Samba lets you connect to a public share with invalid credentials
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
Files |
Confirmed
|
Low
|
Unassigned |
Bug Description
Files/Samba let me connect as a non existing user to public share (shared as guest)
I don't know if that's normal but this weird.
I try to connect to smb://WORKGROUP
Files asks me for a password. I enter a bogus password for this account that doesn't exist and Files displays the folder.
Is it because the SAMBA share is public? Is it because I'm already connected to it via a another tab (see the multiple connections to the same folder in the sidebar)
Each connection with a different set of credentials appears as another entry in the sidebar but you can only distinguish them by looking at the tooltip. I haven't investigated whether there are any problems having multiple connections like this.
I'm not sure what is SAMBA's responsibility or what Files'. At least the ui on the sidebar could be sorted out to imply that those connections with invalid credentials point to the same thing
Changed in pantheon-files: | |
status: | New → Confirmed |