samba - Sep 2005 - Samba ADMIN$ share

Hello

I see, that "enable asu support = no: is available and I can point
ADMIN$ wherever I want. I just want ask if this setting will not have
any other impact to my current services (Samba installation is ADS
membership).

Can you provide more detailed explanation of "enable asu support = no"
impact ? Thank you !

With best regards
Martynas

 
-----Original Message-----
From: Gerald (Jerry) Carter [mailto:jerry@samba.org]
Sent: Monday, July 11, 2005 3:03 PM
To: Buozis, Martynas
Cc: Samba List
Subject: Re: [Samba] Samba ADMIN$ share

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Buozis, Martynas wrote:
| Hello
|
| Is it possible to make ADMIN$ share (Samba 3.0.14a) world writeable 
| and pointing to specific directory ? I am interested in building some 
| sort of honey pot that would allow virus to transfer files to ADMIN$ 
| under putting mode logging around. Any other solutions with samba ?

Not in 3.0.14a, but in 3.0.20 (when it is released), you will be able to
set 'enable asu support = no' and create an [admin$] file share in
smb.conf.








cheers, jerry
====================================================================Alleviating
the pain of Windows(tm)      ------- http://www.samba.org
GnuPG Key                ----- http://www.plainjoe.org/gpg_public.asc
"I never saved anything for the swim back."     Ethan Hawk in Gattaca
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.0 (GNU/Linux)
Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org

iD8DBQFC0m4YIR7qMdg1EfYRAvB4AJ9rpV3LP6nJH7W80khuAn9tRM/acgCgyNec
froCR1lmbgovHK/Fw+l+NsQ=Ttji
-----END PGP SIGNATURE-----

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Buozis, Martynas wrote:
> I see, that "enable asu support = no: is available and 
> I can point ADMIN$ wherever I want. I just want ask if
> this setting will not have any other impact to my current
> services (Samba installation is ADS membership).
> 
> Can you provide more detailed explanation of "enable asu 
> support = no" impact ? Thank you !
There are a few workarounds in the code to deal
with "Advanced Server for Unix" clients.  One is
to hard code an [admin$] service as a IPC share.
For people with no ASU servers on their network,
setting 'enable asu support = no' will make no
difference.  And in fact it will probably become the
default setting in some future release.





cheers, jerry
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.0 (GNU/Linux)
Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org

iD8DBQFDMU8zIR7qMdg1EfYRAozDAJ9jqmD2M26onlP9lWXzDXhiWK4yNwCfWpMz
yMdkQGt3oHL5clSTRqQ8wEM=AsTj
-----END PGP SIGNATURE-----