search for: privledges

http://bugzilla.mindrot.org/show_bug.cgi?id=1105 Summary: Privledge Separation Product: Portable OpenSSH Version: 4.2p1 Platform: All OS/Version: All Status: NEW Severity: normal Priority: P2 Component: sshd AssignedTo: bitbucket at mindrot.org ReportedBy: giffordj at linkline.com

...have a severe problem with that. I'm running samba 2.0.4b on suse linux 6.1 and windows nt4 sp4, german version. I need the domain admin to be a member of the local admin group, If I log into the local domain as admin I cannot add the domain admin to the local admin group, because of miising privledges in the domain. If I log into the domain it's the same, because of missing privledges on the local workstation. User Administrator is member of the linux group root. In smb.conf I've set domain admin group = root. I would appreciate any hints for solving my problem# Regards Michael Krame...

There are a couple of bugs in the openssh-3.7.1p2. The aix_setauthdb function does not work with other types of authentication such as AFS/DFS. The loginfailed test in configure is not correct. Also, AIX can use the wtmp logging which I added in configure. Attached is the patch. Thanks, Matt Richards -------------- next part -------------- *** openssh-3.7.1p2/openbsd-compat/port-aix.c Mon Jul 14

I had to modify the file monitor_mm.c to get the privledge separation to work for Linux 2.0.36 (and above) and am passing on the patch to you; if there is a better place to send this, please let me know. I've included a new #define (USE_MMAP_DEV_ZERO) to select this patch, but am not including the patch to config.h---if there's a better name for it, please, by all means, change it.

I have been trying to setup two samba servers on Fedora Core 2 for the past 30 hours and am about to jump out a window. I'm simply trying to create a few shares that multiple WinXP clients can have readonly access to and a select few have write privilages. Also, a few shares that are are private for a select few users with write privilages. In all cases, anybody should be able to browse the

...how can you get full access to Swat. Obviously the root user gets all the access requiremnts but my own unix user only gets the Samba Documentation screen within Swat. I have tried adding my user id into admin users but this doesn't work. Is it only the root user that can have all the Swat privledges? Many thanks for your time. Kind Regards, Mark Parsons - Ernst and Young. Ernst & Young is proud to bring you Entrepreneur Of The Year - the prestigious global business awards for entrepreneurs. www.eoy.co.uk This e-mail and any attachment are confidential and contain proprietary infor...

I made an authentication system and I''m uncertain of the best way to go about hiding links on public pages meant for authenticated users (this is also different for people with various privledges but this isn''t the problem). I only know two ways to go about this: create a helper file and write a seperate authorization piece that verifies the user to show the URL and add the method to the links in the view page; or create a controller for the links where they''re verifi...

Hi all, this is quite off-topic, but I''m sure a lot of people here has experience in the area, so... I''m writing a website scraper script that needs to download a web page, traverse the (X)HTML tree and finally insert data and HTML pieces into a DB. Eventually this data will be served up as RSS and/or Atom. I''m currently using html/tree (htmltools); I''ve also

http://bugzilla.mindrot.org/show_bug.cgi?id=346 Summary: ssh fails with -C flag when connecting to a compression disabled server Product: Portable OpenSSH Version: -current Platform: ix86 OS/Version: Linux Status: NEW Severity: normal Priority: P2 Component: ssh AssignedTo:

...5 nmask=255.255.255.0 24219: session request to FILESERVER.LSV.RAIN failed (Called name not present) Password: 24219: session setup failed: ERRDOS - ERRnoaccess (Access denied.) SMB connection failed A coworker changes the uid and username, it works perfectly for him. I have domain administrator privledges on the fileserver. :wq! --------------------------------------------------------------------------- Robert L. Harris | Micros~1 : Senior System Engineer | For when quality, reliability at RnD Consulting | and security just aren't...

Greetings all I'm running Samba 3.0 on an Ubuntu box as a PDC and I'm having trouble changing passwords with XP clients - here's my smb.conf http://pastebin.com/m1bb6d4a6 I've played with a variety of "passwd chat" settings but no joy. I am trying to use pam_cracklib.so - here's my /etc/pam.d/common-password file: http://pastebin.com/m1a1d5f89 I've tried the

Hi guys, I have a working samba and openldap pdc which is actively being tested. I have a group of users that have specifics tools to use such as oracle client tools (sqlplus etc). I tried to logon as a test user and run the sqlplus but nothing happened, I tried adding this user to the local poweruser group but it produced the same result. Can this be achieved? It works fine if this user is a

Hey all, I have just compiled the 3.11.5 kernel from kernel.org to fix the ACPI wont shutdown issue, but I have a couple errors in dmesg I am trying to figure out. Can anyone point me in the right direction? The errors are: 1: dm_mod: module verification failed: signature and/or required key missing - tainting kernel 2: [drm] VGACON disable radeon kernel modesetting.

Hello all, I have a very annoying situation (at least at my end). I set up Samba 2.0.5 on a Digital UNIX 4.0F system sitting on a Compaq DS20 server with great success.... until recently. I set up three directory file shares with no problems, when I tried to set up a forth, quite a while after setting up the inital three, I tried to access it from a NT box, I got the message server not found,

http://blogs.computerworld.com/15082/omg_microsoft_patents_sudo_linux_and_macos_dead?source=CTWNLE_nlt_dailyam_2009-11-12 -- thanks ./francis -------------- next part -------------- An HTML attachment was scrubbed... URL: <http://lists.centos.org/pipermail/centos/attachments/20091112/1061174b/attachment-0003.html>

...> and group mail, and now the imap process can lock the INBOX. > > > > > imap should be the only one that needs to be setgid mail. > > Actually, I've looked at the dovecot source code. There is no way having > setgid on the executable will work. The source drops the privledges long > before it tries to do a dotlock. > > This is an upstream problem. > > For now, I've disable dotlock, and use fcntl instead, as that is what exim > uses anyways. Is dotlocking still a work in progress or are we missing something here? -- Jaldhar H. Vyas <jaldhar a...

Hi, I'm running samba, V3.0.20b-3.4-SUSE, on suse el9. I've successfully bound one machine to active directory, I can login to the local box using domain credentials. However, I can't get a second machine to the domain, using the exact same procedures. The machine claims to be bound, wbinfo -t returns "checking the trust secret via RPC calls succeeded" But, when I

X-PMC-CI-e-mail-id: 13726 Hi, I have been a successful user of Openssh for some time. I am attaching two articles from BugTraq. Hopefully, they show exactly the security problems reported in the BugTraq mailing list. [Pity that no one seemed to have bothered to contact the mailing list(s) for openssh development.] I am not sure what the right fixes would be. But at least, people need to be

System: 1800+ athlon OS: Redhat 8.0 I downloaded the latest tar.gz file from the homepage "wine-20021125" un-tared it via tar -zxvf Wine-20021125.tar.gz.... then cd to wine-20021125. From the latter directory I try to run the ./tools/wineinstall "as a user" and get this error: [JoKeR@WhItEWidoW wine-20021125]$ ./tools/wineinstall /bin/bash: /root/.bashrc: Permission

http://bugzilla.mindrot.org/show_bug.cgi?id=1105 markus at openbsd.org changed: What |Removed |Added ---------------------------------------------------------------------------- Summary|Privledge Separation |Privilege Separation ------- You are receiving this mail because: ------- You are the assignee for the bug, or are watching the