So far, so good with 1.9.18p1 on HPUX 10.20 (kudos to the Samba team!).
However, I've got a question....
I'd like to be able to restrict access to some of our services, and can
certainly do so with the "hosts allow = " entry in smb.conf - it does
exactly what I want. But... I plan on bringing Samba up on a few campus
hosts, some of which have more extensive listings of PCs I wish to grant
access to than others. Since we're using HPUX, there's no hosts_access
service, and this leads to my question: is there a way to refer to a file
containing the allowed lists on the "hosts allow = " line, or must I
put
them all on one line? If the latter, is there a limit on the line length,
and/or can I extend a given line by using a backslash ("\") or
something
else as a line continuer?
c
--
Clifford Green Internet - green@umdnj.edu
Academic Computing Services voice - 732-235-5250
UMDNJ-IST fax - 732-235-5252
Whatever your labors & aspirations, in the noisy confusion of life keep
peace with your soul.
Hi all, I have a samba 2.0.9 server acting as a print server for one of our classrooms. we have recently moved our machines onto dhcp instead of static ip's. Before I had hosts allow = ip address of about 30 machines. Now I have to put the full hostname and domain name of the achines so that it all works. ie hosts allow = machine.domain. However samba won't start as it says string overflow by 56 in safe_strcpy. can anyone suggest a fix to this problem. Cheers ------------- Kristyan Osborne IT Assistant Manager Longhill High School
Problem is that samba uses pstrings which are fixed length buffers for the smb.conf parameters. And you hosts allow line is longer than that. Bottom line is, if you MUST have security at this level (ie you must restrict connections to a certain set of machines), then you will have to determine some way to shorten your hosts allow list: For instance, if your dns or /etc/hosts file is doing it's job, you SHOULDN'T need to put the domain part. If you are using dns, you can specify domains to search for machine names that don't have domains explicitly appended. see man resolv.conf for more information... Hope this helps, Don -----Original Message----- From: Kristyan Osborne [mailto:kris@longhill.brighton-hove.sch.uk] Sent: Thursday, February 14, 2002 5:01 AM To: Samba (E-mail) Subject: [Samba] hosts allow Hi all, I have a samba 2.0.9 server acting as a print server for one of our classrooms. we have recently moved our machines onto dhcp instead of static ip's. Before I had hosts allow = ip address of about 30 machines. Now I have to put the full hostname and domain name of the achines so that it all works. ie hosts allow = machine.domain. However samba won't start as it says string overflow by 56 in safe_strcpy. can anyone suggest a fix to this problem. Cheers ------------- Kristyan Osborne IT Assistant Manager Longhill High School -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Hi, when using non static ip's do you have to do anything cleaver to samba. In /etc/resolve.conf there is: domain longhill.brighton-hove.sch.uk nameserver 10.108.1.56 If I put hosts allow = pc406 under a share it will deny me access. If I put pc406.longhill.brighton-hove.sch.uk it allows me access, reading the man pasges it states that I should be able to have just pc406. Can anyone help me on this. Cheers ------------- Kristyan Osborne IT Assistant Manager Longhill High School
opps a typo, should be /etc/resolv.conf, any ideas???
-----Original Message-----
From: Joel Hammer [mailto:Joel@HammersHome.com]
Sent: 27 February 2002 22:08
To: Kristyan Osborne; samba@lists.samba.org
Subject: Re: [Samba] hosts allow
I assume that is just a typo below in /etc/resolve.conf.
^
Joel
On Wed, Feb 27, 2002 at 05:51:21PM -0000, Kristyan Osborne
wrote:> Hi,
>
> when using non static ip's do you have to do anything cleaver to
samba.> In /etc/resolve.conf there is:
>
> domain longhill.brighton-hove.sch.uk
> nameserver 10.108.1.56
>
> If I put hosts allow = pc406 under a share it will deny me access. If
I> put pc406.longhill.brighton-hove.sch.uk it allows me access, reading
the> man pasges it states that I should be able to have just pc406.
>
> Can anyone help me on this.
>
> Cheers
>
> -------------
> Kristyan Osborne IT Assistant Manager
> Longhill High School
>
>
> --
> To unsubscribe from this list go to the following URL and read the
> instructions: http://lists.samba.org/mailman/listinfo/samba