similar to: Problems with Samba and security hardened WinXP SP2 clients

Thanks! Setting spnego = yes worked perfectly! > We're running Fedora Core and Samba-3.0.8-0.pre1.3 and we're authenticating > our Windows XP users against Active Directory running on Windows 2003. > Everything works fine! > > But now we're trying to secure and harden our WinXP machines and now when > any user logged into a secured WinXP they get the errormessage

Microsoft has an add on for Windows 2003 SP1 that will do access based enumeration. This is great because of "out of sight, out of mind". If the user doesn't have privilege to access the directory or file it doesn't show up in the directory listing. http://www.microsoft.com/windowsserver2003/techinfo/overview/abe.mspx Any idea when samba will be able to do the same (if it

I have a windows 2003 server joined to my domain. I'd like to have IIS 6.0 on the 2k3 server authenticating against samba so that windows sharepoint services can be used. I've tried getting NTLM authentication working following instructions at http://www.microsoft.com/technet/prodtechnol/WindowsServer2003/Library/IIS/7258232a-5e16-4a83-b76e-11e07c3f2615.mspx?mfr=true but I'm not

As many of us suffer this problem I would like to share my success with the list. This weekend I made this configuration work ! After this procedure you can access the samba machine, from any client (Win-XP, Win2k, Win2k3, Win9x and WinNT) using \\samba-netbios-name\share-name (using kerberos) or \\samba-ip-address\share-name (using NTLM) Debian Woody 3.0R2 Samba-3.0.4 MIT Kerberos 1.3.4 Windows

Hi all, I have some problem with xm save/restore in Xen-4.0.0 & linux-2.6.31.13, First, the /etc/init.d/xendomains seems do not work properly because of bash version. So I modified it as follow: root@r02k08027 # diff -up /etc/init.d/xendomains /etc/init.d/xendomains_31 --- /etc/init.d/xendomains 2010-04-08 00:12:04.000000000 +0800 +++ /etc/init.d/xendomains_31 2010-04-19

Hi all, I have some problem with xm save/restore in Xen-4.0.0 & linux-2.6.31.13, First, the /etc/init.d/xendomains seems do not work properly because of bash version. So I modified it as follow: root@r02k08027 # diff -up /etc/init.d/xendomains /etc/init.d/xendomains_31 --- /etc/init.d/xendomains 2010-04-08 00:12:04.000000000 +0800 +++ /etc/init.d/xendomains_31 2010-04-19

Hello, I'm trying to create a vpn using TINC with a WindowsServer2003 as client, but I'm receiving the following messaging when running "tincd -n vpn -D -d5" -------------------- ... Trying to connect to server <...> Timeout from server <...> during authentication Could not set up a meta connection to server ... -------------------- I tried the same tinc

When I set the 'maximum password age' to 0, my password expired immediately after I did a smbpasswd. Shouldn't setting it to 0 mean the password will never expire? Or are there any other way to set password to never expire? Here is the microsoft's interpretation on 'maximum password age':

I tried yesterday. During the install it yacks at trying to install the application server that comes with Java Studio Creator. Complains about lacking libstdc++ or compat-libstdc++ or something like that. Anyone see this or know what to do about it? I ask here in case there is some trick to getting a piece of software (that's obviously looking for one version of libstdc++) to see what's

After a long and ardous search (I didn't find anything on the mailing lists though weird) -- I've found the gold at the end of the rainbow. It appears that domain controllers in Active Directory will by default, require digital signatures (and perhaps encryption) for the smb protocol. This breaks *DOS/LANMAN* clients to connecting to Windows 2003 and of course versions of samba less than

Has anyone looked into creating custom templates for Microsoft's System Policy editor ? I like the idea of managing workstations through the NTConfig.POL file, but the included templates are quite a bit outdated. Does anyone know if it would be worth-while to take the time and create an updated Template to add policies to manage newer features of Windows 2000/XP through the NTConfig.POL

Hi all, Please forgive what may be an OT question: I'm considering using hardened php and am interested in any comments which may be offered regarding hardened php and CentOS5. For reference: http://www.hardened-php.net/hardening_patch.14.html Is hardened php available as an RPM from any of our fine CentOS repositories? If not, I'd feel less inclined to use it as it affects core areas

Has anyone experienced any issues with Samba (3.0.24-r3), specifically with ADS domain joins, running on Hardened Gentoo 2007.0 (kernel 2.6.21 / AMD64)? I get "CLDAP Request Failed" error messages when attempting to do a net ads join, which has been successful with numerous other systems. This is familiar territory for us and a new issue never seen before. Thanks.

Hi list, Is there suhosin patched php 5.2+ available for centos 6? -- Eero

Hi, I am running nut with megatec driver accessing ttyS0 as user nut on "standard" kernel (gentoo-sources). It works fine. However, I just built a hardened kernel on a new gentoo machine and have no experience with it. NUT (upsdrv) is failing because it says it doesn't have permission to access ttyS0 even though nut is within the appropriate group. I can add user = root in ups.conf

Skipped content of type multipart/alternative-------------- next part -------------- A non-text attachment was scrubbed... Name: banner.gif Type: image/gif Size: 8818 bytes Desc: not available Url : http://lists.digium.com/pipermail/asterisk-users/attachments/20041231/593be1e1/banner.gif

Because of a Fedora bug in libtool[1], some libguestfs tarballs that I built contain a hard-coded path to a 'redhat-hardened-ld' linker script inside libtool. You will find that on non-Fedora/RHEL/CentOS platforms, the build will fail with an error similar to this: gcc: error: /usr/lib/rpm/redhat/redhat-hardened-ld: No such file or directory The affected tarballs are:

Can anyone recommend a hardened CentOS distro?

Hi, Microsoft some time ago introduced Hardened UNC Paths, and in April published the Badlock security fixes, which seem to be related to that. Samba at the same time published versions 4.4.1 (and 4.4.2). Even after reading the release notes of Samba 4.4.1 several times, I still do not know whether I must manually adjust smb.conf to be protected from these vulnerabilities. What I do know is

Installed R-devel 3.2.3 on a vanilla F23 box. Installing any package with C code fails with: gcc: error: /usr/lib/rpm/redhat/redhat-hardened-cc1: No such file or directory This parameter originates from R's CFLAGS: $ R CMD config CFLAGS -O2 -g -pipe -Wall -Werror=format-security -Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fstack-protector-strong --param=ssp-buffer-size=4 -grecord-gcc-switches