similar to: Howto open NULL session with samba clients ?

I have a couple of Samba (2.0.7 & 2.2.0) servers I scanned with Nessus and they reported a security hole of "Possible to login to the remote host using a NULL session" I have a couple of NT servers I disabled with a registry edit. Is there a way to prevent this on the Samba servers or is it evan a valid issue? Thanks Mike

Hello, I am running Samba 2.2.5 (built from source) on a Linux 7.3 machine. I have samba setup to use domain authentication and everything is working fine. The security administrator did a scan on the Windows 2000 server being used for authentication. He found a vulnerability attributed to the fact that winbindd needs null sessions on the W2k machine to be enabled (since winbindd sends a null

Hi, I am running 2.2.5 and I would like to know if the "restrict anonymous" as been implemented correctly, as it was supposed to behave from the start, in order to deny ALL anonymous connections as stated in the man : "When restrict anonymous is yes, all anonymous connections are denied no matter what they are for." Ive been reading some dev mailing lists and someone said

Hi All, I would like to know if this is possible and if possible what is the complexity. Consider a CIFS client, SAMBA Server1 and Samba Server2. Say a session is established between a CIFS client and SAMBA server1. Is it possible for the SAMBA server1 to transfer/redirect/reestablish the connection to SAMBA server2 without the CIFS client knowing about this? The session between the CIFS

Hi everyone, there have already been some talk in the past about the null session access on samba, and that keeping "restrict anonymous" parameter below level 2 was necessary for NT4 domain support. [1] However I was wondering if it could be changed. For instance, on a samba4.4.5 AD with the default settings, when you run the following command, you'll get the domain user list

The usage for the "rpcclient" command shows: Usage: rpcclient server [options] However, (on HPUX 11 anyway) it only works as: Usage: rpcclient [options] server Looking in the source, it is because the "getopts" is ran first before the server name is extracted from the command line arguments. I don't know if "getopts" ignors non-args on other platforms, but

Is there a way to make rpcclient support ntlmv2? When I configure my server to only accept ntlmv2 logins, my rpcclient stops working. I tried the approach needed to make TNG's rpcclient use ntlmv2 (a line like "client ntlmv2 = auto" in smb.conf), but it didn't work. Thanks, Dave __________________________________________________ Do You Yahoo!? Yahoo! - Official partner of 2002

Is it possible to point rpcclient at a samba PDC and change the user's password? With rpcclient I can "logon" to the PDC as someone with admin privilages (to do adddriver, etc..) from a remote machine. smbpasswd -r seems to provide no similiar functionality.

I have been searching for information about implementing Logon Hours with a Samba 2.2.5 PDC (or for that matter any version of SAMBA) but haven't yet noticed any postings or correspondence. I have set up a a Samba PDC and have mapped shares, authenticated users, blah blah blah, .... everything seems to work fine. I checked with 'rpcclient' to see what sort of information is

I keep hoping for better wasy to remotely manage windows machines through samba. In the very old samba-tng there was an rpcclient that could connect to a remote machine and do various things like read/write the registry, grab event logs, etc. I could never get it to work very well and waited for a better one. The trouble is the rpcclient program in samba-current doesn't have these features.

When BDC will not make any changes in ldap, is it safe to not set any *script paramater in smb.conf? --beast

Hello What is the purpose of Roman numbering of pages in Samba HOWTO Collection? Cl<

Sorry forgot the subject, Evolution dumped on me in the middle of composing the first time round. I'm getting the following errors. How do I get rid of the max on session IDs? [2001/12/03 09:11:00, 1] smbd/session.c:session_claim(88) session_claim: out of session IDs (max is 3000) [2001/12/03 09:11:00, 1] smbd/password.c:register_vuid(316) Failed to claim session for vuid=100

Hello! I've got a problem connecting my Linux Mandrake 8.0 box running samba-2.2.0-5mdk to a Windows server. I've been given the IP-Adress, Sharename and username: IP\Share: \\164.56.65.199\transfer Username: John Doe (Note: It's not really "John Doe", but another name, but also with a blank.) There's no password.

Hello All, I am trying to compile Samba on POSIX under OpenVMS on a DEC 2000 AXP, however I am having difficulty defining the right FLAGSM and LIBSSM in the Makefile. So thus I'm having trouble getting the correct #includes, can anyone help? Regards, Gavin Butler -------------- next part -------------- A non-text attachment was scrubbed... Name: not available Type: application/ms-tnef

I'm new to SAMBA and to Linux. Am trying to replace windows file and print servers with RedHat9. I set up the server and installed Samba 3.0.0. I had everything running fine for two weeks(file and print sharing). Yesterday I must have tweaked something, because now I cannot print! I can connect to the printer via Network Neighborhood, but print jobs do not make it to the printer. I still

I am using PAM and pam_smbpass.so with Samba 2.999 (Debian sid package). If, in /etc/pam.d/samba, I set session required pam_smbpass.so then login fails, and the log says: [2002/08/04 15:43:26, 0] auth/pampass.c:smb_pam_error_handler(73) smb_pam_error_handler: PAM: session setup failed : Module is unknown [2002/08/04 15:43:26, 1] smbd/session.c:session_claim(103) pam_session

Hi, I am trying to list the shares on a windows ME machine and I am getting the following [root]# smbclient -L 192.168.0.253 added interface ip=192.168.0.1 bcast=192.168.0.255 nmask=255.255.255.0 session request to 192.168.0.253 failed (Called name not present) session request to 192 failed (Called name not present) session request to *SMBSERVER failed (Called name not present) I have also tried

Hi, I like to kow if there is a rpc call to power down a remote machine like rpcclient -c"shutdown -f -t0" remotemachinename moreover it would be great if there is a command to execute a exe or bat on a remote w2k machine. thanks hpb

Not sure, I'm reopening an OLD thread here (sorry). I need some answers, looking somewhere I found this: http://msdn.microsoft.com/library/default.asp?url=/library/en-us/dnkerb/html/MSDN_PAC.asp I'm not sure, I just gave it a brieft read. Can't this be used to include PAC data on a kerberos ticket in order to use the kerberos autentication on win2k/xp? I know that it also