search for: dougp

The sshd server has what I think is a serious flaw. There appears to be no way to turn off remote command execution. (someone please correct me if I am wrong). We have a server which uses a chroot jail, and rbash to severely limit what users can do on our system. The remote command bypasses all of that. ie. ssh user at host cat /etc/passwd will display the password file for the live system

I'm sorry for asking a really newbie question here. But I'm just missing something I guess. I've read the HOWTO for 3.0.0 and either I missed it or I just didn't understand it. I have 3.0.1Pre1 on RH 9 "Machine A" working as a domain controller with a win2000 SP4 box. I made a USB local CUPS printer on RH 9 "Machine B". I made a remote CUPS printer on

I have a samba based domain controller with a CUPS printer working fine. When I try to connect to a samba printer from Win2000 I get the following in the samba log: 2003/11/04 20:38:02, 0] printing/print_cups.c:cups_queue_get(889) Unable to get jobs for ipp://localhost/printers/goucho - client-error-not-found [2003/11/04 20:38:02, 0] smbd/service.c:set_admin_user(321) root logged in

Just a FYI for those that are interested. I found that to give admin privilages, in Windows, to Domain user "root" do this on tha Samba Domain Controller: net groupmap modify ntgroup="Domain Admins" unixgroup=root I can now install/remove software logged in as a domain user "root" on Win2k. I've never seen this directly stated before and thought some newbies

Winbind seems to have broke my roaming profiles. I have a 3.0.1Pre1 DC on RH AS 3.0 running with Win2000 SP4 clients logging in. Remote profiles worked well and then I added: winbind separator = + idmap uid = 10000-20000 winbind gid = 10000-20000 winbind enum users = yes winbind enum groups = yes template homedir = /home/win2000/%D/%U template shell = /bin/bash Added it to nsswitch.conf and

I need a little advice on finishing off a Samba PDC. I have Samba 3.0.0RC1 installed and working as a PDC on a Redhat AS 3.0 machine. It authenticates users nicely but the "roaming" profiles don't work. Tailing the samba log, I see the an attempt to access the users ntuser.dat file, which doesn't exist before the first logon, when logging in. The profile directory

After realizing my CUPS printername in /etc/cups/cupsd.conf must be the same as my samba printer sharename (I don't think it says that anywhere in any HOWTO, correct me if I'm wrong though) I am now getting to the printer resource but... Using Samba 3.0.1 and attempting to connect to a samba cups printer with Win2000 I am getting the following samba error: Returning domain sid for

Since I get so much from this list I thought I would share a project I've been working on and how it works with samba (3.0.1). It is Samba related so I hope it's not off topic. I've set up a HA solution with redundant Samba Domain Controllers throuth the "Heartbeat" package at: http://www.ultramonkey.org/download/heartbeat/1.1.3/redhat_9/ I have two "Redhat

Could I get some opinions on which type of Samba based printing is easier, CUPS or LPRNG, or just bybass Samba altogether. I'm looking at the Printing HOWTO by Kurt Pfeifle (Printing Support in Samba 3.0) and both look really complex. Anyone out there have any experience with printing services in Samba? Should I just stay away from samba printing and go direct to Network printers? What

I have ACL's enabled and am getting a new error, in the Samba log (V 3.0.1Pre1, when attempting to set permissions on a file through Win2000: get_domain_user_groups: primary gid of user [terry] is not a Domain group ! get_domain_user_groups: You should fix it, NT doesn't like that Do I need to create a group on the windows(2000) side? The entries in the domaingroup.map