested here's a screen shot of the network access settings for one of those shares "USB_HDD_5":
Thoughts on this difference between SMB and AFP?
Suggestion: Wouldn't it be good, for transparency, if user and group guess were visible in FrontView? Oughtn't you be able to use the "guest" user to create "anonymous" access - rather than having two differnt terms guest and anoymous in the UI?
It is true that by default you can see all the shares with SMB (even ones you can't access).. That's because the permissions on the data volume itself allow this. As you know, "home" and "data" are set up differently (so they aren't shown unless you use admin credentials).
You can hide a share so it isn't shown,but then it isn't visible to anyone (unless they set up their PC to show hidden files).
I'm not sure why AFP isn't consistent.
ReadyNASNVUser wrote:
Suggestion: Wouldn't it be good, for transparency, if user and group guest were visible in FrontView?
It would be useful if all built-in accounts were listed (as read-only), so you'd know those accounts existed.
ReadyNASNVUser wrote:
Oughtn't you be able to use the "guest" user to create "anonymous" access - rather than having two differnt terms guest and anoymous in the UI?
Perhaps, though I'm not sure we need two ways to do this.
NETGEAR Academy
Boost your skills with the Netgear Academy - Get trained, certified and stay ahead with the latest Netgear technology!
Join Us!
