Samba Web page



Самба 2.0: опция 'unix password sync'



From: "Eugene V. Demidov"

Опция 'unix password sync' была введена специально для
возможности плавного перехода на криптованную передачу
паролей без того, чобы заставлять каждого юзера, имеющего
accont на unix-тачке еще раз вводить свой пароль в smbpasswd.

Работает эта опция при отключенном 'encrypt passwords',
и Самба, после проверки на корректность пароля пользователя
по /etc/passwd (/etc/master.passwd) сама генерит smbpasswd.
Так что спустя разумное время, за который каждый хотя бы раз
залогинился, можно безболезненно включать 'encrypt passwords',
не подводя юзеров (коих может быть сотни) поочередно к консоли.

"Синхронизация" же путем "перетаскивания" паролей из /etc/passwd
(/etc/master.passwd) в smbpasswd, как уже говорил Andrey Zakharchenko,
требует изрядного машинного времени... :)


Samba and WinNT



All versions of Windows NT prior to 4.0 Service Pack 3 could negotiate
plain text (clear text) passwords. Windows NT 4.0 Service Pack 3 changed
this default behaviour so it now will only handle encrypted passwords.
The following registry entry change will re-enable clear text password
handling:

Run regedt32.exe and locate the hive key entry:
HKEY_LOCAL_MACHINE\system\CurrentControlSet\Services\Rdr\Parameters\

Add the following value:
EnablePlainTextPassword:REG_DWORD=1


При этом все равно на Linux придется проводить дополнительную
перерегистрацию пользователей - не только командой passwd, но и smbpasswd -
генерящую самбовские пароли.


у Самбы с настройками по умолчанию скрость записи была в 3 раза
больше чем чтения: Лечим: socket options = IPTOS_LOWDELAY TCP_NODELAY
Параметр logon path ИЗ smb.conf

Linux samba for WinNT



When Samba is configured with the 'security = server' option and the
'password server = Your_Windows_NT_Server_Name' option, then it will
redirect all access authentication to that server. This way you can
use Windows NT to act as your password server with full support for
Microsoft encrypted passwords.

Note also, that since release of samba-1.9.18 we now support native encrypted
passwords too. To enable encrypted password handling several things need to be
done:
1) In smb.conf [globals]:
encrypt passwords = yes
smbpasswd file = /path/smbpasswd
the standard path is /usr/local/samba/private/smbpasswd but this may be
platform specific.

2) Use "smbpasswd -a" to add all users to the smbpasswd file.






Original of this documernt


All samba servers have security hole. Fixed version is avalable since 27.9.97




Welcome to the SAMBA Web Pages. If you are wondering what Samba is, check
out the FAQ answer to What is Samba?

Smile! Samba is Free!

Please feel free to drop me a line if there is something you would like to see included.


=-=-=-=-=-=-=-=-=-=-=-=-=-=-=

Check out the align=absmiddle border=0 src="survey/sssmallnew.gif" alt="Samba Survey">now with 1350+ entries!


And people thought it didn't exist







At last check, the latest version (besides the alphas) was 1.9.16p11.
Check the change log if you want to be sure.

















You can find a lot of discussion on SAMBA in the
newsgroup comp.protocols.smb.





Sources


For information on where to find SAMBA, see the HREF="docs/samba.faq.html#S1Q3">Where can I get it? section of the FAQ, or just grab the latest release via FTP:samba-latest.tar.gz or WWW:HREF="/pub/samba/binaries/samba-latest.tar.gz">samba-latest.tar.gz (at last check, version 1.9.16p11. See the href="/pub/samba/cvs-log.html">change log to be sure - Note: the WWW copy may not be as up to date as the FTP copy).



Binaries - Have we got a binary for YOU!




Mirror Sites




SMB/CIFS Clients


* * *

* Microsoft

Microsoft's various clients, including WFWG3.11, LanMan, MSClient 3.0 for
DOS, can be found at ftp://ftp.microsoft.com/bussys/Clients/.
Check the ReadMe file for details at href="ftp://ftp.microsoft.com/bussys/Clients/README.NOW">ftp://ftp.microsoft.com/bussys/Clients/README.NOW.
Please Note, WinNT and Win95 don't need any extra client software in order to run Samba. These OS's come standard with TCP/IP which is all you need.

Security


Users of Windows 95 and WFWG should also check out the Security Patches








SAMBA Web Pages maintained by HREF="http://lake.canberra.edu.au/pwb/pwbhome.html">
Paul Blackman, Email: ictinus@lake.canberra.edu.au

SAMBA created by Andrew Tridgell, src="/images/mailto.gif" Alt="Email: "> samba-bugs@anu.edu.au

Помилка?

Дочати пiзнiше / подiлитися